295.560934][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.571889][ T3709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.582460][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.591072][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.603142][ T3709] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.612918][ T3709] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.623359][ T3709] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.632433][ T3709] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 12:39:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 12:39:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024000b0f000000000400000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x36, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xdd3c}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0xc252) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000020001102ffe000000000000002"], 0x28}}, 0x0) sendfile(r4, r3, 0x0, 0x100004001) 12:39:59 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) dup2(0xffffffffffffffff, r0) 12:39:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@dstaddrv6={0x1c, 0x84, 0xa, @local={0xfe, 0x80, '\x00', 0x0}}, @dstaddrv6={0x1c, 0x84, 0xa, @empty}, @sndrcv={0x2c}], 0x64}, 0x0) 12:39:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)=0xa4) 12:39:59 executing program 5: symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') symlink(0x0, 0x0) 12:39:59 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockname$inet6(r0, 0x0, &(0x7f0000000200)) 12:39:59 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000880)={0x1c, 0x1c}, 0x1c) 12:39:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000340)=ANY=[@ANYBLOB='A'], &(0x7f00000002c0)=0x8) [ 295.831468][ T27] audit: type=1804 audit(1662035999.781:4): pid=3810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir558623676/syzkaller.PN5J8J/1/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 12:39:59 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) [ 295.881419][ T3798] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.906733][ T3804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000000c0), 0x75868e745c6de4de) 12:39:59 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0x100, &(0x7f0000000140), &(0x7f0000000080)=0xb0) 12:40:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, @in, 0x8a3, 0x8000, 0x311}, 0x98) 12:40:00 executing program 1: socketpair(0x2, 0x5, 0x0, &(0x7f00000029c0)) 12:40:00 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 12:40:00 executing program 3: symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 12:40:00 executing program 5: r0 = socket(0x1c, 0x10000001, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 12:40:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f00000003c0)="d8", 0x1, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 12:40:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x10, 0x2}, 0x10) 12:40:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x100, &(0x7f0000000280)={0x10, 0x2}, 0x10) 12:40:00 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x44187ea40fc5a264, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x1, 0x0) 12:40:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendto$inet(r0, &(0x7f0000000180)="06", 0x1, 0x100, &(0x7f0000000280)={0x10, 0x2}, 0x10) 12:40:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) dup2(r2, r1) 12:40:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000), &(0x7f0000001000)=0x1000) 12:40:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 12:40:00 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r4 = dup2(r3, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x21, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) 12:40:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000001c0)="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", 0xff1, 0x0, &(0x7f0000000080)={0x10}, 0x10) 12:40:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@sndinfo={0x1c}], 0x1c}, 0x0) 12:40:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000380), &(0x7f00000003c0)=0x8) 12:40:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f00000000c0)={r3}, 0x8) 12:40:00 executing program 0: open(&(0x7f0000001300)='./file0\x00', 0x200, 0x0) 12:40:00 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000000080), 0x8) 12:40:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x100, 0x0, 0x0) 12:40:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 12:40:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000180)=@in={0x10, 0x2}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)='K', 0x1}], 0x1, &(0x7f0000000280)=[@prinfo={0x14}], 0x14}, 0x0) 12:40:00 executing program 3: socket(0x1c, 0x10000001, 0x84) 12:40:00 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) 12:40:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=[{0x10, 0x1, 0x1}], 0x10}, 0x0) 12:40:00 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 12:40:00 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000380)={0x1c, 0x1c, 0x3}, 0x1c) 12:40:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x6, 0x1, 0x30a}, 0x48) 12:40:00 executing program 3: socketpair(0x11, 0x3, 0x300, &(0x7f0000000000)) [ 296.719012][ T916] Bluetooth: hci3: command 0x041b tx timeout 12:40:00 executing program 5: socketpair(0x10, 0x2, 0x6, &(0x7f00000000c0)) 12:40:00 executing program 4: socketpair(0x2, 0x2, 0x73, &(0x7f00000000c0)) 12:40:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x100, 0x800, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 12:40:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x64f4b5f1d18c9b7a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000b05d25a800a8c6394f90224fc60050002090a000806053582c137153e3763e4018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 12:40:00 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0xffff, 0x41}, 0x48) 12:40:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)='b', 0x1}], 0x1}, 0x11) 12:40:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[{0x18, 0x1, 0x1, "cf5c34a4"}], 0x18}, 0x0) 12:40:00 executing program 2: r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, 0x0}, 0x0) [ 296.918651][ T3918] netlink: 154456 bytes leftover after parsing attributes in process `syz-executor.1'. 12:40:00 executing program 4: socketpair(0x18, 0x0, 0x1, &(0x7f00000016c0)) 12:40:00 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1}, 0x40) 12:40:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[{0x10, 0x1, 0x2}], 0x10}, 0x0) [ 296.996246][ T3918] netlink: zone id is out of range [ 297.001451][ T3918] netlink: zone id is out of range 12:40:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000f00), 0x0, &(0x7f0000000f80)=[{0x18, 0x1, 0x1, "a28d93ac"}], 0x18}, 0x0) 12:40:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=[{0x18, 0x1, 0x1, "a28d93ac"}], 0x18}, 0x0) 12:40:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000b05d25a80638c6394f90124fc60040002400a000000053582c137153e371448018000f01700d1bd", 0x33fe0}], 0x1}, 0x300) 12:40:01 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file1\x00') 12:40:01 executing program 3: mkdir(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) [ 297.173799][ T3942] netlink: 194472 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.226254][ T3942] netlink: zone id is out of range [ 297.231830][ T3942] netlink: zone id is out of range 12:40:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x2002) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='b', 0x1}], 0x1}, 0x0) [ 297.343474][ T3942] netlink: set zone limit has 4 unknown bytes 12:40:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=[{0x10, 0x1, 0x2}], 0x10}, 0x0) 12:40:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) 12:40:01 executing program 3: socketpair(0xa, 0x3, 0x3, &(0x7f00000000c0)) 12:40:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) 12:40:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0xa602, 0x800, 0x9}, 0x48) 12:40:01 executing program 2: socketpair(0x25, 0x1, 0x1, &(0x7f0000000000)) 12:40:01 executing program 4: socketpair(0xa, 0x2, 0x3a, &(0x7f00000000c0)) 12:40:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)}, 0x10) 12:40:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'geneve0\x00', 0x2}) 12:40:01 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000640)=""/247, 0x26, 0xf7, 0x1}, 0x20) 12:40:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x0, 0x0, 0x2}, 0x48) 12:40:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9, 0x10}, 0x48) 12:40:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf}, 0x48) 12:40:01 executing program 0: socketpair(0x22, 0x0, 0x9, &(0x7f0000000300)) syz_clone(0xc2000200, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000340)) 12:40:01 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000001b40)='./file1\x00', 0x0) 12:40:01 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000000)=""/154, 0x582df7, 0x90, 0x1}, 0x20) 12:40:01 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000880)={0x1, [0x0]}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000140)={r3}, 0x14) 12:40:01 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000200)=""/228, 0x26, 0xe4, 0x1}, 0x20) 12:40:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x100, 0x800, 0x9}, 0x48) 12:40:02 executing program 4: mkdir(&(0x7f0000001b40)='./file1\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file1\x00', 0x0, 0x8}, 0x10) 12:40:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000c80)={&(0x7f0000000040)=@un=@abs, 0x8, &(0x7f0000000600)=[{&(0x7f0000000080)="dd74b55e9a51c8469a5afb1008be89a2c8f8b26253a30e0247364568d9bccfb34f6c592c920081887361b4c6fa212a688994e1571a72e9d1afead056ee3a20ec8006aeebf06618345ed783768f85d851bc4a290ddcd1e1f5fc29f7786e0e55038d53ab55aba3a2706606bb91a0fd90a043b941a0366453e7512f8f7a8f1c476186c8b6532154b0d4666ec661fe71f37385", 0x91}, {0x0}, {0x0}], 0x3}, 0x0) 12:40:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x0, 0x0, 0x0, 0x180}, 0x48) 12:40:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14}, 0x48) 12:40:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9, 0x4}, 0x48) 12:40:02 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r0}, 0x10) 12:40:02 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@id, 0x10, 0x0}, 0x0) 12:40:02 executing program 1: socketpair(0x22, 0x0, 0x101, &(0x7f0000000000)) 12:40:02 executing program 4: socketpair(0x25, 0x5, 0x7, &(0x7f00000000c0)) 12:40:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 12:40:02 executing program 5: socketpair(0x10, 0x3, 0x1, &(0x7f00000000c0)) 12:40:02 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9}, 0x48) close(r0) 12:40:02 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='.\x00'}, 0x10) 12:40:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 12:40:02 executing program 3: socketpair(0x10, 0x2, 0xfffffffe, &(0x7f00000000c0)) 12:40:02 executing program 2: socketpair(0xa, 0x2, 0x73, &(0x7f00000000c0)) 12:40:02 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) 12:40:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 12:40:02 executing program 4: socketpair(0x2, 0x1, 0x2, &(0x7f00000001c0)) 12:40:02 executing program 3: socketpair(0x26, 0x5, 0x3, &(0x7f00000000c0)) 12:40:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 12:40:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) 12:40:02 executing program 0: socketpair(0x25, 0x1, 0x4, &(0x7f0000000000)) 12:40:02 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x0, 0x23}}, 0x10, 0x0}, 0x0) 12:40:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 12:40:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) 12:40:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=[{0x18, 0x1, 0x1, "a2"}], 0x18}, 0x0) 12:40:02 executing program 5: socketpair(0x23, 0x0, 0x1, &(0x7f00000016c0)) 12:40:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1800, 0x800, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 12:40:02 executing program 1: socketpair(0x15, 0x5, 0xba4, &(0x7f0000000000)) 12:40:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=[{0x24, 0x0, 0x0, "a2"}], 0x18}, 0x0) 12:40:02 executing program 3: socketpair(0x2, 0x3, 0x2, &(0x7f00000000c0)) 12:40:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[{0x10}], 0xf}, 0x0) 12:40:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)='b', 0x1}], 0x1}, 0x0) 12:40:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7}, 0x48) 12:40:02 executing program 3: socketpair(0xa, 0x3, 0x7, &(0x7f00000000c0)) [ 298.796353][ T3267] Bluetooth: hci3: command 0x040f tx timeout 12:40:02 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 12:40:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xcf, 0x800, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 12:40:02 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000880)={&(0x7f0000000800)=@ieee802154={0x24, @long}, 0xbc, &(0x7f0000000880)}, 0x0) 12:40:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=[{0x18, 0x0, 0x0, "a2"}], 0xf}, 0x0) 12:40:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x0) close(r0) 12:40:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 12:40:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9, 0x41}, 0x48) 12:40:02 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000001940), 0xff00, 0x0) 12:40:02 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={0x0, r0}, 0x10) 12:40:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[{0x10, 0x1, 0x1}], 0x10}, 0x0) 12:40:03 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x25, 0x1, 0x1, &(0x7f0000000000)) 12:40:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb010018000000000000006000000003"], &(0x7f0000000080)=""/144, 0x7b, 0x90, 0x1}, 0x20) 12:40:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)='b', 0x1}], 0x300}, 0x0) 12:40:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x20}) 12:40:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0xffff, 0x0, 0xffffffffffffffff, 0x5}, 0x48) 12:40:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 12:40:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x300) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)='b', 0x1}], 0x1}, 0x0) 12:40:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9, 0x8}, 0x48) 12:40:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x0, 0x4}, 0x48) 12:40:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x100, 0x800, 0x9}, 0x48) 12:40:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x100, 0x800, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 12:40:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001b00)={&(0x7f0000000740), 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/118, 0x76}], 0x1, &(0x7f0000000b00)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)='b', 0x1}], 0x1}, 0x0) 12:40:03 executing program 2: socketpair(0x2, 0x2, 0x88, &(0x7f00000000c0)) 12:40:03 executing program 4: socketpair(0x1d, 0x0, 0x1, &(0x7f00000000c0)) 12:40:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)='b', 0x7ffff000}], 0x1}, 0x0) 12:40:03 executing program 5: socketpair(0x2c, 0x3, 0x8, &(0x7f00000000c0)) 12:40:04 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0xc000, 0x0) syz_clone(0x50040000, &(0x7f0000000080)="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", 0xffc, &(0x7f0000001080), &(0x7f00000010c0), &(0x7f0000001100)="6d96be4c9f71b6c0c91fdab5ab8c3e262e36084c9a911d97dc14c83afbd128ee73adb70183b95294f5818d30fc3c74c9f6e60a12060e1c2237037418b555e013789fcb985e3866f36441bb0d9d754f01c08c8c60b0d8c83d2200274651788baa0c6d2c308d13ce921f39946bebfdc8bb96cae5e6cec85b6e5ac162fdabad98370c680c15353e19f91ed5d1d25b3c91a33d1176e9ee09646db1be8587e104eff80a11d0364467757b2375fdd7836665e7e34ea3548ee9ce8d7422f23dda3447c51574ad5e8745c16f615c52403b8f1370901f803bef5ff71b92ef0e6d79d22565688850526adf46bd64b8222f884a71cb981c") 12:40:04 executing program 1: unlink(&(0x7f0000003040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 12:40:04 executing program 4: socketpair(0x2c, 0x3, 0x7, &(0x7f0000000000)) 12:40:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x0, 0x4, 0x0, 0x4}, 0x48) 12:40:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 12:40:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)='b', 0x1}], 0x1}, 0x3) 12:40:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9}, 0x48) 12:40:04 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000095000000000000001ab58d2b4a1e6ea56a1d51fc68e4ee7f3a7cd5d5ef0a367ee21f2499c1e02f26b6530cf8a9d4b8cc74dc0d2c75a16e38301e02056f13131f441445b3b2c54a3f272ee74008a25c0d4dfc6826dd94b6fbac10a0e37f7253ee158862618a6b513047497eec2f484f775af3e56e8e0eb5581910d34568475c0f9527d3797f488225315e5d00776f205bb3891cf1d8b787bb91944943ae9d05eb9fd488053accf1c58b8b314af859ad02934dd2138f8ceead7e2bbbffb623bef8fdcb"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x700, 0x0, 0x0, 0x1c11, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) 12:40:04 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000180)=@name, 0x10, 0x0}, 0x0) 12:40:04 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000640)=""/247, 0x28, 0xf7, 0x1}, 0x20) 12:40:04 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000140)=@raw=[@generic={0x20}], &(0x7f0000000180)='GPL\x00', 0x2, 0xa1, &(0x7f00000001c0)=""/161, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:40:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0xa302, 0x800, 0x9}, 0x48) 12:40:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x100, 0x800, 0x9}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4) 12:40:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x100, 0x100000, 0x9}, 0x48) 12:40:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x0, 0x4, 0x0, 0x1348}, 0x48) [ 300.876955][ T3722] Bluetooth: hci3: command 0x0419 tx timeout 12:40:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2182, 0x0) close(r0) 12:40:04 executing program 2: socketpair(0x25, 0x5, 0x0, &(0x7f00000000c0)) 12:40:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x0, 0x0, 0x9}, 0x48) 12:40:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) 12:40:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)='b', 0x1}], 0x1}, 0x0) 12:40:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 12:40:05 executing program 5: syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 12:40:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[{0x24}], 0x10}, 0x0) 12:40:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x100, 0x800, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 12:40:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x0, 0x0, 0x0, 0x41}, 0x48) 12:40:05 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20001) write$fb(r0, &(0x7f0000000040)="e5e422df9c247b582ce49538187e662cdc96e42d8955f1cef361ce5ec4463b96", 0x20) 12:40:05 executing program 0: socket(0x2b, 0x80001, 0x0) 12:40:05 executing program 1: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000001c0)="f4001100052b2c25e994efd18498d66205baa68754a3f5ffffff02000000000000000000000000002f000003", 0x2c}], 0x1}, 0x0) 12:40:05 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000002a00)={&(0x7f0000001a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x10) 12:40:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[{0x18, 0x1, 0x1, "cf"}], 0x18}, 0x0) 12:40:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x100, 0x800, 0x9, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 12:40:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) 12:40:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x80a00) ioctl$LOOP_CLR_FD(r0, 0x4c01) 12:40:05 executing program 2: socket(0x3, 0x0, 0x10001) 12:40:05 executing program 1: syz_mount_image$btrfs(&(0x7f000000c080), &(0x7f000000c0c0)='./file0\x00', 0x0, 0x0, &(0x7f000000c3c0), 0x0, &(0x7f000000c440)={[{@subvolid={'subvolid', 0x3d, 0x5}}]}) 12:40:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x44}, 0x0) 12:40:05 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) write$fb(r0, &(0x7f0000000040)="ee", 0x1) 12:40:05 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x82280, 0x0) close(r0) 12:40:05 executing program 2: syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00') syz_clone(0x29202000, &(0x7f0000000440)="2006ba805c34dcd8c6ea6c90a0f71c13addfc76aab7988d02df97de35594d0479070923953d6d1113a18716fb065", 0x2e, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) sched_setparam(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000001640)=ANY=[@ANYBLOB="4c00000000022abd7000ffdbdf2502000000614ac6af1560045bb5b533d32d975450e0c0195c30fd1370cf"], 0x4c}}, 0x4000) 12:40:05 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000012c0), 0x4) 12:40:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1a118f}, 0x0) 12:40:05 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 12:40:05 executing program 3: socket(0x2b, 0x80001, 0x507ffa) 12:40:05 executing program 5: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000080100000000000000f8000000000000000000000000000080008000ff030000000000000800000000000000ff010000000000000100000002", 0x45}, {&(0x7f0000010120)="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", 0x193, 0x4000}, {&(0x7f0000010320)="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", 0x175, 0x47a0}, {&(0x7f0000010540)="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", 0x174, 0x4fe0}, {&(0x7f0000010720)="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", 0x1ed, 0x57e0}, {&(0x7f0000011280)="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", 0x169, 0x7fe0}], 0x0, &(0x7f000007aa80)) 12:40:05 executing program 4: r0 = syz_clone(0x11920000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, &(0x7f0000000000)) 12:40:05 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 12:40:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004240)=@newtaction={0x14}, 0x14}, 0x44}, 0x0) 12:40:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 12:40:05 executing program 4: r0 = syz_clone(0x11920000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, &(0x7f0000000000)) [ 301.809142][ T4221] loop5: detected capacity change from 0 to 127 [ 301.861354][ T4221] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) 12:40:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0010000fddbdfb1"], 0x1c0}}, 0x0) [ 301.901922][ T4221] ntfs3: loop5: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 301.914056][ T4225] overlayfs: "xino" feature enabled using 2 upper inode bits. 12:40:05 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 12:40:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r0, 0x0, &(0x7f0000000480)) 12:40:05 executing program 2: prctl$PR_SET_KEEPCAPS(0x8, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0x5, 0x0, 0x700) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) [ 301.983499][ T4221] ntfs3: loop5: failed to read volume at offset 0x11800 [ 302.020623][ T4221] ntfs3: loop5: failed to read volume at offset 0x21800 [ 302.062172][ T4221] ntfs3: loop5: Failed to load $BadClus. [ 302.143426][ T3647] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.194065][ T4242] overlayfs: "xino" feature enabled using 2 upper inode bits. 12:40:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x101, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 12:40:06 executing program 3: syz_clone(0x11920000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:06 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0xaac]}, 0x8}) 12:40:06 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@host}) 12:40:06 executing program 5: socket(0xa, 0x0, 0x8001) 12:40:06 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4600, &(0x7f00000002c0)) 12:40:06 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r1, r2}) 12:40:06 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0) 12:40:06 executing program 2: syz_clone(0x8a348000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:06 executing program 5: syz_clone(0x32020480, 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:06 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x6411, 0x0) 12:40:06 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40240, 0x0) 12:40:06 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0xc0684608, 0x0) 12:40:06 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:06 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) 12:40:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0xffffff01}}, 0x10) 12:40:06 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 12:40:06 executing program 0: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000440)) r0 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x92, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xb666}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xb70}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='\x00') r1 = syz_clone(0x40000480, &(0x7f0000000000)="bbc5185dc213a19d645dd7dc7cf772928c3d3d9f3bd4da9f8f54d7de10d7fa57a685b65d1cc83ef979ba026c21e838311aff5e06af9ef0537296eeadef99ba403fefda6cab5a9623", 0x48, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="68828f701dc134150836a0c3a2af4a1f5bbcf679a390677128e5728a04cffa0a28cfa167295fc8f47b9b53ffc37bca79f0b2898d2ed514563b00c680ce4ac69ac70222c7a4bc838ae1e7e6aef0a859cbffd66cb2f1102d585bcc8ae749836bf967e42157157dbf2d12a24bb45655deb13267376aeb0e761fe92b49c6604429005080f8998a3b123c8a8f5adcd7a851cc60d32727ebda7f0fe9eb4339749805d236127911f9d25f239736e11b9ab13483ac423bc2") sched_setaffinity(r1, 0x8, &(0x7f0000000200)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) getpgrp(r2) 12:40:06 executing program 2: syz_clone(0x8803000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:06 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000d, 0x10, r0, 0x8000000) 12:40:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0xffffff01}}, 0x10) 12:40:06 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12:40:07 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:07 executing program 2: syz_clone(0x8803000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:07 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x0, 0x80) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 303.426080][ T3326] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 303.676213][ T3326] usb 4-1: Using ep0 maxpacket: 16 12:40:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x5865}, 0x0) 12:40:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004240)=@newtaction={0xec4, 0x30, 0x0, 0x0, 0x0, {}, [{0xeb0, 0x1, [@m_mirred={0xeac, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xe7d, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x7ffffffff000}}, 0x0) 12:40:07 executing program 5: syz_io_uring_setup(0x1c14, &(0x7f0000000d80)={0x0, 0xfa6b, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)) 12:40:07 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) [ 303.796060][ T3326] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:40:07 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:07 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) [ 303.853021][ T3326] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 12:40:07 executing program 5: add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x48, 0x0) [ 303.925562][ T3326] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.975920][ T3326] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 303.991083][ T3326] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 12:40:08 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)=ANY=[]) [ 304.103353][ T3326] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 304.286133][ T3326] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.369101][ T3326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.406908][ T3326] usb 4-1: Product: syz [ 304.411643][ T3326] usb 4-1: Manufacturer: syz [ 304.417433][ T3326] usb 4-1: SerialNumber: syz [ 304.926087][ T3326] cdc_ncm 4-1:1.0: bind() failure [ 304.966612][ T3326] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 305.005987][ T3326] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 305.028232][ T3326] usbtest: probe of 4-1:1.1 failed with error -71 [ 305.111008][ T3326] usb 4-1: USB disconnect, device number 2 12:40:09 executing program 3: syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[{&(0x7f0000000540)="3af4", 0x2, 0x7fffffff}], 0x0, 0x0) 12:40:09 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:09 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = dup(r0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 12:40:09 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:09 executing program 0: syz_clone(0x14021100, 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) 12:40:09 executing program 5: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x121801) 12:40:09 executing program 2: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) [ 305.470092][ T4354] loop3: detected capacity change from 0 to 264192 12:40:09 executing program 0: syz_clone(0x84004000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:09 executing program 2: process_vm_writev(0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/220, 0xdc}], 0x1, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 12:40:09 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000200)={{0x8, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 12:40:09 executing program 5: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f0000002400)=""/121, 0x79}], 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:09 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001c000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fi']) [ 305.719843][ T4378] autofs4:pid:4378:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) 12:40:10 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:10 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004c80)={0x2020}, 0x2060) read$FUSE(r0, 0x0, 0x0) 12:40:10 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x9f}, 0x0, 0x0) 12:40:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x30}}, 0x0) 12:40:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004240)=@newtaction={0xec4, 0x30, 0x0, 0x0, 0x0, {}, [{0xeb0, 0x1, [@m_mirred={0xeac, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xe7d, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x3000}}, 0x0) 12:40:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000440)={0x13, 0x10, 0xfa00, {&(0x7f0000000640), r1, 0x2}}, 0x18) 12:40:10 executing program 2: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) fremovexattr(r0, &(0x7f0000000100)=@known='trusted.overlay.redirect\x00') 12:40:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) 12:40:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 12:40:10 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) read$FUSE(r0, &(0x7f0000007fc0)={0x2020}, 0x2020) 12:40:10 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000000c0)=0x98) 12:40:10 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x1b, &(0x7f00000000c0)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc}]}}) [ 306.905941][ T3722] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 307.145970][ T3722] usb 6-1: Using ep0 maxpacket: 16 [ 307.346089][ T3722] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.376066][ T3722] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.386367][ T3722] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 307.396470][ T3722] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 307.406610][ T3722] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.416783][ T3722] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:40:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xec4}}, 0x0) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newtclass={0x24}, 0x24}}, 0x0) 12:40:11 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x3) 12:40:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xc, 0x80, 0x0, 0x0, @loopback, @mcast2, 0x0, 0x87, 0x29aef0ff, 0x3}}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setparam(r1, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000001640)=ANY=[@ANYBLOB="4c00000000022abd7000ffdbdf2502000000614ac6af1560045bb5b533d32d975450e0c0195c30fd1370cf74144e91b37bddba1b50e78d1828238b0ca1a3508119aec25cd4bf437258bde878dd0000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000) 12:40:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004240)=@newtaction={0x14}, 0x14}, 0x8}, 0x0) 12:40:11 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000001340)={{0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0xfffffffffffffffe}) 12:40:11 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 12:40:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) 12:40:11 executing program 0: sched_rr_get_interval(0x0, &(0x7f0000006300)) 12:40:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0xffff, 0x0, 0x80000000}, 0x48) [ 307.586621][ T3722] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.600237][ T3722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:40:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)=ANY=[@ANYBLOB='L'], 0x4c}}, 0x0) 12:40:11 executing program 4: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x1a7041, 0x0) [ 307.658706][ T3722] usb 6-1: Product: syz [ 307.679134][ T3722] usb 6-1: Manufacturer: syz [ 307.697621][ T3722] usb 6-1: SerialNumber: syz [ 308.016343][ T3722] cdc_ncm 6-1:1.0: bind() failure [ 308.024244][ T3722] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 308.031284][ T3722] cdc_ncm 6-1:1.1: bind() failure [ 308.038477][ T3722] usb 6-1: USB disconnect, device number 2 12:40:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x2}, 0x0) 12:40:12 executing program 3: r0 = syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, 0x0) 12:40:12 executing program 2: pipe2(&(0x7f0000000400), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 12:40:12 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000000)={'macvtap0\x00', 0x0}) 12:40:12 executing program 1: process_vm_writev(0x0, &(0x7f0000000040)=[{0xfffffffffffffffc}], 0x1, 0x0, 0x0, 0x0) 12:40:12 executing program 4: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x1a7041, 0x0) 12:40:12 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:12 executing program 0: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x80002026) 12:40:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x1ac, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb4b}]}, @NFTA_CHAIN_USERDATA={0x39, 0xc, "3b61183c24f58f269db8c9715c89c03aeab9654386678099201a18af2f267faba4e9bbacb205cfd8ef3faf3ecad4d105b61dee2004"}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_USERDATA={0xd9, 0xc, "07e4eb50e16470f43231968b00dd3f854ab412b6526dc167a3923584358e1d04265835637b4b07458b601457f702afbc7de575491b5e25d20217cef2b91f0a50dabd19bcdcbddbcbba06b1ddcb0c90c5594aa0ab348e2894f3e1ed067e8943571a3556a91d397e7cf2a8f0dd63fce645b053a68abc768deef496e3ec592cd8cb0c2103334c07705bfd90c606cd2876e47e6e65aa7be33f07a179b446fd8e7a7e69084fc7044f0fd7d52513acffbb3c56830f4edc310ad44895b7f12be93a618ff9dc5159c3ea9562bfbd50a11a172617195ed955a1"}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x228, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0xd, 0x6, "d21da3deed55de18bb"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xad, 0x6, "91e7c2dda4bcafeee0491c5d6ace612232920d80c51ea278e0828c3d9ac52b822ebe8edb162a3125ff2304343ea501f8e13123340544170e466b6b42bd2ae6b755a3783a3c0e6b0367b03f28afee8f771ccd471df7b60a37c9045aaf2b3dee1b417c817b89273b4657190baee9a94c9f2ca8bb515e3c01b1e354d31ce2b5f08ac0dc60907f47bb9df71d341b15b9e904a705755e85a24a01179effc010000c431c62c8ddbe76932af5"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xf5, 0x6, "009f8ffe4bb31ff91f4a469ae907e8ec8a2a9b7fb01b1ffd3221f9a660c50161e4faa0b20127d011af6cc7942334a3db952ae6fef81fd8067ca6efa8950a44ff1d7cd6128c91991e771ce1488f0de964560296b2d2c933d6d2c7991f1e2a167d5d612a8e97aa1118173d7704b0cce3d1442d84eb98c991598969ccc2051f3a6687b0514c5d99a67fc339c0d9a2353b19c2569b343d057e7f32e2cff9df52d9e703fab591d5f1d0b6387a37cdb3748b1c2daf1850d0393906122c73eca3ba62ff656f98ba7ea38b45b17fdf9c363a1383ea4df6d4aa918e0120744291b510c808a9aa8d13a5fea764068d3976f0c18bc872"}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_USERDATA={0x21, 0x6, "cc870ed247d7b3f63e917a0a20a3de32aa6446e16a11240885a72ae2e4"}]}, @NFT_MSG_DELSETELEM={0x8c8, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8b4, 0x3, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xe5, 0x6, 0x1, 0x0, "cb8085590cfe5c8a3cacf8c81ad917f34140a374a4c0bef8bc5109dcc9ceca87193f721e70af15f8075e9eca0f3e3da6bb3b88a89e77433746f92a5860ffbcc3ece0af07e76a366314607b64772c48b918e438f688e795facf2dd6aec22023fa6a89f718bd7e0589148622dce90043f12b725f59ac219c2d72577d0d51fda5b9fc7103663357e13e4ff43e6e44b72d6bced4de9705a986a701e90fcd02db6697f1dab24ebff9b8f93c5bd1b7b10e03baad8357e6ff5fb5c4dda9595690437c54b76d4306519a94e80db4d71cdae823fa8fef0a11c3e3627d6a63a563b968e6c852"}]}, {0x260, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x25, 0x1, "4101992d192eeb9f4d78184455a19be060e2d6843559ab00b2ef4b6ffd9e049642"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_TOTAL={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x8c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "fe19fa98d8ea6536fa696fa89a173701ee4efc3c13f0e57627b9154a3ec8e9b45a3be3b4fa5a8f8c4f72a69cf15b450742a30b442bf2d765e58a0177a9243920d5be9805ea16ec6f31acb69296733c72495c3c1036"}, @NFTA_DATA_VALUE={0x29, 0x1, "a317909755f3a7358d9afe646666800d5f617ee9c8438e58a5db7bb681d2225a171d66d188"}]}, @NFTA_SET_ELEM_KEY_END={0x84, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "725efc304c3937f1126d33e129da9da5ea8e34fe0ef72d01dcd194088cee3735e72ab2ca1b57db8245c5f520ca9317c3fec34ddd51c61117562bf32abd1f93c345b0f3aae4427d2196c303dd7233556be0177c7de162e233bbb18f77810da0ccaabec798a8395960b4ffa176b9a29b9289f51907029fc931c3"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}]}, {0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x39, 0x6, 0x1, 0x0, "05c2eeb7fd5be1728591a686169978a264c4599231820dd6202ce7767daabc22a940c160bf4d79e703a68e6a02f0cfc05ead600ae5"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x4cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x1d, 0x6, 0x1, 0x0, "f99e45427b502ccafd8deffb18712247ffdd2f5c6422ce5ddd"}, @NFTA_SET_ELEM_KEY_END={0x4a8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "163a46233e8e7445289bee2db2b8e652c8077a91ce07ece4143e760a12af1aa8288c101ca944abd7f8d14c10eb44473204cb6ee753fc24ea2a5af57cad12f1ceac3b974de131a4964cdeeb512dc98846fe183dcad2d71142f385a53854453723bcc0b7493821277c6bed648785436c5029392ad3e956baa96ad376415cdeded037967dbdcdd01df9f0a54b581d8675761cadd0afc2e12cad0ded6c66c1d17bbc73c5f05159130485c8a36358be13f67ef44f8cf1476a82e780dfa455db251a7e2df019db16e02dc191c017a73b2d4df68de1249dbb96262f90"}, @NFTA_DATA_VALUE={0x75, 0x1, "9e42210787490367bcbea750c2d419fbc34d7286e21bf4c1842fa179fd737375717fb8fadfcf3fe5e00e90505dba289c47491c70fedc345ed45c9afc24dfbac2245c0f0780053cd40fc7089161ed32606d1eaddaafc107a99a45af9ed6fd5b9e5df8f62c06e6c06a9b1e05d9bf2a348792"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x32d, 0x1, "b4b17285f567274e7430fc5b845acae00c6f43b98a8977508880e77c95a2dbf9c11a3051485e3203f3bcedd551de7c7b63fbe85bdc8f5729a3f226e8385d87e50f718eb24884cf66e54c0fc21cdf45167f5844c7a3a9494525b7927b1450e1d8cee4bfeca28a2cccd3d30d2659c7027fefb96013130b2217c5e2f048fe44b0c70a642709388f54686284fdb31d33e58f7bffa74004dc7d8f3131e2960302b465edb6a04a3987b1be4dea9bbd629b06951746eca1bade69331795631e84f88cfef9b7ed07e30130a72fadb09ae9ab689fbc1f1abd8cae7c055abfc02c55d3f17968d2ca9f43881049054ac2d9d35798f57dc5219cf60d859b63c54b721f5fc6c458b8f977c530fd8d57cf79327ae0b497abac82be95e1ab6e8179fb6b43d757eecb37c93836379c691e35bb7eca77d37f8f0ef91ca37628ba4af1d52ba024b68ebd56818e9431d48f4c60b3dd31717eaf627b5ff23acdc73bb60e863996053600bfe92bbb08ff8828155d4e1039e120fed2bf8a0a45bf10a143f081ddd51ba82e2dfda6cc79d5dc9ed339a8e09a5757b54dd3078a62f6a34ae656d48aa5649d6877fcdf4b96e001980e5f22fc711ae2e2277e77b8f175b5feb5daccc05b1e322dc4a84d21a3a6bcd5a5b6d785250b419066b5759558a5d549a3f3fb2221cbc65d60414ebc378a22ef7bcc3f782635a2315f48e05bf0a14238e54d94de49d233cc535122bb981bed405e87225b799f650398677f0209271e2fedc4ed260d2aa1bc4046f1315d6bde060cde71f19749be18596656cf12f562d0f0b1e5d4884bae70053ed754e9588625fe427f66ea77985a49bf119fdc07e07b7c6fbfea4e1d453260d4005459611c3c6cb36a0a9461e6426f03a3b645804f10a9fddae3b214dae2190310d26978c3035e31c5d3bb52960c291659835bd1fe8091f922e03d223d6726db85500f315c8996f619f06aeb7b1cc0bbc382f5df26274fa1da364c52f3b1c7e66b19421e4288d2c20125875d9d22e724bb612dc6bd82b796fed6c9d5d34cf48dbeae25ad0e38cea0a71856065a425c07815399b41953215d62437bda9a90e7ff9319e3a15f9023810af67a50674b1340f3dd9a024e05d5c1a5a753069d5eba866f630339ce4edd"}]}]}]}]}], {0x14}}, 0xd04}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000854) 12:40:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)=ANY=[@ANYBLOB='L'], 0x4c}}, 0x0) 12:40:12 executing program 5: socketpair(0x26, 0x0, 0x0, &(0x7f00000003c0)) 12:40:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f00000000c0)) 12:40:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x0, 0x80000000}, 0x48) 12:40:12 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100", @ANYRES32]) 12:40:12 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0, 0x0) 12:40:12 executing program 3: getresgid(&(0x7f000000ef80), &(0x7f000000efc0), &(0x7f000000f000)) 12:40:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000140)) 12:40:12 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_newaddr={0x18}, 0x18}}, 0x0) 12:40:13 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:13 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 12:40:13 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x8c, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x0, 0x1b, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc}]}}) 12:40:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="06a57e321b18097f95ba1ad83a4b0fe3", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 12:40:13 executing program 0: socket(0x1, 0x0, 0x300) 12:40:13 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:13 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0) 12:40:13 executing program 4: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) 12:40:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x80000001, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000180)) 12:40:13 executing program 4: socketpair(0x0, 0xdfdbcfc91dbb7a3c, 0x0, 0x0) 12:40:13 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000140)=0x1, 0x4) [ 309.596408][ T3326] usb 6-1: new high-speed USB device number 3 using dummy_hcd 12:40:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004240)=@newtaction={0x48, 0x30, 0x3, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 309.836114][ T3326] usb 6-1: Using ep0 maxpacket: 16 [ 310.036150][ T3326] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.076673][ T3326] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.113824][ T3326] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 310.151969][ T3326] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 310.166113][ T3326] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 310.184026][ T3326] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:40:14 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) 12:40:14 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x0) [ 310.386120][ T3326] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.401616][ T3326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.420303][ T3326] usb 6-1: Product: syz [ 310.424640][ T3326] usb 6-1: Manufacturer: syz [ 310.430128][ T3326] usb 6-1: SerialNumber: syz [ 310.716232][ T3326] cdc_ncm 6-1:1.0: bind() failure [ 310.723913][ T3326] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 310.730938][ T3326] cdc_ncm 6-1:1.1: bind() failure [ 310.746867][ T3326] usb 6-1: USB disconnect, device number 3 12:40:15 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001", @ANYRES32]) 12:40:15 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 12:40:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 12:40:15 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004240)=@gettclass={0x24, 0x2a, 0x121}, 0x24}}, 0x0) 12:40:15 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x8c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003020000102505a1a440000102030109027a0002010000000904000001020d0000052406000105240000000d240f0100000000000000000306241a00000007240aff07817f07240a000906ff042402000c241b00101f004ad580ff400905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000742f5e8717105785fc88182b7473f829ec75ed15b1a3cf241b2265765a696f331d753c0be0ddf3cab198d98ad2b98682528b6139b244772fd3fdffffff41bd12dcca62daa9043fd74669f055e2a10d439eb6374846d590e8b6127017dffdd1ac53035eecfe632d3ff26751c33bfecc37bbb44415"], &(0x7f0000000240)={0x0, 0x0, 0x1b, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc}]}}) 12:40:15 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 12:40:15 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40c00, 0x0) [ 311.212102][ T4525] autofs4:pid:4525:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4294967041), cmd(0xc0189371) 12:40:15 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001c000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./']) [ 311.291068][ T4525] autofs4:pid:4525:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371) 12:40:15 executing program 3: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x14b283) 12:40:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000340)) 12:40:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x38}}, 0x0) 12:40:15 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0xa8082) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"3484ae2e3bd82bc1d8cbe65f8357a476"}}}}, 0xa0) 12:40:15 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) [ 311.516324][ T3722] usb 6-1: new high-speed USB device number 4 using dummy_hcd 12:40:15 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) [ 311.796044][ T3722] usb 6-1: Using ep0 maxpacket: 16 [ 312.025983][ T3722] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.037175][ T3722] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.055933][ T3722] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 312.066131][ T3722] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 312.076276][ T3722] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 312.086367][ T3722] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:40:16 executing program 0: process_vm_writev(0x0, &(0x7f0000001000)=[{&(0x7f0000001780)=""/198, 0xc6}, {&(0x7f00000018c0)=""/4092}], 0x1, &(0x7f0000001100)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001040)=""/126}, {&(0x7f00000010c0)=""/39}], 0x1000000000000186, 0x0) 12:40:16 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'vlan0\x00', 0x400}) [ 312.266120][ T3722] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.275246][ T3722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.283355][ T3722] usb 6-1: Product: syz [ 312.287626][ T3722] usb 6-1: Manufacturer: syz [ 312.292240][ T3722] usb 6-1: SerialNumber: syz [ 312.586223][ T3722] cdc_ncm 6-1:1.0: bind() failure [ 312.593696][ T3722] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 312.600645][ T3722] cdc_ncm 6-1:1.1: bind() failure [ 312.608867][ T3722] usb 6-1: USB disconnect, device number 4 12:40:17 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x30, 0xffffffffffffffff, 0x8000000) 12:40:17 executing program 3: syz_clone(0x26100, 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:17 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:17 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xc8153, r0, 0x0) 12:40:17 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x5421, &(0x7f00000002c0)) 12:40:17 executing program 5: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000040400000000000000f8000000000000000000000000000080008000ff070000000000000400000000000000ff00000000000000f600000001", 0x45}, {&(0x7f0000010120)="46494c4530000300000000000000000001000100380001009801000000040000000000000000000004000000000000000300000000000000100000006000000000001800000000004800000018000000801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd80106000000000000000000000000000000000000000001000000000000000000000000000000000000300000006800000000001800000002004a000000180001000500000000000500801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd8010070000000000000006c0000000000000600000000000000040324004d00460054000000000000008000000048", 0x105, 0x4000}, {&(0x7f00000102e0)="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", 0x16d, 0x43a0}, {&(0x7f00000104c0)="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", 0x16c, 0x47e0}, {&(0x7f0000010660)="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", 0x1e5, 0x4be0}, {&(0x7f0000010880)="000000000000000000000000000000000000000000000000000000000000040046494c453000030000000000000000000400010038000100c001000000040000000000000000000004000000040000000200000000000000100000004800000000001800000000003000000018000000801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd801060000000000000000000000000000003000000070000000000018000000020052000000180001000500000000000500801875c1", 0xc4, 0x4fe0}, {0x0, 0x0, 0x57e0}], 0x0, &(0x7f000007c6a0)) 12:40:17 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='B') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/220, 0xdc}], 0x1, &(0x7f0000000a40)=[{&(0x7f0000000480)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 12:40:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20) 12:40:17 executing program 2: socket(0x23, 0x0, 0x7) [ 313.123790][ T4572] loop5: detected capacity change from 0 to 87 [ 313.124863][ T3647] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 313.171504][ T3647] Buffer I/O error on dev loop5, logical block 0, async page read 12:40:17 executing program 3: r0 = syz_clone(0x32020480, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) 12:40:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004240)=@newtaction={0x14, 0x30, 0xf}, 0x14}}, 0x0) [ 313.212882][ T3647] loop5: unable to read partition table [ 313.238113][ T4572] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) 12:40:17 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "072c3b53bc90da4cabcca05de975e4b93cd3f48ed0cad3bf08fff4f58ad4d0ffc55cc9ba58ad9447a8fc8a52cf9db7ea04b282780a590f54d526469192bc1ab5"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "072c3b53bc90da4cabcca05de975e4b93cd3f48ed0cad3bf08fff4f58ad4d0ffc55cc9ba58ad9447a8fc8a52cf9db7ea04b282780a590f54d526469192bc1ab5"}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x15, r0, 0x0) [ 313.296276][ T4572] ntfs3: loop5: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only 12:40:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x38}}, 0x0) 12:40:17 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000a00), 0x8) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) [ 313.406854][ T4572] ntfs3: loop5: failed to read volume at offset 0x100000 [ 313.422041][ T4572] ntfs3: loop5: failed to read volume at offset 0x100000 [ 313.470378][ T4572] ntfs3: loop5: failed to read volume at offset 0x100000 [ 313.526602][ T4572] ntfs3: loop5: failed to read volume at offset 0x100000 [ 313.546168][ T4572] ntfs3: loop5: failed to read volume at offset 0x101000 [ 313.553318][ T4572] ntfs3: loop5: failed to read volume at offset 0x102000 12:40:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000001340)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0xfffffffffffffffe}) 12:40:17 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)={0x1010, 0x453, 0x4, 0x70bd2a, 0x25dfdbfc, "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", [""]}, 0x1010}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) 12:40:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40012002) [ 313.597395][ T4572] ntfs3: loop5: failed to read volume at offset 0x104000 [ 313.604748][ T4572] ntfs3: loop5: failed to read volume at offset 0x108000 [ 313.632315][ T27] audit: type=1107 audit(1662036017.581:5): pid=4597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='õtm6µžõMb6µ%µ÷‹Ð߬²p!ÞþÔÒW† žE÷ðOH!ÒÈš˜NÖ?©ÇªÛ†ÜU±qBúÝ·d^"Óš¿ßiÑPɦ7’n!ö@ϲNù±ã«B…¦·çöâ §ŽŠ5HÑQqÞkMN±(jÐس šAµ­ýEZ¿[Rü/bB4LHõéže*³ìÔ [ 313.632315][ T27] ? ¯$‚8üàB¾ [ 313.632315][ T27] ³Ó3øBø_ [ 313.632315][ T27] ñŽV~­ÊU/Êä¯Âx}žwc!Œ&<É{ž>Ò¿’]Ò¯£›þF¯H’Z¦ Á‹Ú`»÷ø&Bê/³ð‚ùszä÷è û æH_5µDnô%¬o‚:QgýÔ(ô%¶EšfËç.”ÖhåB‡IK†YP*ª;.sEÿ¬.‘ÃSCú]Ùp};©`ñ•üa\l¿žî?áèãi/|»ƒžËïvÕ²J!†-¥«XuQcŠän'0óñçìx£r»4cÐÒ€õ”ÄÝ’£2ž±`öTÏ7óæ°Jíuô–#yv_›ä5$ ±Ä(‰5bРºBªJ,Û?Úd‘¨ô(¶ÊºbàpÈÆpC\6ÿÄ‹OKm¡O’ð-œ¾½è;YPçoÆSCv_ Á [ 313.632315][ T27] [ 313.632315][ T27] S3&;M³ÌR‡Su‚y"òÈzœSÑ °/ʈBR%ߦ ™ÝžNUDƒx§/Æ}šyÞÍ€ü&ÖÀã2Rè?DÚ·§°Y•Œõ [ 313.632315][ T27] ¦ŠÆ:gŸ„‹w•Á” 5h¹Ä­Ø;P3¿…™×e­£ç5y%ñ) ¹¸<Q­‹×' 12:40:17 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0xaac]}, 0x8}) 12:40:17 executing program 3: syz_clone(0xb004f000, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0) 12:40:17 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 12:40:17 executing program 0: bpf$BPF_GET_PROG_INFO(0x4, 0x0, 0x46) 12:40:17 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) 12:40:17 executing program 4: syz_io_uring_setup(0x1c14, &(0x7f0000000d80)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)) 12:40:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)=ANY=[@ANYBLOB='L'], 0x4c}}, 0x0) 12:40:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0010000fddbdfb16f5440b33058bab56b2500f20500f23ca94f904248b87a83e299f3ac872bd276308614d9a894d9fd9d7ae20ab719fdcbef12e61c50de7dbf7d89cf9908d5adfc286d29cbf5a00168103c4863b6ca9808f7fcd29008cb"], 0x1c0}}, 0x0) 12:40:17 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x4080, 0x0) 12:40:17 executing program 5: socket(0x1, 0x0, 0x7) 12:40:17 executing program 0: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x5000, &(0x7f0000000240)) 12:40:17 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x77359400}, 0x0) 12:40:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000001640)=ANY=[@ANYBLOB='L'], 0x4c}}, 0x0) 12:40:17 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') 12:40:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004240)=@newtaction={0x48, 0x30, 0xf, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 12:40:17 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001880)=[{&(0x7f0000001780)=""/198, 0xc6}], 0x1, &(0x7f0000002a40)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1, 0x0) [ 314.091994][ T141] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 314.375999][ T141] usb 2-1: Using ep0 maxpacket: 16 [ 314.516105][ T141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.526087][ T141] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 314.535871][ T141] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 314.726046][ T141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 314.735254][ T141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.743384][ T141] usb 2-1: Product: syz [ 314.747752][ T141] usb 2-1: Manufacturer: syz [ 314.752355][ T141] usb 2-1: SerialNumber: syz [ 315.076797][ T141] cdc_ncm 2-1:1.0: bind() failure [ 315.085581][ T141] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 315.092556][ T141] cdc_ncm 2-1:1.1: bind() failure [ 315.099789][ T141] usb 2-1: USB disconnect, device number 2 12:40:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000004300), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000001240)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 12:40:19 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:19 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 12:40:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40012002) 12:40:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0xa00}, 0x0) 12:40:19 executing program 2: socketpair(0x1e, 0x2, 0x0, &(0x7f00000005c0)) 12:40:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x30}, 0x0) 12:40:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004240)=@newtaction={0x14, 0xc40e}, 0x14}}, 0x0) 12:40:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1ff, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 12:40:19 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0xd1158543349dfb59, 0x640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100}) 12:40:19 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1}}, 0x18) 12:40:19 executing program 2: syz_clone(0x29202000, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0x0) 12:40:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1ff, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 12:40:20 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000200)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 12:40:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000007400)) 12:40:20 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0xd1158543349dfb59, 0x640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100}) 12:40:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 12:40:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, 0x0, 0x7800}}) 12:40:20 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:20 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:20 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:20 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00') sched_setparam(0x0, 0x0) 12:40:20 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/cgroup\x00') 12:40:20 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}}}}, 0xf) [ 316.397980][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.404307][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 12:40:21 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000000)) 12:40:21 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}}}}, 0xf) 12:40:21 executing program 5: process_vm_writev(0x0, &(0x7f00000028c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 12:40:21 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:21 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/241, 0x1c3}, {&(0x7f00000003c0)=""/209, 0xd}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_misc(r1, &(0x7f0000000f80)={'syz1', "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"}, 0x1c0) 12:40:21 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x10000}) 12:40:21 executing program 5: syz_clone(0x3241000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:21 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000000) 12:40:21 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x0, 0x0, 0x0, 0x210, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x1c, 0x3, 0x800004, 0x32, @private2, @private2, 0x10, 0x40, 0x6, 0x8b2}}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff, 0x11}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000380), 0x100, r1}, 0x38) 12:40:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x570, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000001340)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0xfffffffffffffffe}) 12:40:21 executing program 3: syz_mount_image$btrfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x726821be8af8efa7, &(0x7f00000008c0)) 12:40:21 executing program 5: bpf$BPF_GET_PROG_INFO(0x5, 0x0, 0x700) 12:40:21 executing program 4: process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000002a00)=""/1, 0x1}, {&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/119, 0x77}, {&(0x7f00000010c0)=""/145, 0x91}, {&(0x7f0000001180)=""/217, 0xfffffffffffffdf0}, {&(0x7f0000001280)=""/216, 0xd8}, {&(0x7f0000001380)=""/121, 0x79}, {&(0x7f0000003c40)}, {&(0x7f0000001400)=""/49, 0x31}, {&(0x7f00000014c0)=""/76, 0x4c}], 0xa, &(0x7f0000001740)=[{&(0x7f0000001600)=""/50, 0x32}, {&(0x7f0000001640)=""/231, 0xe7}, {&(0x7f0000002900)=""/149, 0x98}], 0x3, 0x0) 12:40:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004240)=@newtaction={0xec4, 0x30, 0x0, 0x0, 0x0, {}, [{0xeb0, 0x1, [@m_mirred={0xeac, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xe7d, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0xfffffdef}}, 0x0) 12:40:22 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x6402, 0x0) 12:40:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/241, 0x1c3}, {&(0x7f00000003c0)=""/209, 0xd}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_misc(r1, &(0x7f0000000f80)={'syz1', "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"}, 0x1c0) 12:40:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) 12:40:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') write$FUSE_GETXATTR(r0, 0x0, 0x0) 12:40:22 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:22 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:22 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x6402, 0x0) 12:40:22 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x10000}) 12:40:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000004300), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)) [ 318.646101][ T4769] syz-executor.1 sent an empty control message without MSG_MORE. 12:40:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003400), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 12:40:22 executing program 3: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000440)) syz_open_dev$vcsa(&(0x7f00000003c0), 0x0, 0x0) r0 = syz_clone(0x40000480, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="68828f701dc134150836a0c3a2af4a1f5bbcf679a390677128e5728a04cffa0a28cfa167295fc8f47b9b53ffc37bca79f0b2898d2ed514563b00c680ce4ac69ac70222c7a4bc838ae1e7e6aef0a859cbffd66cb2f1102d585bcc8ae749836bf967e42157157dbf2d12a24bb45655deb13267376aeb0e761fe92b49c6604429005080f8998a3b123c8a8f5adcd7a851cc60d32727ebda7f0fe9eb4339749805d236127911f9d25f239736e11b9ab13483ac423bc2") sched_setaffinity(r0, 0x8, &(0x7f0000000200)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setparam(r2, &(0x7f0000000300)=0x91) r3 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, &(0x7f0000000240)=""/176) 12:40:22 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00'}) 12:40:22 executing program 5: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000080100000000000000f8000000000000000000000000000080008000ff030000000000000800000000000000ff010000000000000100000002", 0x45}, {&(0x7f0000010120)="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", 0x193, 0x4000}, {&(0x7f0000010320)="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", 0x175, 0x47a0}, {&(0x7f0000010540)="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", 0x174, 0x4fe0}, {&(0x7f0000010720)="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", 0x1ed, 0x57e0}, {&(0x7f0000011280)="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", 0x152, 0x7fe0}], 0x0, &(0x7f000007aa80)) 12:40:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 12:40:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 319.072813][ T4796] loop5: detected capacity change from 0 to 127 [ 319.114180][ T4796] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 319.176739][ T4796] ntfs3: loop5: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 319.223687][ T4796] ntfs3: loop5: failed to read volume at offset 0x11800 [ 319.246513][ T4796] ntfs3: loop5: failed to read volume at offset 0x21800 [ 319.346336][ T4796] ntfs3: loop5: Failed to load $BadClus. 12:40:23 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0xaac]}, 0x8}) 12:40:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 12:40:23 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020}, 0x2020) 12:40:23 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "925d03b3997b67985b48f0d72a3bcf3fb92466d0928aa271c2155362276985db68eb135a4fa7f762c498bf6664772ee233f772f861587901b991b7215e333110", "1cd728ebc8376a826680728b292f19675d79603bf9741fff6b09bdf399e7000ce1579a2a81a99c98dbd18e75a6f5ad91ebea83ba3ad6f568c7b3dd3628822adb", "4c9c2058b5ba0be9613085fff25e628fb32583121e9c25db577c7c94140f259a"}) 12:40:23 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:23 executing program 5: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000080100000000000000f8000000000000000000000000000080008000ff030000000000000800000000000000ff010000000000000100000002", 0x45}, {&(0x7f0000010120)="46494c453000050000000000000000000100010040000100a0010000000800000000000000000000040000000000000003000000000000000000000000000000100000006000000000001800000000004800000018000000801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd80106000000000000000000000000000000000000000001000000000000000000000000000000000000300000006800000000001800000002004a000000180001000500000000000500801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd80100d800000000000000d80000000000000600000000000000040324004d00460054000000000000008000000048000000010040000000010000000000000000007e00000000000000400000000000000000f803000000000000f803000000000000f8030000000000117f080000000000b0000000480000000100400000000300000000000000000000000000000000004000000000000000000800000000000010000000000000001000000000000000110104", 0x193, 0x4000}, {&(0x7f0000010320)="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", 0x175, 0x47a0}, {&(0x7f0000010540)="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", 0x174, 0x4fe0}, {&(0x7f0000010720)="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", 0x1ed, 0x57e0}, {&(0x7f0000011280)="000000000000000000000000000000000000000000000000000000000000020046494c45300005000000000000000000080001004000010080010000000800000000000000000000040000000800000002000000000000000000000000000000100000006000000000001800000000004800000018000000801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd801060000000000000000000000000000000000000000010000000000000000000000000000000000003000000070000000000018000000030052000000180001000500000000000500801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd8010000000000000000000000000000000006000000000000000803240042006100640043006c0075007300ffff0000000080000000180000000000180000000200000000001800000080000000500000000104", 0x152, 0x7fe0}], 0x0, &(0x7f000007aa80)) 12:40:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 12:40:23 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000001200)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 12:40:23 executing program 2: arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000100)) bpf$BPF_GET_PROG_INFO(0x8, 0x0, 0x6) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000ef41c05d580000000000fbdb000000000000", @ANYRES32=0x0, @ANYBLOB="02000d001000f3ff0b000a00060005000101000006000500050500000900010063616b6500000000"], 0x40}, 0x1, 0x0, 0x0, 0x4001010}, 0x40) [ 319.645608][ T4809] loop5: detected capacity change from 0 to 127 12:40:23 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020}, 0x2020) [ 319.718443][ T4809] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) 12:40:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) 12:40:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x81000000}, 0x0) [ 319.772877][ T4809] ntfs3: loop5: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only 12:40:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004240)=@newtaction={0x14}, 0x14}, 0x300}, 0x0) 12:40:23 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) write$fb(r0, 0x0, 0x0) [ 319.869987][ T4809] ntfs3: loop5: failed to read volume at offset 0x11800 [ 319.913032][ T4809] ntfs3: loop5: failed to read volume at offset 0x21800 [ 319.982172][ T4809] ntfs3: loop5: Failed to load $BadClus. 12:40:24 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:24 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 12:40:24 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, 0x0) 12:40:24 executing program 3: syz_clone(0x360b00, 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004240)=@newtaction={0xec4, 0x30, 0x0, 0x0, 0x0, {}, [{0xeb0, 0x1, [@m_mirred={0xeac, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xe7d, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0xf}}, 0x0) 12:40:24 executing program 1: socketpair(0x1d, 0x0, 0x800, &(0x7f0000000080)) 12:40:24 executing program 5: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000040400000000000000f8000000000000000000000000000080008000ff070000000000000400000000000000ff00000000000000f600000001", 0x45}, {&(0x7f0000010120)="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", 0x18b, 0x4000}, {&(0x7f00000102e0)="00000000000000000000000000000000b00000004800000001004000000003000000000000000000000000000000000040000000000000000010000000000000080000000000000008000000000000001101020000000000ffffffff0000030046494c4530000300000000000000000001000100380001005801000000040000000000000000000003000000010000000200000000000000100000006000000000001800000000004800000018000000801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd801060000000000000000000000000000000000000000010000000000000000000000000000000000003000000070000000000018000000020052000000180001000500000000000500801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd801001000000000000000100000000000000600000000000000080324004d00460054004d006900720072000000000000008000000048", 0x16d, 0x43a0}, {&(0x7f00000104c0)="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", 0x16c, 0x47e0}, {&(0x7f0000010660)="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", 0x1e5, 0x4be0}, {0x0, 0x0, 0x57e0}, {&(0x7f0000011040)="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", 0x18b, 0x5fe0}], 0x0, &(0x7f000007c6a0)) 12:40:24 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x5452, &(0x7f00000002c0)) 12:40:24 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20) 12:40:24 executing program 3: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, &(0x7f00000012c0)=[{&(0x7f0000001180)=""/42, 0x2a}], 0x1, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) 12:40:24 executing program 2: r0 = io_uring_setup(0x3be3, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 12:40:24 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) [ 320.817243][ T4856] loop5: detected capacity change from 0 to 95 [ 320.858450][ T4856] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 320.931250][ T4856] ntfs3: loop5: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 321.000157][ T4856] ntfs3: loop5: failed to read volume at offset 0x100000 [ 321.125988][ T4856] ntfs3: loop5: failed to read volume at offset 0x100000 [ 321.145992][ T4856] ntfs3: loop5: failed to read volume at offset 0x100000 [ 321.173144][ T4856] ntfs3: loop5: failed to read volume at offset 0x100000 [ 321.203151][ T4856] ntfs3: loop5: failed to read volume at offset 0x101000 [ 321.210421][ T4856] ntfs3: loop5: failed to read volume at offset 0x102000 [ 321.217616][ T4856] ntfs3: loop5: failed to read volume at offset 0x104000 [ 321.225004][ T4856] ntfs3: loop5: failed to read volume at offset 0x108000 12:40:25 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 12:40:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20001) write$fb(r0, 0x0, 0x0) 12:40:25 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000100)) 12:40:25 executing program 2: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)={0x9f}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 12:40:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0010000fddbdfb16f5440b33058bab56b2500f20500f23ca94f9042"], 0x1c0}}, 0x0) 12:40:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0"], 0x1c0}}, 0x0) 12:40:25 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001c"]) 12:40:25 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x1b, &(0x7f00000000c0)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc}]}}) 12:40:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) 12:40:25 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000004300), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x8}}) 12:40:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x8, 0x80000000}, 0x48) 12:40:25 executing program 0: syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 321.935012][ T4890] autofs4:pid:4890:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 322.145998][ T3727] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 322.396074][ T3727] usb 4-1: Using ep0 maxpacket: 16 [ 322.596141][ T3727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.641288][ T3727] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.674725][ T3727] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 12:40:26 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000004300), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x8}}) 12:40:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x8, 0x80000000, 0x2}, 0x48) 12:40:26 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20001) write$fb(r0, &(0x7f0000000040)="e5", 0x1) 12:40:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') write$FUSE_GETXATTR(r0, &(0x7f0000002100)={0x18}, 0x18) 12:40:26 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20001) write$fb(r0, &(0x7f0000000040)="e5e422df9c247b582ce49538187e662cdc96e42d8955f1cef361ce5ec4463b", 0x1f) 12:40:26 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xed9df9169ce36ef3, 0xffffffffffffffff, 0x10000000) 12:40:26 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000800)) [ 322.856824][ T3727] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.896052][ T3727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.904529][ T3727] usb 4-1: Product: syz [ 322.960588][ T3727] usb 4-1: Manufacturer: syz [ 322.988104][ T3727] usb 4-1: SerialNumber: syz [ 323.276765][ T3727] cdc_ncm 4-1:1.0: bind() failure [ 323.284030][ T3727] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 323.290996][ T3727] cdc_ncm 4-1:1.1: bind() failure [ 323.298012][ T3727] usb 4-1: USB disconnect, device number 3 12:40:27 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 12:40:27 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0xff}}, 0x18) 12:40:27 executing program 1: getrusage(0x0, &(0x7f0000000c40)) 12:40:27 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x9f}, &(0x7f0000000100)={0x77359400}, 0x0) 12:40:27 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x1b, &(0x7f00000000c0)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc}]}}) 12:40:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) 12:40:27 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x1b, &(0x7f00000000c0)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc}]}}) 12:40:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) 12:40:27 executing program 4: syz_mount_image$befs(&(0x7f0000002300), &(0x7f0000002340)='./file0\x00', 0x0, 0x0, 0x0, 0x21022, &(0x7f0000004840)) 12:40:27 executing program 5: syz_mount_image$ubifs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[], [{@seclabel}]}) 12:40:27 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8}, 0xc) 12:40:27 executing program 4: r0 = syz_clone(0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x2, &(0x7f0000000340)={r1, 0x12, 0x0, 0xb4, 0x0, 0x5e}, 0x20) 12:40:28 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) 12:40:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) [ 323.912930][ T4961] UBIFS error (pid: 4961): cannot open "(null)", error -22 [ 324.236017][ T3727] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 324.251004][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd 12:40:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) 12:40:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) [ 324.515989][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 324.556087][ T3727] usb 4-1: Using ep0 maxpacket: 16 [ 324.719609][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.730139][ T14] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 324.740370][ T14] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 324.766311][ T3727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.779475][ T3727] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 324.795990][ T3727] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 324.906061][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.920916][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.936167][ T14] usb 1-1: Product: syz [ 324.940359][ T14] usb 1-1: Manufacturer: syz [ 324.944973][ T14] usb 1-1: SerialNumber: syz [ 324.956144][ T3727] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.969179][ T3727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.985921][ T3727] usb 4-1: Product: syz [ 324.990842][ T3727] usb 4-1: Manufacturer: syz [ 324.995488][ T3727] usb 4-1: SerialNumber: syz [ 325.256140][ T14] cdc_ncm 1-1:1.0: bind() failure [ 325.263946][ T14] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 325.271650][ T14] cdc_ncm 1-1:1.1: bind() failure [ 325.279980][ T14] usb 1-1: USB disconnect, device number 2 [ 325.288598][ T3727] cdc_ncm 4-1:1.0: bind() failure [ 325.302492][ T3727] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 325.311501][ T3727] cdc_ncm 4-1:1.1: bind() failure [ 325.344645][ T3727] usb 4-1: USB disconnect, device number 4 12:40:29 executing program 3: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000080100000000000000f8000000000000000000000000000080008000ff030000000000000800000000000000ff010000000000000100000002", 0x45}, {&(0x7f0000010120)="46494c453000050000000000000000000100010040000100a0010000000800000000000000000000040000000000000003000000000000000000000000000000100000006000000000001800000000004800000018000000801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd80106000000000000000000000000000000000000000001000000000000000000000000000000000000300000006800000000001800000002004a000000180001000500000000000500801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd80100d800000000000000d80000000000000600000000000000040324004d00460054000000000000008000000048000000010040000000010000000000000000007e", 0x121, 0x4000}, {&(0x7f0000010320)="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", 0x175, 0x47a0}, {&(0x7f0000010540)="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", 0x174, 0x4fe0}, {&(0x7f0000010720)="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", 0x1ed, 0x57e0}, {0x0}], 0x0, &(0x7f000007aa80)) 12:40:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) 12:40:29 executing program 0: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x10d280, 0x0) 12:40:29 executing program 4: r0 = syz_clone(0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x2, &(0x7f0000000340)={r1, 0x12, 0x0, 0xb4, 0x0, 0x5e}, 0x20) 12:40:29 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x40086602, &(0x7f00000002c0)) 12:40:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000004300), 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/time_for_children\x00') copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 12:40:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0xa, 0x2, 0xad2, 0x81}, 0x48) 12:40:29 executing program 5: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x470) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0xd0006400, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000001080)="e02b16a3dc4dfc8ab0a8e2313a62ef656f689db5a8a696ada0328f007f21347fde58b41aa9b4a7e8aca5d52196dc198e8abc023e6553edf3627d5762a87c4520e562ddc2a39d7adb2069077719e7eccb141e4565aa09d9b618985fe2cf5cb046e2fe966376dd3c956eb4d4824e02540fa2932f48590b9628e9fb6a31719305bbcda52e8d009c7ce8a17fef2bfb6ba63c2d0c407c7c00f408a3904b2641f709f7e15d943c4c0eb6ae66c79443a688b196016b05e881ba5461ce816c6c040c1137394e1a1e3200daf05b57f222fa47e642cd1c5b8dbb4142c17ab07e355124af08ba556ff9c8b42142410803e878") r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8936, 0x0) [ 325.924084][ T5027] loop3: detected capacity change from 0 to 87 12:40:29 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[], 0x48, 0x0) [ 325.967834][ T5027] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) 12:40:30 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x9f}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) [ 326.033208][ T5027] ntfs3: loop3: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only 12:40:30 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x400000) 12:40:30 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x141001) write$fb(r0, &(0x7f0000000040)="94", 0x1) [ 326.142852][ T5027] ntfs3: loop3: failed to read volume at offset 0x11800 [ 326.218921][ T5027] ntfs3: loop3: failed to read volume at offset 0x21800 [ 326.273639][ T5027] ntfs3: loop3: Failed to load $BadClus. 12:40:30 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x92, 0x0) read$fb(r0, &(0x7f0000000140)=""/4096, 0x1000) 12:40:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:40:30 executing program 4: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000140)) 12:40:30 executing program 3: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000080100000000000000f8000000000000000000000000000080008000ff030000000000000800000000000000ff010000000000000100000002", 0x45}, {&(0x7f0000010120)="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", 0x121, 0x4000}, {&(0x7f0000010320)="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", 0x175, 0x47a0}, {&(0x7f0000010540)="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", 0x174, 0x4fe0}, {&(0x7f0000010720)="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", 0x1ed, 0x57e0}, {0x0}], 0x0, &(0x7f000007aa80)) 12:40:30 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x400000) [ 326.418273][ T5050] loop3: detected capacity change from 0 to 87 [ 326.439790][ T3647] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.465914][ T3647] Buffer I/O error on dev loop3, logical block 0, async page read [ 326.542287][ T3647] loop3: unable to read partition table [ 326.571142][ T5050] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 326.612570][ T5050] ntfs3: loop3: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 326.695012][ T5050] ntfs3: loop3: failed to read volume at offset 0x11800 [ 326.714763][ T5050] ntfs3: loop3: failed to read volume at offset 0x21800 [ 326.730386][ T5050] ntfs3: loop3: Failed to load $BadClus. 12:40:30 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 12:40:30 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) 12:40:30 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x24000, 0x0) 12:40:30 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x400000) 12:40:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) 12:40:30 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 12:40:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04", 0xb) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000680)=""/4096, 0x12}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7a21df2ce04459006ac39c9b25739581ba920b6e6bb715478a3b494567555763", 0x20}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 12:40:30 executing program 3: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0xfffffffffffffffc) 12:40:30 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 12:40:31 executing program 1: syz_clone(0x520c0000, 0x0, 0x1c, 0x0, 0x0, 0x0) [ 327.005976][ T5075] syz-executor.0 (5075): /proc/5075/oom_adj is deprecated, please use /proc/5075/oom_score_adj instead. 12:40:31 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f00000005c0)) 12:40:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0xc0189436, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x101}) 12:40:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) 12:40:31 executing program 5: r0 = syz_io_uring_setup(0x180, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) io_uring_enter(r0, 0x5b25, 0x80000, 0x0, 0x0, 0x0) 12:40:31 executing program 3: r0 = syz_io_uring_setup(0x180, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x5b25, 0x0, 0x0, 0x0, 0x0) 12:40:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000680)=""/4096, 0x22}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7a21df2ce04459006ac39c9b25739581ba920b6e6bb71547", 0x18}], 0x1}, 0x0) 12:40:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, 0x0, 0x0) 12:40:32 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000082505a8a44000010203010902"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 12:40:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000004100)='X', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/78, 0x4e}], 0x1}}], 0x1, 0x60, 0x0) 12:40:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x4e23, @remote}], 0x2c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf250b0000000800090005ac0f00180045f50800030001ac0f000418060008003a8b058a01001100070032dc0700ad33c6b5da44000000000000000900"/84], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x10, 0x0, 0x0, 0x1f, 0x80, 0x0, 0x5, 0x0, 0xc2, 0xfb, 0x0, 0xfd}, 0xe) r4 = dup(0xffffffffffffffff) recvmmsg$unix(r4, &(0x7f0000002280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x600, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e1d, @private=0xa010100}}, 0x0, 0x0, 0x1000, 0x8, 0x5}, &(0x7f0000000500)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000480)={r6, 0x5c, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0xff, @mcast1, 0xffffffc0}, @in={0x2, 0x4e21, @private=0xa010101}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @private}]}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 12:40:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_OBJ_TYPE={0x8}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 12:40:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') read$FUSE(r0, 0x0, 0x2e000000) 12:40:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, 0x0, 0x0) [ 328.445912][ T141] usb 6-1: new high-speed USB device number 5 using dummy_hcd 12:40:32 executing program 3: r0 = syz_io_uring_setup(0x180, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x5b25, 0x0, 0x0, 0x0, 0x0) 12:40:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="84", 0x1}], 0x1}}], 0x1, 0x0) 12:40:32 executing program 1: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000040400000000000000f8000000000000000000000000000080008000ff070000000000000400000000000000ff00000000000000f600000001", 0x45}, {&(0x7f0000010120)="46494c45300003000000000000000000010001003800010098010000000400000000000000000000040000000000000003", 0x31, 0x4000}, {&(0x7f00000102e0)="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", 0x16d, 0x43a0}, {&(0x7f00000104c0)="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", 0x12d, 0x47e0}, {&(0x7f0000010660)="000000000000000000000000000000000000000000000000000000000000020046494c453000030000000000000000000300010038000100e001000000040000000000000000000006000000030000000400000000000000100000004800000000001800000000003000000018000000801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd801060000000000000000000000000000003000000068000000000018000000010050000000180001000500000000000500801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd8010000000000000000000000000000000006000000000000000703240056006f006c0075006d00650050000000800000000000180000000200640000001800000001000480480000005400000000000000140000000200340002000000000014009f011200010100000000000512000000000018009f011200010200000000000520000000200200000101000000000005120000000102000000000005200000002002000000000000600000003000000000001800000004001200000018000000730079007a006b0061006c006c0065007200000000000000700000002800000000001800000005000c00000018000000000000000000000003010000000000008000000018", 0x1e5, 0x4be0}, {&(0x7f00000138a0)="d000000020000000000018000000030008000000180000002d0000003c000000e00000005800000000001800000004003c000000180000001400000000060400244c585549440000000000001400000000060400244c584749440000000000001400000000060400244c584d4f4400ed8100000000000000ffffffff0000e20046494c452a00030000000000000000000100010030", 0x95, 0x3f80}], 0x0, &(0x7f000007c6a0)) [ 328.765946][ T141] usb 6-1: Using ep0 maxpacket: 8 [ 328.837273][ T5135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.874218][ T5135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.895009][ T5162] loop1: detected capacity change from 0 to 75 [ 328.985128][ T5162] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 329.025995][ T141] usb 6-1: unable to get BOS descriptor or descriptor too short [ 329.091831][ T5162] ntfs3: loop1: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 329.103205][ T141] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 329.118331][ T141] usb 6-1: can't read configurations, error -71 [ 329.146941][ T5162] ntfs3: loop1: failed to read volume at offset 0xff000 [ 329.162222][ T5162] ntfs3: loop1: Failed to load $MFT. 12:40:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/14, 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/152, 0x98}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7a21df2ce0629c006ac39c9b257395ff8d4a4d37bf7106050fbf870c93185b7bd04be8a8850d34b9c567b4895b38e2aa5e388198fd15d2707866ee0753f11122f70ae67e3e9a92d8d60b1e13129861f7eefc0f1719680da43e5cd7042aca11fcc4d4663cf8f8beedd45878ad7d5b8b9a289efd107d6a95c52120074503ef188df62aaf637adf9315ca", 0x89}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 12:40:33 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x541b, 0x0) 12:40:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x10}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@authinfo={0x10}], 0x10}, 0x0) 12:40:33 executing program 1: pipe(0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 12:40:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:33 executing program 5: r0 = socket(0x840000000002, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @local, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 12:40:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00']}, 0x178) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)=""/211, 0xd3}], 0x1}}], 0x1, 0x0, 0x0) 12:40:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:33 executing program 5: r0 = socket(0x840000000002, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @local, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 329.805924][ T3682] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 330.015943][ T3682] usb 2-1: device descriptor read/64, error 18 12:40:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) [ 330.296079][ T3682] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 330.526020][ T3682] usb 2-1: device descriptor read/64, error 18 [ 330.646154][ T3682] usb usb2-port1: attempt power cycle 12:40:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) [ 331.075978][ T3682] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 331.206193][ T3682] usb 2-1: Invalid ep0 maxpacket: 0 [ 331.365886][ T3682] usb 2-1: new high-speed USB device number 6 using dummy_hcd 12:40:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) [ 331.486161][ T3682] usb 2-1: Invalid ep0 maxpacket: 0 [ 331.498947][ T3682] usb usb2-port1: unable to enumerate USB device 12:40:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x0, {{0x0, 0xffffffffffffffff, 0x2}}}, 0x28) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) (async) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) (async) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x0, {{0x0, 0xffffffffffffffff, 0x2}}}, 0x28) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) (async) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x0, {{0x0, 0xffffffffffffffff, 0x2}}}, 0x28) (async) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x0, {{0x0, 0xffffffffffffffff, 0x2}}}, 0x28) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x0, {{0x0, 0xffffffffffffffff, 0x2}}}, 0x28) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x0, {{0x0, 0xffffffffffffffff, 0x2}}}, 0x28) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:42 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 12:40:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 12:40:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 12:40:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 12:40:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 12:40:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 12:40:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:40:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:40:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 360.267600][ T8] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.689126][ T8] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.928953][ T8] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.083967][ T8] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:41:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 363.479874][ T8] device hsr_slave_0 left promiscuous mode [ 363.494818][ T8] device hsr_slave_1 left promiscuous mode [ 363.507405][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.530532][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.549717][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.567841][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.596474][ T8] device bridge_slave_1 left promiscuous mode [ 363.603570][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.625176][ T8] device bridge_slave_0 left promiscuous mode [ 363.633942][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.656638][ T8] device veth1_macvtap left promiscuous mode [ 363.663356][ T8] device veth0_macvtap left promiscuous mode [ 363.670524][ T8] device veth1_vlan left promiscuous mode [ 363.676744][ T8] device veth0_vlan left promiscuous mode [ 363.859799][ T8] team0 (unregistering): Port device team_slave_1 removed [ 363.871489][ T8] team0 (unregistering): Port device team_slave_0 removed [ 363.883737][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.902550][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.953471][ T8] bond0 (unregistering): Released all slaves [ 365.848145][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.860709][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.868238][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.881311][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.889598][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 365.897215][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.995438][ T5681] chnl_net:caif_netlink_parms(): no params data found [ 366.042010][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.049342][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.058096][ T5681] device bridge_slave_0 entered promiscuous mode [ 366.066402][ T5681] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.073532][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.081922][ T5681] device bridge_slave_1 entered promiscuous mode [ 366.107072][ T5681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.118695][ T5681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.143054][ T5681] team0: Port device team_slave_0 added [ 366.150592][ T5681] team0: Port device team_slave_1 added [ 366.168816][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.175771][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.201903][ T5681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.214055][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.221047][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.248957][ T5681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.274799][ T5681] device hsr_slave_0 entered promiscuous mode [ 366.282436][ T5681] device hsr_slave_1 entered promiscuous mode [ 366.360827][ T5681] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.368171][ T5681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.376086][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.383173][ T5681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.436198][ T5681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.450688][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.463793][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.473093][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.481835][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 366.496924][ T5681] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.511542][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.520525][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.527666][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.556987][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.565393][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.572509][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.581945][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.590602][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.606908][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.614812][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.630393][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.642854][ T5681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 366.676342][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 366.683756][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.703318][ T5681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.035318][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 367.044069][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.063101][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 367.078583][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.093936][ T5681] device veth0_vlan entered promiscuous mode [ 367.105955][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.114390][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.133179][ T5681] device veth1_vlan entered promiscuous mode [ 367.165466][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 367.174297][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 367.189452][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.202990][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.216512][ T5681] device veth0_macvtap entered promiscuous mode [ 367.225562][ T5681] device veth1_macvtap entered promiscuous mode [ 367.245404][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 367.256116][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.268021][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 367.278992][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.289070][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 367.300383][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.310486][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 367.321347][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.331418][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 367.342088][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.353455][ T5681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.364159][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.373070][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 367.381010][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.389611][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.399192][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 367.409977][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.420409][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 367.431081][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.441318][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 367.452020][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.461938][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 367.472441][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.482358][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 367.492836][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.504073][ T5681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.513700][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.523460][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.010528][ T26] Bluetooth: hci0: command 0x0409 tx timeout 12:41:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:15 executing program 3: pipe(&(0x7f00000010c0)) madvise(&(0x7f0000d6b000/0x2000)=nil, 0x2000, 0x0) 12:41:15 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0xd0006400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)="e02b16a3dc4dfc8ab0a8e2313a62ef656f689db5a8a696ada0328f007f21347fde58b41aa9b4a7e8aca5d52196dc198e8abc023e6553edf3627d5762a87c4520e562ddc2a39d7adb2069077719e7eccb141e4565aa09d9b618985fe2cf5cb046e2fe966376dd3c956eb4d4824e02540fa2932f48590b9628e9fb6a31719305bbcda52e8d009c7ce8a17fef2bfb6ba63c2d0c407c7c00f408a3904b2641f709f7e15d943c4c0eb6ae66c79443a688b196016b05e881ba5461ce816c6c040c1137394e1a1e3200daf05b57f222fa47e642cd1c5b8dbb4142c17ab07e355124af08ba556ff9c8b4") [ 371.646699][ T26] Bluetooth: hci0: command 0x041b tx timeout 12:41:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/14, 0x7}, {&(0x7f0000000680)=""/4096, 0x22}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7a21df2ce0445900", 0x8}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 12:41:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:18 executing program 3: io_setup(0x20, &(0x7f00000003c0)=0x0) r1 = inotify_init() io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000000812d000, 0x9, 0x3, 0x1, 0x0, r1, 0x0}]) 12:41:18 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0xd0006400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)="e02b16a3dc4dfc8ab0a8e2313a62ef656f689db5a8a696ada0328f007f21347fde58b41aa9b4a7e8aca5d52196dc198e8abc023e6553edf3627d5762a87c4520e562ddc2a39d7adb2069077719e7eccb141e4565aa09d9b618985fe2cf5cb046e2fe966376dd3c956eb4d4824e02540fa2932f48590b9628e9fb6a31719305bbcda52e8d009c7ce8a17fef2bfb6ba63c2d0c407c7c00f408a3904b2641f709f7e15d943c4c0eb6ae66c79443a688b196016b05e881ba5461ce816c6c040c1137394e1a1e3200daf05b57f222fa47e642cd1c5b8dbb4142c17ab07e355124af08ba556ff9c8b4") [ 374.587496][ T26] Bluetooth: hci0: command 0x040f tx timeout 12:41:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:21 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='br_fdb_update\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r7], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 12:41:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 377.668110][ T3679] Bluetooth: hci0: command 0x0419 tx timeout [ 377.837485][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.843815][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 12:41:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) [ 378.680091][ T27] audit: type=1804 audit(1662036082.621:6): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2806768976/syzkaller.xUQzV4/97/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 12:41:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/152, 0x98}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7a21df2ce0629c006ac39c9b257395ff8d4a4d37bf7106050fbf870c93185b7bd04be8a8850d34b9c567b4895b38e2aa5e388198fd15d2707866ee0753f11122f70ae67e3e9a92d8d60b1e13129861f7eefc0f1719680da43e5cd7042aca11fcc4d4663cf8f8beedd45878ad7d5b8b9a289efd107d6a95c52120074503ef188df62aaf637adf9315ca", 0x89}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 12:41:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:23 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='br_fdb_update\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r7], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 12:41:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:26 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='br_fdb_update\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r7], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 12:41:26 executing program 5: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='br_fdb_update\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r7], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 12:41:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 385.942662][ T27] audit: type=1804 audit(1662036089.891:7): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir558623676/syzkaller.PN5J8J/87/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 12:41:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 385.968997][ T27] audit: type=1804 audit(1662036089.891:8): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2509198146/syzkaller.gKgbUn/4/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 12:41:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 387.531917][ T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.123364][ T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.223795][ T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.359156][ T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.069616][ T41] device hsr_slave_0 left promiscuous mode [ 390.077847][ T41] device hsr_slave_1 left promiscuous mode [ 390.084347][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.098967][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.111829][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.122433][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.134974][ T41] device bridge_slave_1 left promiscuous mode [ 390.144595][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.161007][ T41] device bridge_slave_0 left promiscuous mode [ 390.172189][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.188494][ T41] device veth1_macvtap left promiscuous mode [ 390.194535][ T41] device veth0_macvtap left promiscuous mode [ 390.207671][ T41] device veth1_vlan left promiscuous mode [ 390.213492][ T41] device veth0_vlan left promiscuous mode [ 390.451252][ T41] team0 (unregistering): Port device team_slave_1 removed [ 390.465442][ T41] team0 (unregistering): Port device team_slave_0 removed [ 390.477039][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.489902][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.545736][ T41] bond0 (unregistering): Released all slaves [ 393.836213][ T3651] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 396.480294][ T3645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.488739][ T3645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.498287][ T3645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 396.506330][ T3645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.514471][ T3645] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 396.521917][ T3645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 396.586428][ T6374] chnl_net:caif_netlink_parms(): no params data found [ 396.622039][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.629573][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.638691][ T6374] device bridge_slave_0 entered promiscuous mode [ 396.646736][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.653901][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.661872][ T6374] device bridge_slave_1 entered promiscuous mode [ 396.681280][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.692365][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.714056][ T6374] team0: Port device team_slave_0 added [ 396.722307][ T6374] team0: Port device team_slave_1 added [ 396.740108][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.747961][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.774057][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.785656][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.792652][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.818625][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.845957][ T6374] device hsr_slave_0 entered promiscuous mode [ 396.852543][ T6374] device hsr_slave_1 entered promiscuous mode [ 396.861250][ T6374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.869187][ T6374] Cannot create hsr debugfs directory [ 396.922251][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.929433][ T6374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.937034][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.944088][ T6374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.982334][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.994669][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.003317][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.011855][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.019930][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 397.033204][ T6374] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.042595][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.051670][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.058778][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.076884][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.085387][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.092512][ T3267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.104131][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.113252][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.124383][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.138365][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.147201][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.156233][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 397.172294][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.181092][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.192190][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.404949][ T6374] device veth0_vlan entered promiscuous mode [ 397.412563][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.422338][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.430704][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.439093][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.455368][ T6374] device veth1_vlan entered promiscuous mode [ 397.473457][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 397.482241][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 397.490428][ T3727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 397.500406][ T6374] device veth0_macvtap entered promiscuous mode [ 397.511105][ T6374] device veth1_macvtap entered promiscuous mode [ 397.525401][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 397.538416][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.548740][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 397.559561][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.569534][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 397.580260][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.590597][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 397.601329][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.611560][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 397.622229][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.634371][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.647659][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.662736][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 397.673539][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 397.684720][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.694926][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 397.705504][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.715410][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 397.725940][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.736086][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 397.746622][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.756730][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 397.767264][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.780048][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.788608][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 397.797828][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.927320][ T27] audit: type=1804 audit(1662036101.881:9): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2436359839/syzkaller.MdkiL7/0/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 12:41:42 executing program 3: r0 = socket(0x2, 0x3, 0xff) read$alg(r0, &(0x7f00000002c0)=""/205, 0xcd) sendmmsg$unix(r0, &(0x7f0000000840)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="62d54f985857ffb3ac33770ba67d9729f37fba", 0x13}, {&(0x7f0000000200)='x', 0x1}], 0x2}}], 0x1, 0x0) 12:41:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:42 executing program 5: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='br_fdb_update\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r7], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 12:41:42 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='br_fdb_update\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r7], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 12:41:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 398.872678][ T27] audit: type=1804 audit(1662036102.811:10): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir558623676/syzkaller.PN5J8J/88/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 [ 398.920967][ T3267] Bluetooth: hci2: command 0x0409 tx timeout 12:41:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 399.000517][ T27] audit: type=1804 audit(1662036102.951:11): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2509198146/syzkaller.gKgbUn/5/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 [ 399.042355][ T6442] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 12:41:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:43 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='br_fdb_update\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r7], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 12:41:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:43 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='br_fdb_update\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r7], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 12:41:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:44 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='br_fdb_update\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r7], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 12:41:44 executing program 5: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='br_fdb_update\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r7], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 12:41:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:44 executing program 1: r0 = socket(0x2, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000000840)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="62d54f985857ffb3ac33770ba67d9729f37fba", 0x13}, {&(0x7f0000000200)='x', 0x1}], 0x2}}, {{&(0x7f0000000400)=@abs, 0x6e, 0x0, 0xffffffff00000000}}], 0x2, 0x0) 12:41:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:44 executing program 5: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='br_fdb_update\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r7], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 12:41:44 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) [ 400.967089][ T916] Bluetooth: hci2: command 0x041b tx timeout [ 401.043447][ T27] audit: type=1804 audit(1662036104.991:12): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2436359839/syzkaller.MdkiL7/2/cgroup.controllers" dev="sda1" ino=1158 res=1 errno=0 [ 401.283710][ T27] audit: type=1804 audit(1662036105.221:13): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2509198146/syzkaller.gKgbUn/7/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 12:41:45 executing program 3: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0xfffffffffffffffb}}]}) 12:41:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x32, 0x0, 0x11) 12:41:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x50, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) 12:41:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) 12:41:45 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000080)="02e0c26b6acd7b61ed00b87858e7f69b0457f71755f2cd6d8d47e82a6dd4b63a50cd0b9c5decb2a049db3e", 0x2b}], 0x100000000000033d}}], 0x2, 0x0) [ 401.861656][ T6519] binder: Bad value for 'max' 12:41:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x12, &(0x7f0000000000), 0x4) 12:41:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x6, 0x0, &(0x7f0000000080)) 12:41:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) 12:41:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) r4 = dup(r2) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0xa, 0x0, &(0x7f0000000080)) 12:41:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x33, &(0x7f0000000000), 0x4) 12:41:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) 12:41:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x15, 0x0, &(0x7f0000000080)) 12:41:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x42, 0x0, &(0x7f0000000080)) 12:41:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) [ 403.239802][ T916] Bluetooth: hci2: command 0x040f tx timeout 12:41:47 executing program 3: r0 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa00x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1b, &(0x7f0000000000), 0x4) 12:41:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xc, &(0x7f0000000000), 0x4) 12:41:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x19, &(0x7f0000000000), 0x4) 12:41:48 executing program 1: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e664b7400020101000240008088f801", 0x17}, {0x0, 0x0, 0x9c3}], 0x0, &(0x7f0000000180)=ANY=[]) chmod(&(0x7f0000000380)='./file0\x00', 0x150) 12:41:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) 12:41:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x6, &(0x7f0000000000), 0x4) [ 404.430791][ T6601] loop1: detected capacity change from 0 to 9 12:41:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) 12:41:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xe, &(0x7f0000000000), 0x4) 12:41:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, &(0x7f0000000000)=0x5, 0x4) 12:41:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x2c, &(0x7f0000000000)=0x7, 0x4) 12:41:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x0, 0x2811fdff) 12:41:49 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x28, 0x0, 0x0, "151e92b3f351fa2ce6d96774da0c7c3c42"}, {0x80, 0x0, 0x0, "b071b402636bd07b6984dc0271ad45a98b97e32498f6c442e3cca1d3f57e8c9dc1fd2da6463687d4b0efc18b9806600e6a7b423afdcc24874ec71db9fd9ba7d3ff334a18532d4478ba3fd2e9eb7c11ee950928ef47334c1e893ac46d351c78c111484a8db4f5100c04"}, {0x1198, 0x0, 0x0, "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"}, {0xdc8, 0x0, 0x0, "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"}], 0x2008}}], 0x2, 0x0) 12:41:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0x77a, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 12:41:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) 12:41:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x31, 0x0, &(0x7f0000000080)) 12:41:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xf, &(0x7f0000000000), 0x4) 12:41:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x0, 0x2811fdff) 12:41:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x0, 0x2811fdff) 12:41:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x26, 0x0, &(0x7f0000000080)) 12:41:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3d0, 0x1d8, 0x0, 0x1d8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@rand_addr, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@dev}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan0\x00', 'veth0_to_bond\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'vlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) [ 405.436179][ T3727] Bluetooth: hci2: command 0x0419 tx timeout [ 405.518968][ T6665] x_tables: duplicate underflow at hook 1 12:41:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:49 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000600)) 12:41:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:50 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000022c0)={'veth1_to_bridge\x00', {0x2, 0x0, @remote}}) read$FUSE(r0, &(0x7f0000007000)={0x2020}, 0x2020) write$FUSE_ATTR(r1, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}}}, 0x78) 12:41:50 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:41:50 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) 12:41:50 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 12:41:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, 0x0, 0x0) 12:41:50 executing program 1: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7000, 0x0, &(0x7f0000ff9000/0x7000)=nil) 12:41:50 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000240)) 12:41:50 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000003640)=""/60) 12:41:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2004) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:50 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) 12:41:50 executing program 5: add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 12:41:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:50 executing program 3: r0 = socket(0x10, 0x3, 0x0) getpeername$packet(r0, 0x0, 0x0) 12:41:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:50 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000004200), 0x2, 0x0) 12:41:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:50 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0xa1c1, 0x0) 12:41:50 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00', 0x0, 0x0) 12:41:50 executing program 1: timer_settime(0x0, 0x0, &(0x7f0000001480)={{0x77359400}}, 0x0) 12:41:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x90) 12:41:51 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004200), 0x0, 0x0) getpeername$unix(r0, 0x0, 0x0) 12:41:51 executing program 5: getresuid(&(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) 12:41:51 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="fe26b5ccb0b17e77b82c05690f38b869122ff3bde20908ab168ce41796325b50aa085af1c199071e7b8132da926e8d6772dbfed0e16462292f2f9cd8798d1a1a0b5d37fea0dc830ae73180f123234996ff0c101127a081a60b97f5e1ec6427a4ae0518a1a38ec71e827cb885937c996e41824dc2a078690c064d9a81d2a6853da588f54dd6a9a9412986aa2831aee2bc177e94082bbfab7ecd181ee0639c49b4ca3e1091a77d3586aea41bb1df4ca64ed760bce1c97ae89096a09fbf2e8be1543e12b6e69df96203bf935bfc758f5e7a261cd13f2755933f094e95f269f989ad59e2b8b846f4f936a10348d37e8836e5b92d5ca3dd28278a08aed344", 0xfc}, {&(0x7f0000000280)="2bf6d68b7c3b6c78e64e574d068f29a627e526908e7146d10072662f5c25c5ff49e41b54507bd5e9114fcd8753b044306f8042bb3532fd78a52706192c0db0ffe1db286a29c50365e6aee68d5ccd1bc594babbd5924a8c61b91e6f591dc1c3158f8f47c4c471c705c5dbaa86e03cdf042ea49bfa3b", 0x75}, {&(0x7f0000000ec0)="6355ed9da5b83720786584d8ec0f9729c538cf64ad9872987f0a56742e1a04c869028456474b948be94d31a588a1d597248b377a8fa2c7693e123c4965bee3313927a79313be0d4fa7f0422b60381a0c300b53e0b24394e90e416b2abff7ab0aabe186a9eeb44f08bb0081a56311379e1194cb7fffe148df8a2b9a6bee9d3518e3e1e5f036de02971d74c9ddcee20692bec562ea4c1c474e0119273380c92ef0e5c37c1efa85f7fcf4b643538f942e3cb6a7638403e6fde04816f9193bc9c0ea6a7c787d9ad63682a2ce5cde3072b43f916b48c4257ba151b37bf0152b3a673ed0ca00da8a5af3d192456b3a4d4b7691cbc95728c230f0b6d37298506fdbfdab1d5c0e06d78a4539f5ef3ea218b7b05feef6c37b05179335f05ac9e7011b3f33013fc5ea7fb8f6a9971fe6da7e164b85ba8c26cdec4758a49d10edb24c9439ca7811f05f1f3da7e00be1a00368e83b9cb6cca3410254415b114769ac376685b58e03b2d91e57cc8936e4ea156ce87d5532dd9068660632e410e7bf2d243029567e75311433ca1f597032a9cff29c4151cac32e8b3f0e3fbf78e7efb26e6583a652ec50443e8b2ffd359e1389363f5d8aec5b52da9920a1c93c1c0bd69298e2c32f20a1ec325cc9b5988e0bf24fddcd09bde904af635404922680f683693920888380875c56b2f1cc488a066d5197b24e8c27180769b3001bb7b9d5f9ac931c770432f8b34d88303a9beec6e9cc44c40ffbeae462b71bbbb5b938ab73d4162f5687f410f089b617741119c4f3ac058125e1e7cc22b79b7e8b6352f578250a7705a32ae6448eb05ce734e4d4b2231399fea52398d09bfe41d585a6dcdb3294fc9ff1a46a49f93974b9c0962055bccf8f4aed5d68607290f04b938d59182f71b1e658b733d7b4fb921c31418c47cff9c74ee1b5f0c1b6fb345e6bac7b0f8ed6cd7b787156414a4d5de7b0bb134fea8971b3b2a6cd0288d3743e3fa0c9d280e14a086c7205418fe9295dc9bec16ee8ca36f458faa0a0ce7b3b54e133faf98f85f5b1eaa3da3a8d65eb2107f05dc56570ccdf4de66ad4799d01f2e56fbd87367f8798110946128c61b0f5d1fa0c648ddad0d31e67b6fc9a4a687851940802b38c2f2f8b74687e38ed9e5d831516dce68955c1c1d0b9356c2a07cbf0022eef2d144451f0e2c1567cab6d10d0ce8d42c49b9c43cefb52a8757f673059cd35448d21bfb65bb4296f5be13837c5c449f592e2f4ea95b52070618c6f6513897d2270fb029089b347e718683a876a7a67d82f7bf66b737f85201e0ca02f2d1ff4d8db08c34060d1140ffe5edc3f400bb0e4f7c97284471cb258958ba86f2f19674ab6703e00b7647fec5a545dab2229b535bbfe377ce5fcdb6c47c1cd394488ebe59f1220b56a890fd46beed4ac868a02ec96d1d7bf74182e1a48cd256409f7a2cc2be8161fcc9d2ba95fa89b3691f8f8f4c7940a73f463e4df332d2aec11dcd19efd709efff3c054e858630000065c8758df8096ec198f23cbd23d80c4dd7a997f150711d941482c0fe85ef64f56f66f7f86e063d17908e92b0a7dc624c9a5c839d6e013a075c7af9f30a6b9021f20b601885130bba13f16e18b1696f26f70381e0cc2387bdfa5a6a9267801807ed87c2a28f220e47856d5fe8397f39dda5ff38ce2a7809a9659c313d17bf4d41402d117ec75076964f8a2b00e403362e61de7e278f4696328b265ab920a4468054f6e241945bb2c5d1fc4f17d4a9ff1387c42e5a66ce48f3419d48f67dadeff7bd0d0bbdf6761016a5a4ac6cf9f4d3f59029991c2634d4f31ca5a7867a6b4d5201c468d559d9cc8c69aa0b37cd4e6dad65acb79d6119c76e6f9a474c95c8af3aad34bb9683365f6fa9461226393b8e133015617ded531808ff3cab130be5f87b43b3ffeefe2e65ec0ac1da5ade951dcbf147da5ff0e7874dbbf1b768dba72971ed60a5613a6b432072bc349ea981e0b9727226a8eb880bc2f09be4fce29741907864d1ea76184fa4b98db12d42e43f182adc8aa3e6c4411c739ad52aaf0a8c36c67a2b7287eea4f95e802399338ac4da24a465f39ab2c621d8e67fd924677f9262f127ac56ddffe184822c738016f58f28271de1f1cd644e0a507dd5ab7d20a6ba05472609cd8580eb93af39c070a0b1e6fa9abc3a2a8c1d27f6a4924acde8d4b09e6915b34e7956ce423ef040f15e3ee8867fcfe949d532c4686fa08d97f09048c8f86770d8e8272c265ec359696cf7c96b9ebcc88e9cf800968cc11383f3f6b36edece8b595a599be0d137e5623687f57086be70602b3fceb557c4e491fe2d5b808443a09826dd8c09f4fa3b7a78374ef7407c7b2a5a8f25b141cadea9925681e8001ea24a49a4c53d4908c4fee5293a0056325b93bc54378a8c370ca7e99e8f12d4e8aa13dbd19b165b8cf7014726935a178983b1f5f16448833df4d3acb6d594bcfb06a67cda1336ff2142838e76a5e4d1e3cfee8bea3bef2493f3981ee316fac99d140014f9bb6a48a754e55ac6a5e2d3719e1366eb1d2cd0b6f90dc1e0ef0879621ca0b0cba7430788a580ec4aa32ec5f85c4981047d290b6f948781a325cac8142b9c1fb73f1380345a8cab885477135f25c9dc29c4652cdc71496129f4c5298522d8a542acbcf386b5f77994105c7b0503505c670f33775ba322b4385c5e55e0883cec84d9c9fd1503423f63ca031de55d67f68667d3468ac2eab5257c0a9dd3b2ca8a03c537e78af66cbcd26be355ed61ba5348e1704054febd6a38ed39ff5450c17fc71601d55adc1a73dad65972d5c0316187c3527f27241073348738bb51f4c6e268bda8e72cbfe58d2f290c3da87312696d75f833e1c8841406db77df480c0f834577ed1c677832b039cf919eb061551c88849084e7a1d12c1130d1555b60330cb56b30c60441bdd7e69544fc1424d2d299a2172c2bf025135f4bdadb2cd64c2b0586999c8b769a16b9da43bcb9e19fda1a07acf92bb17b23659dab9d2d1cab4ac7bd63aeed4d11fb58249f8153bfaef5dd39415f4e449ecc3a2289622e537ca71aa94e33b84cf151acbecc2e3f3a6d6fb0ed396a7abd03e2882cb26a9ece359f22bcc6a6aff42fe28e810ac756624fb29a9a41f90b0efa5370314ab1e146bc13ff39c2b835b725456fb963e86fb47bf14e7c7dc6b9fcda37cf5b6aad136df71efd81c84cbaa19c57c22bd7a5267c5f46082a0f63c5c6524c0f07291adfe2ccb73eaabf00f8d0adbd5e1731aa2aebc863bacff424291f51d13f5c948a48d43d36b7aee01d8be8f8f7bf6b586ad91d5634710dfe6ebad7ee64bd8b523002ba91bcf5d0a1486ebf8e9bb9441dceab0b522656f4bb2d8023958d3da4a3d0c0c9f689958440444e010c31d948611d2b30839657f48e2a97eb1f02da50adf1ae04607a9d1040d9f4cf30e97f58f881be67d4812433a4add84fdea4776776e059cb4a14aec46d7dc507689c370f400180689a6f5397d99317e95559d743ba8ffa3f07826f479dd8bef2888e73ccbc5fb54193231322b11e5b587b5d91be0f5470aca100cb087992da0c2c3e01c279500a8b648d76d0d8430fa566b1d3dcc9ab67e106530b40118a6a227324b7f25d168c9a461598befb140fb64ae69a981695fafc5b8f89cca55f0033833ca798cf6a5a8a35c50a0a1e0731ac6c2d8ef826aa5fafffbef219e51b2ea0650d8db9b8fab325240f22fe048310f2d38567211365daaa9ea7ae440112a5b2d3df4ccf43543225d68f1e260927f61f2d2d72aaadcc7d6e3d390198ba826c45c2f5982f5cb21670e70a1cb44c7cda19e280355a3415580a82ea17cdc030247266888ebb2430c1e9a5641c4bbd893f303ace29d29c6d2e3ba3521cc736b6e029e4ad7e76d51e3f9924d4cba096dc1d4dceb2b10d2edaa331f8adcc6166796b4cba181c6dec4e8ede1c51ee0462f44fddeeb46ab42d181e401a973a4d7778473f87e542de94101da7a390ed5d491c895475f365f2a43e5d48ae354f5b6720db24fbaa900e70764a76ed9a0bf7836f4bda7b42981235e2d841993356c256c8a8ddf42e5956ad5d16aee607e8f18daad180ec6414b6d498ed7fdc52a9d20f0d53ceb021ac98cb4e41931e597792782a320784132be1499c387f6c9e3dfe439500ef16ec98cb0586d9c392be36f007756a5aaa7080ea6f5f6ca83ddcd", 0xb90}], 0x3}, 0x0) 12:41:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040), 0x4) 12:41:51 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 12:41:51 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:41:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:51 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x2b, 0x0, &(0x7f0000000040)) 12:41:51 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f00000000c0)) 12:41:51 executing program 3: r0 = syz_io_uring_setup(0x180, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0), 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) io_uring_enter(r0, 0x5b25, 0x0, 0x0, 0x0, 0x0) 12:41:52 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x25, 0x0, &(0x7f0000000040)) 12:41:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000e0001006e657464657673696d0000000f0002006e6574646576736909bc5e"], 0x54}}, 0x0) 12:41:52 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000340)='M', 0x1}], 0x2}}], 0x1, 0x0) 12:41:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000e0001006e657464657673696d0000000f0002006e6574646576736909bc5e"], 0x54}}, 0x0) 12:41:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 12:41:52 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x1600bd61, 0x0, &(0x7f0000000040)) 12:41:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000e0001006e657464657673696d0000000f0002006e6574646576736909bc5e"], 0x54}}, 0x0) 12:41:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) lseek(0xffffffffffffffff, 0x200, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:52 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x12, 0x0, &(0x7f0000000040)) 12:41:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x483}, 0x48) 12:41:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000e0001006e657464657673696d0000000f0002006e6574646576736909bc5e"], 0x54}}, 0x0) 12:41:52 executing program 5: pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000280)=@framed, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 12:41:52 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) 12:41:53 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x37, 0x0, &(0x7f0000000040)) 12:41:53 executing program 5: syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "e24e0a", 0x50, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, {[@dstopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x8}]}], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}, 0x0) 12:41:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8903, &(0x7f0000000000)) 12:41:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8913, &(0x7f0000000080)={'sit0\x00', 0x0}) 12:41:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:53 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xf3, 0x4) 12:41:53 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002e80)=ANY=[@ANYBLOB="1c000000000000000b00000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="000000001c"], 0xb0}}], 0x1, 0x0) 12:41:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="3a150000", @ANYRES16=r2, @ANYBLOB="01000000000000000000130000000e0001006e657464657673696d000000460002006e657464657673696d300000080003000000000008000b00000000000600110000000000"], 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xc7, 0x7, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8000, 0x20, 0x0, 0x8}}) ioctl$sock_SIOCDELRT(r0, 0x8916, 0x0) 12:41:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:53 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) 12:41:53 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1, 0x0) write(r1, &(0x7f0000000180)='t', 0x1) close(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0x200001000000067, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) splice(r0, 0x0, r1, 0x0, 0x4, 0x0) 12:41:53 executing program 1: r0 = socket(0x2, 0x1, 0x0) sendmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@abs={0x2}, 0x6e, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x10}, 0x20008055) [ 410.585216][ T5473] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.635967][ T3678] Bluetooth: hci1: command 0x0406 tx timeout [ 410.643406][ T3678] Bluetooth: hci5: command 0x0406 tx timeout 12:41:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 410.884343][ T5473] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:41:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) [ 411.350345][ T5473] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.466718][ T5473] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:41:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:41:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:41:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:41:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x0, 0x2811fdff) [ 412.679826][ T5473] device hsr_slave_0 left promiscuous mode [ 412.699643][ T5473] device hsr_slave_1 left promiscuous mode 12:41:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x0, 0x2811fdff) [ 412.726109][ T5473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.742604][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.799884][ T5473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.844688][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.940559][ T5473] device bridge_slave_1 left promiscuous mode [ 412.968183][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.013895][ T5473] device bridge_slave_0 left promiscuous mode [ 413.065301][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.105716][ T5473] device veth1_macvtap left promiscuous mode [ 413.118432][ T5473] device veth0_macvtap left promiscuous mode [ 413.140314][ T5473] device veth1_vlan left promiscuous mode [ 413.163389][ T5473] device veth0_vlan left promiscuous mode [ 413.472463][ T5473] team0 (unregistering): Port device team_slave_1 removed [ 413.490140][ T5473] team0 (unregistering): Port device team_slave_0 removed [ 413.501803][ T5473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.514861][ T5473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.569970][ T5473] bond0 (unregistering): Released all slaves [ 415.756158][ T3678] Bluetooth: hci3: command 0x0406 tx timeout [ 415.924795][ T5473] device hsr_slave_0 left promiscuous mode [ 415.932667][ T5473] device hsr_slave_1 left promiscuous mode [ 415.932691][ T3655] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.948336][ T3655] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.961442][ T3655] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.970958][ T5473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.978760][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.979400][ T3655] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.994518][ T3655] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 415.996155][ T5473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.009275][ T3655] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 416.028863][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.038667][ T5473] device bridge_slave_1 left promiscuous mode [ 416.044978][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.054799][ T5473] device bridge_slave_0 left promiscuous mode [ 416.061732][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.076747][ T5473] device hsr_slave_0 left promiscuous mode [ 416.083156][ T5473] device hsr_slave_1 left promiscuous mode [ 416.089712][ T5473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.097267][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.106523][ T5473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.114193][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.123260][ T5473] device bridge_slave_1 left promiscuous mode [ 416.129550][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.138483][ T5473] device bridge_slave_0 left promiscuous mode [ 416.144752][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.160380][ T5473] device veth1_macvtap left promiscuous mode [ 416.166589][ T5473] device veth0_macvtap left promiscuous mode [ 416.172705][ T5473] device veth1_vlan left promiscuous mode [ 416.180413][ T5473] device veth0_vlan left promiscuous mode [ 416.187844][ T5473] device veth1_macvtap left promiscuous mode [ 416.193941][ T5473] device veth0_macvtap left promiscuous mode [ 416.200439][ T5473] device veth1_vlan left promiscuous mode [ 416.206467][ T5473] device veth0_vlan left promiscuous mode [ 416.425355][ T5473] team0 (unregistering): Port device team_slave_1 removed [ 416.442530][ T5473] team0 (unregistering): Port device team_slave_0 removed [ 416.456874][ T5473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.472412][ T5473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.533420][ T5473] bond0 (unregistering): Released all slaves [ 416.634483][ T5473] team0 (unregistering): Port device team_slave_1 removed [ 416.650718][ T5473] team0 (unregistering): Port device team_slave_0 removed [ 416.663682][ T5473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.680892][ T5473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.734779][ T5473] bond0 (unregistering): Released all slaves [ 416.886079][ T3645] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 416.931029][ T7068] chnl_net:caif_netlink_parms(): no params data found [ 417.026570][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.035528][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.044123][ T7068] device bridge_slave_0 entered promiscuous mode [ 417.053100][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.062866][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.071230][ T7068] device bridge_slave_1 entered promiscuous mode [ 417.125706][ T7068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.157750][ T7068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.221542][ T7068] team0: Port device team_slave_0 added [ 417.260489][ T7068] team0: Port device team_slave_1 added [ 417.315529][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.337111][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.395872][ T7068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.428123][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.435290][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.512499][ T7068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.571212][ T7068] device hsr_slave_0 entered promiscuous mode [ 417.591932][ T7068] device hsr_slave_1 entered promiscuous mode [ 417.811775][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.819143][ T7068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.826553][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.833699][ T7068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.886599][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.901454][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.916639][ T3651] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 418.057967][ T7068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.076033][ T3727] Bluetooth: hci4: command 0x0409 tx timeout [ 418.080912][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 418.097242][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 418.107699][ T7068] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.128637][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 418.139770][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 418.149832][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.157019][ T3683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.177840][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 418.187673][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 418.196207][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.203407][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.211233][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 418.222551][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 418.233329][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 418.253810][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 418.282706][ T7068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.305178][ T7068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.319722][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 418.329078][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 418.341706][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 418.351170][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 418.364472][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 418.374678][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 418.396881][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 418.441942][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 418.450075][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.476264][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.485105][ T7068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.267874][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 419.294647][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 419.339784][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 419.356626][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 419.366459][ T7068] device veth0_vlan entered promiscuous mode [ 419.383906][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 419.392672][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 419.409826][ T7068] device veth1_vlan entered promiscuous mode [ 419.445233][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 419.454356][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 419.468196][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 419.479155][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 419.492181][ T7068] device veth0_macvtap entered promiscuous mode [ 419.507981][ T7068] device veth1_macvtap entered promiscuous mode [ 419.526962][ T7068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 419.539103][ T7068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.554422][ T7068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 419.565332][ T7068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.575433][ T7068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 419.586218][ T7068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.602265][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.615116][ T7068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 419.631847][ T7068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.642947][ T7068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 419.657791][ T7068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.668677][ T7068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 419.679404][ T7068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.690192][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.698990][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 419.709130][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 419.719028][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 419.728540][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.737744][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 419.748192][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 420.156116][ T3683] Bluetooth: hci4: command 0x041b tx timeout [ 420.323890][ T3645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.334973][ T3645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.342860][ T3645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.352407][ T3645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.360235][ T3645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 420.371849][ T3645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 420.470596][ T7189] chnl_net:caif_netlink_parms(): no params data found [ 420.526784][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.533958][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.543748][ T7189] device bridge_slave_0 entered promiscuous mode [ 420.552566][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.560497][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.568638][ T7189] device bridge_slave_1 entered promiscuous mode [ 420.591430][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.602952][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.629487][ T7189] team0: Port device team_slave_0 added [ 420.638709][ T7189] team0: Port device team_slave_1 added [ 420.661185][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.668546][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.694647][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.707402][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.714981][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.742250][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.776383][ T7189] device hsr_slave_0 entered promiscuous mode [ 420.783292][ T7189] device hsr_slave_1 entered promiscuous mode [ 420.790957][ T7189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.803851][ T7189] Cannot create hsr debugfs directory [ 420.909192][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.916370][ T7189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.923739][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.930890][ T7189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.983742][ T7189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.999400][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.010241][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.018642][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.035766][ T7189] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.053627][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 421.062659][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.069894][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.086797][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.096485][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.103572][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.124303][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.133583][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.143062][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.161517][ T7189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.172943][ T7189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.187411][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.196354][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.208199][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.236648][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 421.244226][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 421.267466][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.570156][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 421.582515][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 421.607564][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 421.619932][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 421.629858][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 421.638154][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 421.648343][ T7189] device veth0_vlan entered promiscuous mode [ 421.663811][ T7189] device veth1_vlan entered promiscuous mode [ 421.687128][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 421.699790][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 421.708192][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 421.719923][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 421.732087][ T7189] device veth0_macvtap entered promiscuous mode [ 421.751461][ T7189] device veth1_macvtap entered promiscuous mode [ 421.769353][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 421.780311][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.791194][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 421.802129][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.812066][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 421.822535][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.832520][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 421.843250][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.854351][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.864975][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 421.880426][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.890537][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 421.901399][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.911423][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 421.923528][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.933762][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 421.944395][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.956468][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.963948][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 421.974512][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 421.982945][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 421.992224][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 422.001491][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 422.010173][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:42:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000180)=""/139, 0x26, 0x8b, 0x1}, 0x20) [ 422.236392][ T3326] Bluetooth: hci4: command 0x040f tx timeout [ 422.397010][ T3326] Bluetooth: hci0: command 0x0409 tx timeout [ 423.276062][ T3645] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 424.316062][ T3682] Bluetooth: hci4: command 0x0419 tx timeout [ 424.476748][ T3682] Bluetooth: hci0: command 0x041b tx timeout [ 425.765251][ T3651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 425.773620][ T3651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 425.784825][ T3651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 425.793031][ T3651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 425.801459][ T3651] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 425.809034][ T3651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.880681][ T7328] chnl_net:caif_netlink_parms(): no params data found [ 425.916575][ T7328] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.923717][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.934388][ T7328] device bridge_slave_0 entered promiscuous mode [ 425.942811][ T7328] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.950705][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.958411][ T7328] device bridge_slave_1 entered promiscuous mode [ 425.979345][ T7328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.991275][ T7328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.012943][ T7328] team0: Port device team_slave_0 added [ 426.021496][ T7328] team0: Port device team_slave_1 added [ 426.036767][ T7328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.043734][ T7328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.072444][ T7328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.084625][ T7328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.091657][ T7328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.117766][ T7328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.141222][ T7328] device hsr_slave_0 entered promiscuous mode [ 426.148096][ T7328] device hsr_slave_1 entered promiscuous mode [ 426.154599][ T7328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.162395][ T7328] Cannot create hsr debugfs directory [ 426.218835][ T7328] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.225979][ T7328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.233687][ T7328] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.240815][ T7328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.279531][ T7328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.293380][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 426.301645][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.309631][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.318707][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 426.332244][ T7328] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.346395][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 426.354724][ T3714] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.361929][ T3714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.387143][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 426.395634][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.402969][ T3714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.413292][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.428027][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.453161][ T7328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 426.469716][ T7328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.485038][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.497469][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.511149][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.526492][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.552580][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.566079][ T916] Bluetooth: hci0: command 0x040f tx timeout [ 426.568720][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.587445][ T7328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.929283][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 426.937899][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.952519][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 426.962212][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.971568][ T7328] device veth0_vlan entered promiscuous mode [ 426.980029][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 426.987741][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 426.998675][ T7328] device veth1_vlan entered promiscuous mode [ 427.017039][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 427.025136][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 427.033170][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 427.042319][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 427.054996][ T7328] device veth0_macvtap entered promiscuous mode [ 427.066463][ T7328] device veth1_macvtap entered promiscuous mode [ 427.080989][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 427.091602][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.101914][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 427.112881][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.123881][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 427.134483][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.144386][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 427.154899][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.165723][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 427.176881][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.188295][ T7328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.197284][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 427.205325][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 427.214262][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 427.223476][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 427.234295][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 427.245361][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.255607][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 427.266304][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.279507][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 427.289983][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.299878][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 427.310513][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.320461][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 427.330945][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.341925][ T7328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.350558][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 427.359426][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:42:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0x42) 12:42:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x0, 0x2811fdff) 12:42:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:42:11 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1, 0x0) write(r1, &(0x7f0000000180)='t', 0x1) close(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0x200001000000067, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) splice(r0, 0x0, r1, 0x0, 0x4, 0x0) 12:42:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x0, 0x0, 0x0, 0x1204bc32b864f757}, 0x48) 12:42:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4}, 0x48) 12:42:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:42:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x24}, 0x24}}, 0x0) 12:42:11 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1, 0x0) write(r1, &(0x7f0000000180)='t', 0x1) close(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0x200001000000067, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) splice(r0, 0x0, r1, 0x0, 0x4, 0x0) 12:42:11 executing program 1: pselect6(0xffffffffffffff4a, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000300)={&(0x7f0000000240), 0x8}) 12:42:11 executing program 5: r0 = socket$inet(0x2, 0x2, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x100c2, 0x0, 0x0) 12:42:11 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1, 0x0) write(r1, &(0x7f0000000180)='t', 0x1) close(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0x200001000000067, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) splice(r0, 0x0, r1, 0x0, 0x4, 0x0) 12:42:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000080)) [ 427.836641][ T3682] Bluetooth: hci2: command 0x0409 tx timeout 12:42:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x8, 0x4, 0x1, 0x8, 0x1}, 0x48) 12:42:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2f, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 12:42:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x8, 0x4, 0x1, 0x10, 0x1}, 0x48) [ 428.636517][ T3714] Bluetooth: hci0: command 0x0419 tx timeout [ 428.832964][ T5473] device hsr_slave_0 left promiscuous mode [ 428.842042][ T5473] device hsr_slave_1 left promiscuous mode [ 428.851664][ T5473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.875463][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.910006][ T5473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.920189][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.931230][ T5473] device bridge_slave_1 left promiscuous mode [ 428.943355][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.954993][ T5473] device bridge_slave_0 left promiscuous mode [ 428.979589][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.030049][ T5473] device veth1_macvtap left promiscuous mode [ 429.076236][ T5473] device veth0_macvtap left promiscuous mode [ 429.116287][ T5473] device veth1_vlan left promiscuous mode [ 429.122410][ T5473] device veth0_vlan left promiscuous mode 12:42:13 executing program 5: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 12:42:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@bridge_getlink={0x20, 0x10}, 0x20}}, 0x0) 12:42:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:42:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x2, &(0x7f0000000200)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11}], &(0x7f0000000240)='syzkaller\x00', 0x6, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:13 executing program 3: r0 = fsmount(0xffffffffffffffff, 0xa78de461bb97fb8e, 0x0) r1 = pidfd_open(0x0, 0x0) fcntl$dupfd(r0, 0x406, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) 12:42:13 executing program 5: syz_read_part_table(0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001380)=[{&(0x7f00000001c0)}]) 12:42:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000c40)=ANY=[@ANYBLOB="e8000000000201040000000000000000020000000e000000440002800c00028005000100210000000c00028005000100880000000c000280050001003a0000000600034000000000140001800800010000000000080002000000000018000280140001800805000000000000000002007f000001100003"], 0xe8}}, 0x0) [ 429.920596][ T7489] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 429.960666][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 430.009901][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 430.614725][ T5473] team0 (unregistering): Port device team_slave_1 removed [ 430.649574][ T5473] team0 (unregistering): Port device team_slave_0 removed [ 430.706294][ T5473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.737549][ T5473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.811022][ T5473] bond0 (unregistering): Released all slaves [ 431.777890][ T3645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 431.790968][ T3645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 431.798732][ T3645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 431.807539][ T3645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 431.815075][ T3645] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 431.822429][ T3645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 431.943188][ T7492] chnl_net:caif_netlink_parms(): no params data found [ 432.000580][ T7492] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.007897][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.016387][ T7492] device bridge_slave_0 entered promiscuous mode [ 432.024576][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.031785][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.039903][ T7492] device bridge_slave_1 entered promiscuous mode [ 432.064449][ T7492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.078653][ T7492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.122839][ T7492] team0: Port device team_slave_0 added [ 432.135741][ T7492] team0: Port device team_slave_1 added [ 432.161286][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.174530][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.207137][ T7492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.221887][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.228946][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.255388][ T7492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.282195][ T7492] device hsr_slave_0 entered promiscuous mode [ 432.288810][ T7492] device hsr_slave_1 entered promiscuous mode [ 432.295247][ T7492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.302989][ T7492] Cannot create hsr debugfs directory [ 432.359644][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.367217][ T7492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.374486][ T7492] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.381777][ T7492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.422153][ T7492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.434743][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.446167][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.454331][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.462851][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 432.474598][ T7492] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.485991][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.494336][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.501448][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.528057][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.536882][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.543915][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.552290][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 432.561156][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 432.570537][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 432.578982][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 432.588174][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 432.599523][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 432.613852][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.621441][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.633671][ T7492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.836939][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.845611][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.854350][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.862063][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.871360][ T7492] device veth0_vlan entered promiscuous mode [ 432.884264][ T7492] device veth1_vlan entered promiscuous mode [ 432.902467][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 432.911672][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 432.919734][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.930142][ T7492] device veth0_macvtap entered promiscuous mode [ 432.938902][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 432.948980][ T7492] device veth1_macvtap entered promiscuous mode [ 432.964065][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 432.975398][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.985745][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 432.996733][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.007342][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 433.017878][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.027740][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 433.038783][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.048668][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 433.059159][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.070340][ T7492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.079020][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 433.087991][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.097888][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 433.110804][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.121053][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 433.131757][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.141647][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 433.152221][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.162075][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 433.172615][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.182454][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 433.192983][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.204624][ T7492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.213457][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 433.222283][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:42:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast1}, 0x54, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='lo\x00', 0x0, 0x0, 0x3}) 12:42:17 executing program 5: syz_read_part_table(0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001380)=[{&(0x7f00000001c0)}]) 12:42:17 executing program 3: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f0000000380)="8f", 0x0) syslog(0x3, &(0x7f0000000000)=""/165, 0xa5) 12:42:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:42:17 executing program 5: syz_read_part_table(0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001380)=[{&(0x7f00000001c0)}]) 12:42:17 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newnexthop={0x18, 0x12, 0x801}, 0x18}}, 0x0) 12:42:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:17 executing program 5: syz_read_part_table(0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001380)=[{&(0x7f00000001c0)}]) 12:42:17 executing program 1: ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)) getresuid(&(0x7f0000000140), &(0x7f0000000080), &(0x7f0000000100)) 12:42:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000015"], 0x50}}, 0x0) 12:42:17 executing program 5: socketpair(0xa, 0x1, 0x4, &(0x7f0000000140)) 12:42:17 executing program 1: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001800)=[{0xffffffffffffffff}], 0x1, 0x0) [ 433.916471][ T3682] Bluetooth: hci2: command 0x0409 tx timeout 12:42:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) creat(&(0x7f0000000080)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4, 0xb}]}, 0x18}}, 0x0) 12:42:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:19 executing program 1: bpf$MAP_CREATE(0x8, &(0x7f0000000000), 0x48) 12:42:19 executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCGETS(r0, 0x5411, &(0x7f0000000000)) 12:42:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001a00)={&(0x7f0000000040), 0xc, &(0x7f00000019c0)={&(0x7f00000001c0)={0x14}, 0xfffffdef}}, 0x0) 12:42:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x48) 12:42:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000680001"], 0x74}}, 0x0) 12:42:19 executing program 5: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) [ 435.411332][ T7683] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. 12:42:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2f, 0x2, 0x1, 0x4}, 0x48) 12:42:20 executing program 3: setrlimit(0x7, &(0x7f0000000040)) socket$xdp(0x2c, 0x3, 0x0) 12:42:20 executing program 1: getresuid(&(0x7f0000000140), 0x0, 0x0) [ 436.105513][ T3682] Bluetooth: hci2: command 0x041b tx timeout 12:42:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:20 executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:20 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) 12:42:20 executing program 3: setrlimit(0x7, &(0x7f0000000040)) socket$xdp(0x2c, 0x3, 0x0) 12:42:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0) 12:42:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000500000008001e00050000000a00020000000000000000000a000200bbbbbbbbbbbb0000cc"], 0x114}}, 0x0) 12:42:21 executing program 3: setrlimit(0x7, &(0x7f0000000040)) socket$xdp(0x2c, 0x3, 0x0) 12:42:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="0441"], 0x28}}, 0x0) 12:42:21 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80a003, 0x0) 12:42:21 executing program 3: setrlimit(0x7, &(0x7f0000000040)) socket$xdp(0x2c, 0x3, 0x0) 12:42:21 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2}}, 0x10, 0x0}, 0x0) 12:42:21 executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newnexthop={0x18, 0x34, 0x801}, 0x18}}, 0x0) 12:42:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, "fda80767de0d6008a39cb4366c81749f01ea64ee8f0b3cc9ca9386718efb66ccd790c42f78dae053cda5b816913345983145193bfeffda2cde06f86aae42bb360669ed2b089e010acfa762e54ae1461f"}, 0xd8) 12:42:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:42:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-neon,sha256)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001a00)={&(0x7f0000000040), 0xc, &(0x7f00000019c0)={&(0x7f00000001c0)={0x14}, 0x14}, 0x300}, 0x0) 12:42:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0}, 0x20) [ 438.156224][ T3682] Bluetooth: hci2: command 0x040f tx timeout 12:42:22 executing program 3: r0 = socket(0x18, 0x0, 0x1) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 12:42:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) 12:42:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1d0000000203030000000000000000000000800008"], 0x28}}, 0x0) 12:42:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001a40), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 12:42:22 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x100) [ 438.380516][ T7771] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 12:42:22 executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) 12:42:22 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8924, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) 12:42:22 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x1) [ 439.296192][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.302795][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 12:42:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:42:23 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 12:42:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000680)={[{@fat=@dos1xfloppy}]}) 12:42:23 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x0) 12:42:23 executing program 2: socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)) 12:42:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) [ 439.635896][ T7815] FAT-fs (loop3): bogus number of reserved sectors [ 439.701964][ T7815] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code 12:42:23 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 12:42:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x0, 0x4, 0x240000}, 0x48) [ 439.790309][ T7815] FAT-fs (loop3): Can't find a valid FAT filesystem 12:42:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x2f, 0xffffffff, 0x1}, 0x48) 12:42:23 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000002180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1e84, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x1001, 0x1, "8f33b44ece108f2801b1bec7265dc29b3c6815c3bded9b707437f7877ce86657d1de22c03d4facdd61d27361e2007006c97420530f11053469cb4d049d05661442418d4c441a80f3097b76b10b540624e1cace182adbad41ac7e77d5986fc2f128def1a142abcb7692541cd9fab9c9ebef56e0551c9bd63653399173a20f4858b1f4fea8b01f9753b4ef46bf003d2a212d896ea60975c2431e3bd98abc4530eea3bb44955ca1e1d86a4931ad14995f77712135d635d712f19fd69d9fbdb5e577bb6527626acde7aad315421436b315736fc9b1508e679cb73877803b360ded710a30e5438bccc158cc3cea3db7ac7044d0692cfeb226dddb3682750327b6d571489d5b574bee95f7cc763c53b10055fa435f0d7fdebc3fa74b0d1f047f777734c3e635f516e253cf1b48f24cdbef29ac1e7faf8f2b12a03e026ce87cad8c8ba3f37a6cf2c548ba83fd8863abb27d666dd974c03e882e37f8e9247b59b8dc971eeac5209d8ec5d59072659e8876c99a7ee1b63b07d9f05f2ccc0274f4e9cb9848a6ba3397d392a9314619f7ba59846a953cc1ac76ad58e7730b72c90dfa243902b11d63c77d8684a814b83a26e59b7670cc04518f2ebbbd82239a17a5b265d6c00e343958c6ccab9b0343b9bea6f1ed0c7d02b4136124d57f24a7c2c26fe0f3b6e99214f12710323c2e5f83584ac6fee60209c808a0721a2b3ebe077548ae2cfbfd5d610f7c1cd52ec12a11017ede699e2a18fc5eb10e081962b8d7630d0e5682eb3c2cf11a2ba3a117d321a697f07df8acc78dcf5a118801a860a0dffda11e502b28e0e5c39be5b6f2046f4fb4a7c1cbeeaf96829457af95105d79b6a9a51ff6a18ec28e4f175738a9a7eba1b67b77d486ff89de8a2a364ac769ec1b70dc216c5d0476795786cec0ff406456f45ad162bcc60d43a8d9c613fd931d95bfbf98add6ca0df0902d4bf1ee8124d56100481acd80358da32bc830268c8dd296a78d9f4ebea5933bfa3150d64073125e7b51c516ee8a55f39c03fed494b65bcdef4a9f017bab6533f878896e6a66c3009901204058381d66ea53507807ea409d7ab5a2a1469f24aa824b8574706b1b0fa7259d1d333397e68f0e75045ecacfb663562504517b672c98b8db2fa5cd0e172281c64c9d8cbb59b6e2db19980e57b385618829910a189b1b6a553d929e578c6ee6eeba5826920ca1761b39670796058a1809684a06e171294f7b0b4cb02ab6fea06356ae0ea04b8ebea246c9ab6b192db03bbbbcf59fc0ddfa5293b9b6c80a9a883feb0c93a18bf8c4d02de8bc12e280fec5dc28b9d38b635cc49b603ed013262d72219609951fc72534156adaddb1f91f32e0ed1ec45379bb3b95c514039c30266e558ac67f849a26fd524a345dddf7c3f7804a865de89cce4917cc4e10e038848761adf158bd1a6b83fb387761e8399bb33ea420b5a4eb926709b22ecfdb14eb82a6f2d6cedf67046e208b151e80e56834d2578cfa63912a11b8be1d70c1a470d328b964dc8c0117dc82f2673dee0bd96b58608eb4cb8bf3113b9cf1581eb26b6391f19aab8ab646a8134507e606b969e34b1c67a3afe2cf37464b6885756f29422265a9b7f07943b134e2b0be390d818b9f829f28cbef30d6766770435b96265c02488b4fb149dfa2b23399b46928eab468cbf1573d71aeb6d59c3771b9a44bed7573ab4d2a3bf96c211417e875331cce00e42558ad7600cfdc010b915829cea5326acba8ee8ac382a482e085e0bd9d8373cc041e05525b253eb7a028b8af5980bd8e8e2e37aeb0cbdd35620ecf78e55a516f9e8285090b5a05200ed961305468347331c3e16d1bb9f39785c47768b339414c8612c811b8dbae949e7399d1ab7f235cac7f976790fea66f1aea600b43714fd31e97d5058a8647e9b668d7f02c19c3907ef59e1edc6c1826dc8fd3d4550daa3015442ed63bba187f60168e2c5787177fb34e32bd57d496101b1fe9cc942d949dccd650a855735701f1c8e1bad3cd292c3ef9deaecb496e84bf23c9bc1f50ee0d60276b1b9e1d35508b25224f17a50c8f5efef9b48ce81ddc333dfbd1aeb3387b541c7779b604b9d13fcde61596737c0f8471e76b194698886d25be09648962280a8c86e8dc563c5b4aeb1f68fd898f076d9016ca23880efac983a8b67536a976611a9293724b2c1b057535fceb07f15b05be49ab3e21c4e0febfd2816335565237853c9ca8b17e089a21f59ed708c407cc0aadee0f0b26e2f17c6b5dc82bcaa9ba941c65b0a8cbf57ffa22e593a41e402cdcb2408886bfbe4a9ea173a46abde44623e03086e51f46f5b8a3bf56fc0081fef5ac33455c462e9de1fcf66129dea37917df5ccf0f92b381dcc3599fbde6f97a58d76785d865bf3edfd3bb262b2db8e10984d2bf06e65fddded63520b04188b9ebddb1c4b2623c3791df8c3362c174320de0c8ecd3348662a8ac2414d118e1334496bb2beae7699078db67a136f61c37506017428fae08cbc8bce56567d2ed77bbd5658b8f8ad510b4140a1d6655815fab01c580f824456b8228f4a3eaa955c48c558bff946043037ba852cbeceb17b4b2344a7b1a23d07156e9a027959f21fb260f001f4d345f8d7bdf92224ad4c826d25d08144dc2c60ba92bc4dd86ba58d8f143cc318ddd2d044f730840e513bdc2b2e5bd9b8ea7cd97accef6dbd8ddefa72790fce9797ca40b6d2057f897488693c706640ff3f0e5a137b2a77584868b23107e6f5a767fac9ee2e806caee9005904f5e62edcdc11b2716d0ffd4eabcabad7f28603ed82cc3eeb1b22c42cbe157cde7c1196cdc31c253c5be36144be175c264cb379c82e44fa54c744152a96fe5b883edeb2e82ecd8327133ae34cb63341516fe2b61b0146e2c9585db3653753215e3d67382c0e015fb32032bb02af5b37f585f8ead9ed557826654d6a7db66fe713b060c90b965a011ea913ec547fb70889b1e4e9113a290f530604d2a89bdaaae810fec575ba97f4bade3dd1bb25142583d9c809022478c4ab360a1fa87fd1c736a85b6185da9e3a2394b5e0f3140197b0c5d23df606fa58d6a2e312b322a1575e3c339ae688217c6000bf860bd9f149041b6167035d6e2610d947bd33f2d41203f762f18266bfea7c1c77babe92fbde14390e6e8ac8b0cb9c989746992ce02ce8eb0ae465d1f227b92700928424ce04d791b0775b30acfa350bc1f5ff2ee5b8da2c09a472f36662b69a614fe38a2e93e90eb73c394422bb8052c5ada6283443e9ae8be324710f24c03caa68c78dc2e1ef2949a25e4fd17a6dabf378e719e27c15f204b61e22538002f8b69a8c0bd9a4207f631f67723f618ec523274bb6432c0e9b360de3f1c6e58b116c5b5fd77356583e69a7be131b9335fb801437033b0ee59021d79b468b30f72a7038ba4dcc1a8c9f5844a78a0ad5f4a8b174bfb49f4cbb057d93e0230e0fc760b55c7cb54263c84e4e387e2c70f92a5922e423585c6e6ed49cb6332fce18c8cd172018d980533640ca7bdf5536f4d1ac90760bfa6f26fc7012b75907923b988bf654c478276295f8a9928c3012a909ce969a171c8e0a754de2afa6598ac0656f731a3e67d126c0c121b11c6dbd548136f71038f3e33399cf2d94085af694188050144960d30c367fb27965f0bffa4fe2f0d716dcfa916e00b017757a751dd6511d38270e6618b8c97bdce4531cb847470dd1217a6751d30f325b4e35055674c9a86fdd8f07a48bf151411f3ae4903de8d4c192a308c183cf7695b5bf62cec368b682b3924b3094de8b0bb4e0ceb1a63494fdff2a24dfcafd5853eb018b197f089505e466bd190e9fee8ece09226105cc436de857502a74b713b3e316112bd7683aee09478de03836edaeeabbe4695ec2dccf9ffaa0c70b81a240466d9f6a89979d939a0d822ffcdebe08be435078ee7baea97775cf75aed993902abdac72a9c944a26408659215e6a4e5fd147f9ba9ad1cb71d1279d51e23b2a417cc582960f8f1b5a334c2076c983db85cc926932cafd6e941398dcbf73154184b682869115075850be4e1d2331e780b582264aa1998471c671cb74034b27dfec05ac5c342a896f16b401e40509a3b7b9f60e085b93a675e8801c2e14317e475c21e6fa4cce8419c4f5584e7eadd71d4e58729d07ac6d19d9ca60e5122a994992e1860c1aa5cdf1109c8ce555f3e1ccfd61a6319eea22fe0cc3782cbb434add28094febd82722793356bbdb858ee6ec1d70eb94727578c71e1345663705a0e78f565ecdb93defb970d5c052d5663d659ca513384033b0c4d48295a3d256a62ae3bcc5317d993c81b5eb9d987c3ed0201bc9ba6d6dbdcad77fac076d466b29ce815bb3d3868b0dd3590ad75a015d89f81f94eb129d6017efda0125bce877f5f96bfff04cf1f12f49b51789c23b490d3e0586e012237b7ea8c9199ef671015ce2e64e2f2ca199cb285743833780156638a6c8daf46fa49b8dff54e73a81f8e2e43d69604f916095ea0bf6b1e095105815a767208af97cdcf587949e6f2f8aaf4f74f5a95003197ff089c02beb71aae7688fc3ac0b818b82e009b612aa15491895af4db60e7d397020d6fc3dc1ecd0585bd0d65253ca65733ba463e2d4187df74147139cd7cbfddea30043c64eb420b65c359b417931038dceac1323bd01aaec7b15b557ab28ca840f0b4054258dd13e930a75e2d68e41d01b072bed45e4ee790f527ddc78e3f06baa6bf78a0af0b445177940a248c0b45806d2031747131c818e5ef98a94ac163a5090b3232589d45880dda0067e34abdcc6c1120ee3b0d4830fe9df4e0bafb8c5a5e94f72c054dc50bcb42d47e9c772643df97ee1d41abb3fa7b46b4b7103febff6c14c755e0304d368b0cfd2921a8ece29fda4d27054ab52dccb29eeb29f00d42cb3d5b1c1a0160a65d29b404be9878a466155352f379889d46e3b1fe1360bfb99940a9a17b3b900d28cbd5611a224ae59a1f32b52f26a18b57cb6d09f214e7f3730fcb26182f09a459abab1a4843917b86d6028d9784e6a483dbca75c1efff59d6b38f878b0e276e9dcbce7f5954bc890d2846c1069d7ae679c5a61bbfdb0ba0371c30673d3cada967f3d124fee5bb78abeb05dc210909cd46dd80e5c86af6ec9db9355ecad50821e347232cbc85cdb0fd32656f67b30fe3b3da2d28418712d92b25fab8b2181f59fd9a44dbcc8798f4551f0bcb92b7daad1186701ce75d546bd48d0d9e332a3b35f3ca07ee8d21aee9af8e7085dd6f8fd3e67a01cc48449d7844087670eba61ea5763ab3c122e1ea99d4652cb22c3fdf9f0b301c8e1e4b5b0e189e48db5449dd12f9d48308f85d198faee7c441b10959d3e3bec0de771370fb95053d3c1624b7fbf1c9d41c91bfe4406cbcf6ce1eb323f0e3b440ab4be042aa079994b998460b6f90ce9c828e8a1dffe537de20ec2c978263793ca652f066c9f8d104559e0c1327f3defad2b2070eb5f6754971ef1ca0b22aa1c15de4cccffb7cd85ff12e2c6ecd26faf51405f137e1adcff50579799cc98d48b1e5a964c6be64f274be4c7bac309b11f7860c5e88c35bda0a48f799b90481cb61d30ad3324fb3cdcfbac6e70942412bab0c182cedb19c05f17ec00b4321259c7352aff0c6b7f4d1c0c92312e79dbdf6e1f5070611099974f6a17e33d71d336b1b7ebcaf4c393edb81220ff13b9ad1efbeb905448f2a9606bb9a7708445869be8ba348e45c8594663da4820e3fd4e0d0e7f277540610c5e23c3276cb5284ae90b4fe0caf02af8db7c910cf7f59712aa7b8ff43c484a"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "352ccafe34e33a7408ee9595c7c39c05e38da46c89dd600d92b86338c3f976af36"}, @INET_DIAG_REQ_BYTECODE={0xe09, 0x1, "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"}]}, 0x1e84}}, 0x0) [ 440.236187][ T3326] Bluetooth: hci2: command 0x0419 tx timeout 12:42:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:42:25 executing program 5: r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 12:42:25 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) 12:42:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}}) 12:42:25 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x0, 0x4}, 0x48) 12:42:25 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001180)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x3, &(0x7f0000002880)=[{0x0}, {0x0}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/246, 0xf6}], 0x4, 0x0) 12:42:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2f, 0x2, 0x7}, 0x48) 12:42:25 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) 12:42:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0x8, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 12:42:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x8901, &(0x7f0000000140)={0xfffffdfd, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}}) [ 441.410213][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 441.464291][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:42:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x804}, 0x48) 12:42:26 executing program 3: select(0x40, &(0x7f0000000000), &(0x7f00000000c0)={0x7}, 0x0, 0x0) 12:42:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0x8, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 12:42:26 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0}, 0x1, 0x0, 0x4000}, 0x0) 12:42:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x4000041) [ 442.307560][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 442.344472][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:42:26 executing program 5: fsopen(&(0x7f0000000000)='configfs\x00', 0x0) 12:42:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0x8, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 12:42:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x1bf4}, 0x0) [ 442.592833][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:42:26 executing program 5: bpf$PROG_LOAD_XDP(0x16, 0x0, 0x0) [ 442.676523][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:42:26 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) 12:42:26 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x1, &(0x7f0000000400)=@raw=[@exit], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0x8, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) [ 442.929286][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 443.021314][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:42:27 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x4}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0) 12:42:27 executing program 5: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000240)) 12:42:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 12:42:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) [ 443.263332][ T7950] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 12:42:27 executing program 3: socketpair(0x2, 0x2, 0x61, &(0x7f0000000140)) 12:42:27 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) 12:42:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x5c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}]}]}, 0x5c}}, 0x0) 12:42:27 executing program 1: r0 = socket$inet(0x2, 0xa, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x587, 0xb352, 0x800}) accept$inet(r0, 0x0, &(0x7f00000000c0)) sendto$inet(r0, &(0x7f0000000000)="4fb8a1f76493612b", 0x8, 0x0, 0x0, 0x0) 12:42:27 executing program 5: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000100)={0x4}, 0x0, &(0x7f0000000180), 0x0) [ 443.705103][ T7966] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 12:42:27 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x1, &(0x7f0000000400)=@raw=[@ldst], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:28 executing program 5: syz_emit_ethernet(0x50, &(0x7f0000000300)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @broadcast}, {0x0, 0x0, 0x2e, 0x0, @gue={{0x2}, "64fdf952b171f6d9f30848f1151218551d8bb2a151f31f81cee6ac3ee607"}}}}}}, 0x0) 12:42:28 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xdb609f96b45dce9e, 0x0) 12:42:28 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:28 executing program 3: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0xb000000, &(0x7f0000000540), 0x0, &(0x7f0000000600)={[{@fat=@discard}]}) 12:42:28 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}]}]}, 0x2c}}, 0x0) 12:42:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newnexthop={0x18, 0x5a, 0x801}, 0x18}}, 0x0) [ 444.269391][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:42:28 executing program 1: socketpair(0x1e, 0x0, 0xf, &(0x7f0000000140)) [ 444.467138][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:42:28 executing program 5: syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x0) 12:42:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) 12:42:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 12:42:29 executing program 4: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:29 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@generic={0x7d}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x61}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x7d) 12:42:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:29 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000011c0), 0x8, 0x0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = accept$packet(r0, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000480)=ANY=[], 0x16b) 12:42:29 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:29 executing program 3: select(0x40, &(0x7f0000000000)={0x1}, 0x0, 0x0, &(0x7f0000000100)) 12:42:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) 12:42:29 executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) getsockopt$inet_int(r0, 0x0, 0x14, 0x0, &(0x7f0000000040)) 12:42:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xfc03, &(0x7f0000000040)=@framed={{}, [@generic]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0xff, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r0, 0x4) 12:42:29 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x1, 0x1, 0x0, 0x4, 0x1, 0x4171, [{0x0, 0x4}]}]}, {0x0, [0x61]}}, &(0x7f00000003c0)=""/155, 0x33, 0x9b, 0x1}, 0x20) 12:42:29 executing program 4: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:29 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x3c00}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x7d) 12:42:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x7d) 12:42:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xfc03, &(0x7f0000000040)=@framed={{}, [@generic]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:30 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x7d) 12:42:30 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x7, 0x11000000}]}}, &(0x7f0000001200)=""/180, 0x1000000, 0xb4, 0x1}, 0x20) 12:42:30 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 12:42:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xfc03, &(0x7f0000000040)=@framed={{}, [@generic]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:30 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x7d) 12:42:30 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0/../file0\x00') 12:42:31 executing program 4: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x7d) 12:42:31 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x7, 0x11000000}]}}, &(0x7f0000001200)=""/180, 0x1000000, 0xb4, 0x1}, 0x20) 12:42:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xfc03, &(0x7f0000000040)=@framed={{}, [@generic]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:31 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x4}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x7d) 12:42:31 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0xd, 0x0, &(0x7f0000000200)) 12:42:31 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$MRT6_DONE(r0, 0x6, 0x18, 0x20000000, 0x4) 12:42:31 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$MRT6_DONE(r0, 0x6, 0x25, 0x20000000, 0x4) 12:42:31 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x64f5f, &(0x7f0000000200)=[{0x0}], 0x0, 0x0) 12:42:31 executing program 5: set_mempolicy(0x3, &(0x7f0000000080)=0x9, 0x401) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000240)=""/203) 12:42:32 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:32 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x7, 0x11000000}]}}, &(0x7f0000001200)=""/180, 0x1000000, 0xb4, 0x1}, 0x20) 12:42:32 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x4, 0x1, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x0, 0x9}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:32 executing program 3: request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x8, 0x0, 0xfffffffffffffffb) 12:42:32 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x9, 0x1, &(0x7f00000001c0)=@raw=[@generic], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:32 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) setsockopt$MRT6_DONE(r0, 0x11, 0x36, 0x1ffff000, 0x4) 12:42:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x201}, 0x14}}, 0x0) 12:42:32 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0x1, &(0x7f00000001c0)=@raw=[@generic], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:32 executing program 3: set_mempolicy(0x2, &(0x7f0000000040)=0x7fffffffffffffff, 0x4aa7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b48, &(0x7f0000000240)=""/203) 12:42:33 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:33 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x14, 0x0, &(0x7f0000000200)) 12:42:33 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x1, &(0x7f00000001c0)=@raw=[@generic], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x7, 0x11000000}]}}, &(0x7f0000001200)=""/180, 0x1000000, 0xb4, 0x1}, 0x20) 12:42:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:33 executing program 3: socketpair(0x28, 0x5, 0x28, &(0x7f0000000000)) 12:42:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}}, 0x0) 12:42:33 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x17, 0x1, &(0x7f00000001c0)=@raw=[@generic], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:33 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r0, 0x11, 0x36, 0x0, 0x0) 12:42:33 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$MRT6_DONE(r0, 0x6, 0x13, 0x20000000, 0x4) 12:42:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:34 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:34 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x8, 0x1, &(0x7f00000001c0)=@raw=[@generic], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:34 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:34 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$MRT6_DONE(r0, 0x6, 0x1e, 0x20000000, 0x4) 12:42:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:34 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) 12:42:34 executing program 3: r0 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='j', 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)=':/\\Wft\n\xb4\x06\x00', r0) 12:42:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000080)) 12:42:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x7}]}, 0x20}}, 0x0) 12:42:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000001c0)=@gcm_128={{}, "9583fb8e6644dd59", "82ebcd4878750ea41e00e2d086f744a3", "797fcfb5", "19e1ad3aa3c02980"}, 0x28) 12:42:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000120094b9c8"], 0x20}}, 0x0) [ 450.803147][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:42:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 12:42:35 executing program 3: socketpair(0x2, 0xa, 0xc4a3, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) 12:42:35 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0xc, 0x0, &(0x7f0000000140)) 12:42:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:35 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 12:42:35 executing program 3: socketpair(0x2, 0xa, 0xc4a3, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) 12:42:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 12:42:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) 12:42:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c, 0x7, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0) 12:42:35 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') 12:42:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:42:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) accept$netrom(r0, 0x0, 0x0) 12:42:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:35 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2f, 0x0, &(0x7f0000000140)) 12:42:36 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:36 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x0, &(0x7f0000000100)={0x0, r0+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0xffff]}, 0x8}) 12:42:36 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) 12:42:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}}, 0x0) 12:42:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x7, 0x801}, 0x14}}, 0x0) 12:42:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 12:42:36 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x7, 0x0, &(0x7f0000000140)) 12:42:36 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x20018811) 12:42:36 executing program 1: syz_emit_ethernet(0x25e, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x228, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce540b259808000000200000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5af191a"}, {0x0, 0x1, "ff12ef04000000ff00000000"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab372af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x19, 0x1, "17dcea46805d"}]}}}}}}, 0x0) 12:42:36 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000380)={0x7ff, "29409e6f3f53f13aa10de3b0d63da8750c94cd9dcaf45bea33033c4f3bfc7ecc807ee1320d1d4f32441f79faf81119e9c54ef58c6256ef43f23a88da3c905b7f2bc69f88eb728914729d13f67eee691737910c813549fe84112d9973da761d7abeeff4c97574d4dad6b53be866be2dcdb9972d77da7487aa1ef150a83ec405c9"}) 12:42:37 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:37 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x14d0c0, 0x0) 12:42:37 executing program 1: syz_emit_ethernet(0x25e, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x228, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce540b259808000000200000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5af191a"}, {0x0, 0x1, "ff12ef04000000ff00000000"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab372af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x19, 0x1, "17dcea46805d"}]}}}}}}, 0x0) 12:42:37 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 12:42:37 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:37 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x10800, 0x0) 12:42:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 12:42:37 executing program 5: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000880)='syz0\x00', 0x1ff) 12:42:37 executing program 1: open$dir(&(0x7f0000000200)='./file0\x00', 0x20441, 0x0) 12:42:37 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x9, 0x0, &(0x7f0000000040)) 12:42:37 executing program 3: epoll_pwait(0xffffffffffffffff, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 12:42:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:38 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) 12:42:38 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) sendmsg$unix(r0, 0x0, 0x0) 12:42:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:38 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 12:42:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:38 executing program 3: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 12:42:38 executing program 5: syz_clone(0xf6200180, 0x0, 0x0, 0x0, 0x0, 0x0) 12:42:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d00)="8ff4b1be8273998da3cb4d907514d618ca61cdef38196279c9b37afa16b0c4dad493a9d3204997d9c498c7e27cb0a1d9affd6a0fc06cd30b08f7f73382347c518202a115ce68cd372fefd4148168dcafe96ed180d812ddd81775a8a8db49ff86393e69c8322fba541d77afb754f330c8c5d20a5a7d8af91717fcdc1449b9f166c0f209dc3e113468648bc9ff223601272e43954aadc17dc37455f1e8a48480fa491ea2025475ba1ff739ed9b597a1a2bb569310a155937b617adfea57e348e0b1e8ec1be6bf89d901aa8828b077848", 0xcf}, {&(0x7f0000000e00)="3c465719393fe5265ce7bf91a68d7206916508d556efa4838c8e7e9dbca0c32dea0e64", 0x23}], 0x2}, 0x0) 12:42:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0)) 12:42:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:38 executing program 3: syz_mount_image$ntfs3(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=kp850,iocharset=i']) 12:42:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 12:42:39 executing program 5: syz_clone(0xf6200180, 0x0, 0x0, 0x0, 0x0, 0x0) 12:42:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)) 12:42:39 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}, @NFT_MSG_NEWSETELEM={0x184, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x158, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x8}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x140, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "3659cd0caa8213dd5557cc644c141c1eecb5c3dcc84e785f435f450c0891ef6185e7c339d02ef81827552e264c403f5f8310bd66158bdee81ccb3fd7735b6022bc213017049db51150119e122600165d8e5f1c2175e922efc295c1fca11bed3e28e31f4afb5f2157d355c76aae6c309f132adf4aa9722d928d45d979d64bd6f0ebc616385cb350d2a332098caebb06a7067e9874ce29ac22b21456644638f1121597ad4ae2fb6942471440bd4e1bffc98e64b8c216f9d9bc0c90de0aebb71ae5ec0e406e40875cd6d650a805ef2e374782"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x208}}, 0x0) 12:42:39 executing program 1: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000100)=0xffffffffffffffff, 0x8) 12:42:39 executing program 1: syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f00000017c0)=ANY=[]) 12:42:39 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x8001, 0x1, 0x0, "ca3c1580f5ae902e996fd50e0b8fb4316c87edafc37a2d8d012037612250c9f9"}) 12:42:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, @in, 0x0, 0x0, 0x185}, 0x98) 12:42:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 12:42:39 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) poll(&(0x7f0000000440)=[{r0}], 0x1, 0x0) [ 457.639786][ T5486] device hsr_slave_0 left promiscuous mode [ 457.646173][ T5486] device hsr_slave_1 left promiscuous mode [ 457.652419][ T5486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.659988][ T5486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.669299][ T5486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.677365][ T5486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.685457][ T5486] device bridge_slave_1 left promiscuous mode [ 457.691689][ T5486] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.699749][ T5486] device bridge_slave_0 left promiscuous mode [ 457.706272][ T5486] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.716661][ T5486] device veth1_macvtap left promiscuous mode [ 457.722672][ T5486] device veth0_macvtap left promiscuous mode [ 457.729182][ T5486] device veth1_vlan left promiscuous mode [ 457.734958][ T5486] device veth0_vlan left promiscuous mode [ 457.861703][ T5486] team0 (unregistering): Port device team_slave_1 removed [ 457.873495][ T5486] team0 (unregistering): Port device team_slave_0 removed [ 457.884912][ T5486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.900894][ T5486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.951343][ T5486] bond0 (unregistering): Released all slaves [ 458.640938][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.649478][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.658870][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.667436][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.674960][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 458.682676][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 458.792027][ T8321] chnl_net:caif_netlink_parms(): no params data found [ 458.838923][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.846383][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.854565][ T8321] device bridge_slave_0 entered promiscuous mode [ 458.863455][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.870830][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.879015][ T8321] device bridge_slave_1 entered promiscuous mode [ 458.898936][ T8321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.910514][ T8321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.938442][ T8321] team0: Port device team_slave_0 added [ 458.946586][ T8321] team0: Port device team_slave_1 added [ 458.972717][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.979890][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.006292][ T8321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.018761][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.025703][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.051782][ T8321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.086921][ T8321] device hsr_slave_0 entered promiscuous mode [ 459.096187][ T8321] device hsr_slave_1 entered promiscuous mode [ 459.103214][ T8321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.111113][ T8321] Cannot create hsr debugfs directory [ 459.210193][ T8321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.221702][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.230014][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.240518][ T8321] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.249656][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.259083][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.267562][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.274642][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.292252][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.300118][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.308716][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.317369][ T916] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.324513][ T916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.332261][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.340915][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 459.359011][ T8321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 459.369664][ T8321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.390606][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.399349][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.407914][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 459.416740][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 459.425219][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 459.433624][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 459.442180][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 459.450509][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 459.458845][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.466604][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 459.481467][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 459.489095][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 459.501972][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.706419][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 459.715198][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 459.728380][ T8321] device veth0_vlan entered promiscuous mode [ 459.735409][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 459.743973][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 459.755514][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 459.763360][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 459.772276][ T8321] device veth1_vlan entered promiscuous mode [ 459.789318][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 459.797826][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 459.806102][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 459.814456][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 459.824839][ T8321] device veth0_macvtap entered promiscuous mode [ 459.834721][ T8321] device veth1_macvtap entered promiscuous mode [ 459.849581][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 459.860366][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.870211][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 459.880775][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.890619][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 459.901101][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.911036][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 459.921535][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.931667][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 459.942829][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.954958][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.963897][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 459.972224][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 459.980548][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 459.989139][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 460.000173][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.010890][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.020932][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.031839][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.041981][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.053173][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.063253][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.074209][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.084493][ T8321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.094966][ T8321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.105677][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.113826][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 460.122851][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:42:44 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000200), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)}) 12:42:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 12:42:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @private}}, 0x20) 12:42:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='E', 0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @timestamp, @sack_perm, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x6d86, 0x805, 0x0, 0x0) 12:42:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x200408d1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x24, 0x1, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 12:42:44 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) 12:42:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='E', 0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @timestamp, @sack_perm, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x6d86, 0x805, 0x0, 0x0) [ 460.393262][ T8360] Zero length message leads to an empty skb 12:42:44 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, 0x0, 0x0) 12:42:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/152, 0x98}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7a21df2ce0629c006ac39c9b257395ff8d", 0x11}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 12:42:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/152, 0x98}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7b21df2ce044ffffffff9c9b257395d88900345ffc153c7381090000000000000084c0b4f98e582aaad4776c21534b91eb2fdd3d89ca2a4a4677235d4022efc05650fec3a30b662516c82e6115a289d14342d07bb68bb03cd08c6d939685b0620a255872eadcbc06e9fd75346e8bf126450e04da5edc8d157c8e3caf2a5f392cd4184fb62987bfa9", 0x88}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 12:42:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) [ 460.716136][ T3326] Bluetooth: hci0: command 0x0409 tx timeout 12:42:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:45 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, 0x0, 0x0) 12:42:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:45 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 12:42:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x27a, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x27a, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x27a, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) [ 462.795898][ T3714] Bluetooth: hci0: command 0x041b tx timeout 12:42:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:48 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:48 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) [ 464.876268][ T3714] Bluetooth: hci0: command 0x040f tx timeout 12:42:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:49 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 466.956150][ T3714] Bluetooth: hci0: command 0x0419 tx timeout 12:42:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:53 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:54 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:55 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:56 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:42:56 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:56 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:56 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:42:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:57 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:57 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:42:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) [ 474.169529][ T3884] device hsr_slave_0 left promiscuous mode [ 474.190873][ T3884] device hsr_slave_1 left promiscuous mode [ 474.239398][ T3884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.248020][ T3884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.259193][ T3884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.268211][ T3884] batman_adv: batadv0: Removing interface: batadv_slave_1 12:42:58 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x803, 0x0) [ 474.302232][ T3884] device bridge_slave_1 left promiscuous mode [ 474.320447][ T3884] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.361498][ T3884] device bridge_slave_0 left promiscuous mode [ 474.386602][ T3884] bridge0: port 1(bridge_slave_0) entered disabled state 12:42:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) [ 474.408895][ T3884] device veth1_macvtap left promiscuous mode [ 474.415400][ T3884] device veth0_macvtap left promiscuous mode [ 474.422275][ T3884] device veth1_vlan left promiscuous mode [ 474.428741][ T3884] device veth0_vlan left promiscuous mode 12:42:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:42:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:42:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r0, 0x541b, &(0x7f00000000c0)={0x0, @nl, @nfc, @xdp}) [ 475.352381][ T3884] team0 (unregistering): Port device team_slave_1 removed [ 475.375471][ T3884] team0 (unregistering): Port device team_slave_0 removed [ 475.400343][ T3884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.423546][ T3884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.563889][ T3884] bond0 (unregistering): Released all slaves [ 479.596443][ T3651] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 482.080485][ T3645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.089255][ T3645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.096827][ T3645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.105237][ T3645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.115402][ T3645] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 482.122734][ T3645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 482.186631][ T8644] chnl_net:caif_netlink_parms(): no params data found [ 482.222534][ T8644] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.229995][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.237954][ T8644] device bridge_slave_0 entered promiscuous mode [ 482.245665][ T8644] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.253050][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.260695][ T8644] device bridge_slave_1 entered promiscuous mode [ 482.280569][ T8644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.291177][ T8644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.313570][ T8644] team0: Port device team_slave_0 added [ 482.320995][ T8644] team0: Port device team_slave_1 added [ 482.335320][ T8644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.342419][ T8644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.368827][ T8644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.383728][ T8644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.390745][ T8644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.416787][ T8644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.441673][ T8644] device hsr_slave_0 entered promiscuous mode [ 482.448422][ T8644] device hsr_slave_1 entered promiscuous mode [ 482.455226][ T8644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.462838][ T8644] Cannot create hsr debugfs directory [ 482.525425][ T8644] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.532519][ T8644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.539874][ T8644] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.547003][ T8644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.584943][ T8644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.600533][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.610381][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.618111][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.626648][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 482.638091][ T8644] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.648667][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.656934][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.664036][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.674414][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.683070][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.690185][ T3267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.709245][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.718008][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 482.737228][ T8644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 482.748362][ T8644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.759954][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 482.769441][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.777758][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.797465][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 482.804882][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 482.812323][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 482.822129][ T8644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.016638][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 483.033738][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 483.041950][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 483.050306][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 483.059947][ T8644] device veth0_vlan entered promiscuous mode [ 483.071851][ T8644] device veth1_vlan entered promiscuous mode [ 483.088777][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 483.096763][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 483.104641][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 483.115069][ T8644] device veth0_macvtap entered promiscuous mode [ 483.123838][ T8644] device veth1_macvtap entered promiscuous mode [ 483.137367][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 483.148952][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.159272][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 483.171164][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.181255][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 483.191970][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.202033][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 483.212716][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.222809][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 483.233659][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.244835][ T8644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.254387][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 483.266012][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 483.274913][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 483.287133][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.297051][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 483.307715][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.317578][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 483.328129][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.338003][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 483.348477][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.358575][ T8644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 483.369859][ T8644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.380744][ T8644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.390237][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 483.401273][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:43:07 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "1c80632f0a3304b9a531d12f26a92a22cdc6be232898195f495ce2f86b9d44e056c7f24ae879bfe0bf16062f486310d7092ce0fa1b025039d2bc253e57ad18bb"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0) 12:43:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:07 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:07 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:07 executing program 5: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x4a43, 0x0) 12:43:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) 12:43:07 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x24, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MON={0x4}]}, 0x24}}, 0x0) 12:43:07 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x27, 0x0, 0x0, 0x8, 0x0, 0x0, "67a03888984dbd91cfea66da298a23cc6327bceef26d2d7b8ca641556c15868dc7b35b4eb584c0"}}, 0x13f) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x41080}, 0xc, &(0x7f00000014c0)={0x0}}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001800)={'sit0\x00', 0x0}) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000001c80)={0x58, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe03}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x0) 12:43:07 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 12:43:07 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:08 executing program 1: syz_io_uring_setup(0xa0b, &(0x7f0000000000)={0x0, 0xb861, 0x8}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 483.995511][ T3679] hid-generic 0000:0000:0008.0001: unknown main item tag 0x2 [ 484.005443][ T3679] hid-generic 0000:0000:0008.0001: collection stack underflow [ 484.013280][ T3679] hid-generic 0000:0000:0008.0001: item 0 0 0 12 parsing failed [ 484.022181][ T3679] hid-generic: probe of 0000:0000:0008.0001 failed with error -22 [ 484.156973][ T3267] Bluetooth: hci2: command 0x0409 tx timeout 12:43:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:08 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 12:43:08 executing program 1: r0 = syz_io_uring_setup(0x379f, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_io_uring_setup(0x6533, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 12:43:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:09 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:09 executing program 1: io_uring_setup(0x3858, &(0x7f00000002c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) 12:43:09 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000340), &(0x7f0000000380)=""/42, 0x2a, &(0x7f0000000440)={&(0x7f00000003c0)={'hmac(sha256-avx2)\x00'}}) 12:43:09 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:09 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 12:43:10 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x40282, 0x0) [ 486.405077][ T3683] Bluetooth: hci2: command 0x041b tx timeout 12:43:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)) [ 486.459311][ T8715] could not allocate digest TFM handle hmac(sha256-avx2) 12:43:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000380)={0x0, 0x8, 0x55, 0x9}, 0x8) 12:43:11 executing program 3: ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x4a43, 0x0) 12:43:11 executing program 5: keyctl$instantiate(0x14, 0x0, 0x0, 0x0, 0x0) 12:43:11 executing program 1: syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000680), 0xffffffffffffffff) 12:43:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:11 executing program 5: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001780), 0x401, 0x0) 12:43:12 executing program 1: request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='::\\\'{\\\x00', 0xfffffffffffffffe) 12:43:12 executing program 3: ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x4a43, 0x0) 12:43:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 488.611696][ T3683] Bluetooth: hci2: command 0x040f tx timeout 12:43:12 executing program 5: shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/4096) 12:43:12 executing program 3: syz_open_dev$video(&(0x7f0000000280), 0x0, 0x0) 12:43:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1c, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:43:13 executing program 5: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x60082, 0x0) 12:43:13 executing program 3: syz_open_dev$video(&(0x7f0000000280), 0x0, 0x0) 12:43:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:13 executing program 1: socket$packet(0x11, 0xa4f58e0bc2a62a5d, 0x300) 12:43:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:13 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz1\x00', 0x200002, 0x0) 12:43:13 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x1c, 0x0, &(0x7f0000000200)=[@request_death, @increfs={0x40046304, 0x3}, @exit_looper], 0x1, 0x0, &(0x7f0000000300)='|'}) 12:43:13 executing program 5: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x3, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x2e, &(0x7f00000020c0)=ANY=[]}) 12:43:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a8"], 0x10a8}}, 0x0) 12:43:14 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x1c, 0x0, &(0x7f0000000200)=[@request_death, @increfs={0x40046304, 0x3}, @exit_looper], 0x1, 0x0, &(0x7f0000000300)='|'}) 12:43:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:43:14 executing program 1: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200), &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'sm3-ce\x00'}}, 0x0, 0x0) 12:43:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:14 executing program 3: timer_create(0x2, &(0x7f0000000240)={0x0, 0x35, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) 12:43:14 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00', 0x200002, 0x0) [ 490.625827][ T916] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 490.651658][ T3678] Bluetooth: hci2: command 0x0419 tx timeout 12:43:14 executing program 1: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsmount(r0, 0x0, 0x0) 12:43:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) [ 490.986104][ T916] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 491.014456][ T916] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config 12:43:15 executing program 1: socketpair(0x10, 0x0, 0x0, &(0x7f000000a8c0)) [ 491.141934][ T916] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.386066][ T916] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 491.411612][ T916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.428337][ T916] usb 6-1: Product: syz [ 491.437295][ T916] usb 6-1: Manufacturer: syz [ 491.448040][ T916] usb 6-1: SerialNumber: syz [ 491.698167][ T11] device hsr_slave_0 left promiscuous mode [ 491.716037][ T11] device hsr_slave_1 left promiscuous mode [ 491.733928][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.755478][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.783480][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.791590][ T916] usb 6-1: 0:2 : does not exist [ 491.827146][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.847904][ T916] usb 6-1: USB disconnect, device number 7 [ 491.861130][ T11] device bridge_slave_1 left promiscuous mode [ 491.880336][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.907956][ T11] device bridge_slave_0 left promiscuous mode [ 491.917257][ T3647] udevd[3647]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.928423][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.969996][ T11] device veth1_macvtap left promiscuous mode [ 491.982149][ T11] device veth0_macvtap left promiscuous mode [ 491.992497][ T11] device veth1_vlan left promiscuous mode [ 492.001464][ T11] device veth0_vlan left promiscuous mode 12:43:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r0, 0x8953, 0x0) 12:43:16 executing program 1: select(0x40, &(0x7f0000000000)={0x4}, &(0x7f0000000040)={0x1}, &(0x7f0000000080), 0x0) 12:43:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) [ 492.178987][ T11] team0 (unregistering): Port device team_slave_1 removed [ 492.191068][ T11] team0 (unregistering): Port device team_slave_0 removed [ 492.203519][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.220823][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 12:43:16 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) 12:43:16 executing program 5: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) [ 492.546896][ T11] bond0 (unregistering): Released all slaves [ 494.469963][ T11] device hsr_slave_0 left promiscuous mode [ 494.476632][ T11] device hsr_slave_1 left promiscuous mode [ 494.482896][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.490412][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.498707][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.506234][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.514562][ T11] device bridge_slave_1 left promiscuous mode [ 494.520802][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.529992][ T11] device bridge_slave_0 left promiscuous mode [ 494.536607][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.547397][ T11] device veth1_macvtap left promiscuous mode [ 494.553574][ T11] device veth0_macvtap left promiscuous mode [ 494.559771][ T11] device veth1_vlan left promiscuous mode [ 494.565646][ T11] device veth0_vlan left promiscuous mode [ 494.755478][ T11] team0 (unregistering): Port device team_slave_1 removed [ 494.768372][ T11] team0 (unregistering): Port device team_slave_0 removed [ 494.779799][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.794817][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.848479][ T11] bond0 (unregistering): Released all slaves [ 497.845987][ T3645] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 500.324249][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 500.335002][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 500.343434][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 500.351536][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 500.359361][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 500.366713][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 500.429647][ T8844] chnl_net:caif_netlink_parms(): no params data found [ 500.464839][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.472000][ T8844] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.480171][ T8844] device bridge_slave_0 entered promiscuous mode [ 500.487935][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.494997][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.502970][ T8844] device bridge_slave_1 entered promiscuous mode [ 500.523729][ T8844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.534247][ T8844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.556435][ T8844] team0: Port device team_slave_0 added [ 500.563402][ T8844] team0: Port device team_slave_1 added [ 500.579529][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.586620][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.612605][ T8844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.624359][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.631421][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.657850][ T8844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.685616][ T8844] device hsr_slave_0 entered promiscuous mode [ 500.694323][ T8844] device hsr_slave_1 entered promiscuous mode [ 500.717053][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.723360][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.758520][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.765596][ T8844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.773064][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.780290][ T8844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.817600][ T8844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.830739][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.840233][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.849098][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.857420][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 500.870410][ T8844] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.881822][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 500.891006][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.898106][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.910604][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 500.918963][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.926072][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.950372][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.958861][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.967917][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.976122][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.984183][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.994606][ T8844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 501.011061][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.018498][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.031659][ T8844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.226425][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.240947][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.249681][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 501.257742][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 501.267766][ T8844] device veth0_vlan entered promiscuous mode [ 501.279143][ T8844] device veth1_vlan entered promiscuous mode [ 501.296390][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 501.304345][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 501.312686][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 501.323947][ T8844] device veth0_macvtap entered promiscuous mode [ 501.332691][ T8844] device veth1_macvtap entered promiscuous mode [ 501.346838][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 501.357583][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.367974][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 501.378864][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.388897][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 501.399440][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.409312][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 501.419818][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.432446][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.440917][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 501.451737][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 501.462097][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 501.472711][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.482751][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 501.493321][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.503375][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 501.514175][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.524598][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 501.535270][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.546278][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.554321][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 501.563071][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:43:25 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) 12:43:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:25 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000007c0)=0x1) 12:43:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_setup(0x3f, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) 12:43:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:43:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r0, 0x8941, 0x0) 12:43:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:25 executing program 1: request_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0) 12:43:25 executing program 3: syz_io_uring_setup(0x3e1a, &(0x7f0000000b00), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) 12:43:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) 12:43:25 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, r0/1000+10000}}, &(0x7f0000000080)) 12:43:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, 0x0, 0x71) 12:43:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:26 executing program 1: syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) [ 502.406517][ T3679] Bluetooth: hci0: command 0x0409 tx timeout [ 504.476012][ T3679] Bluetooth: hci0: command 0x041b tx timeout [ 505.041651][ T3651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 505.050949][ T3651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 505.058970][ T3651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 505.068465][ T3651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 505.077632][ T3651] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 505.085354][ T3651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 505.154114][ T8896] chnl_net:caif_netlink_parms(): no params data found [ 505.191924][ T8896] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.200942][ T8896] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.209828][ T8896] device bridge_slave_0 entered promiscuous mode [ 505.218008][ T8896] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.225084][ T8896] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.233322][ T8896] device bridge_slave_1 entered promiscuous mode [ 505.252359][ T8896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.264092][ T8896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.285202][ T8896] team0: Port device team_slave_0 added [ 505.292181][ T8896] team0: Port device team_slave_1 added [ 505.308718][ T8896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.315917][ T8896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.342020][ T8896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.353596][ T8896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.360665][ T8896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.386703][ T8896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.412745][ T8896] device hsr_slave_0 entered promiscuous mode [ 505.419561][ T8896] device hsr_slave_1 entered promiscuous mode [ 505.426054][ T8896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.433607][ T8896] Cannot create hsr debugfs directory [ 505.488106][ T8896] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.495195][ T8896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.502578][ T8896] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.509731][ T8896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.551420][ T8896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.563591][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 505.571870][ T916] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.579699][ T916] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.588971][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 505.601350][ T8896] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.613292][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 505.622144][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.629307][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.647980][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 505.656543][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.663592][ T3714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.672342][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 505.681241][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 505.692251][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 505.705714][ T8896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.717500][ T8896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.729640][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 505.739450][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 505.750446][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 505.765466][ T8896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.773053][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 505.780676][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 505.977777][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 505.989302][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 505.999927][ T8896] device veth0_vlan entered promiscuous mode [ 506.007018][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 506.014565][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 506.027408][ T8896] device veth1_vlan entered promiscuous mode [ 506.044495][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 506.053326][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 506.061685][ T3267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 506.072045][ T8896] device veth0_macvtap entered promiscuous mode [ 506.082993][ T8896] device veth1_macvtap entered promiscuous mode [ 506.096786][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 506.107506][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.117573][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 506.128590][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.138676][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 506.149311][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.159264][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 506.169829][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.179755][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 506.190263][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.204158][ T8896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.212949][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 506.225253][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 506.234436][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 506.252515][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.262710][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 506.273403][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.283272][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 506.293776][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.303621][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 506.314923][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.326211][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 506.336685][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.347364][ T8896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.355694][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 506.364794][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:43:30 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x101042, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 12:43:30 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000003c0)) 12:43:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:30 executing program 1: syz_io_uring_setup(0x25f2, &(0x7f0000000000)={0x0, 0x4, 0x8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 12:43:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:30 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x5, "8f952f"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 'IrG'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "9a8a", "a4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xfffc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 12:43:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x8, 0x1, &(0x7f0000000440)=@raw=[@kfunc], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:43:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) [ 506.566501][ T3682] Bluetooth: hci0: command 0x040f tx timeout 12:43:30 executing program 5: syz_read_part_table(0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000001740)=[{&(0x7f0000000000)="cb", 0x1}, {&(0x7f0000000080)="8b", 0x1, 0xfffffffffffffffe}]) 12:43:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:30 executing program 3: syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}, {&(0x7f0000000180)}], 0x0, &(0x7f00000002c0)={[{@background_gc_off}, {@fsync_mode_strict}], [{@permit_directio}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@hash}, {@dont_hash}]}) [ 506.829121][ T8938] loop3: detected capacity change from 0 to 16 12:43:30 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) [ 506.886173][ T3682] usb 2-1: new high-speed USB device number 7 using dummy_hcd 12:43:30 executing program 5: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={0x0}}, 0x0) [ 507.121893][ T916] Bluetooth: hci4: command 0x0409 tx timeout 12:43:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 507.326151][ T3682] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping 12:43:31 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:31 executing program 3: r0 = creat(&(0x7f0000001940)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="f5243e7434749e39edc1be6d0fc27de6db5345ed229bd76f00dd8bb0b3157bfbad53d54912b8791be55ec98246594d9f8cc8129380b3f523df1ade63494d0a1e4f0728e4c6e8b93db10deefb3e013db83a8071c4106e51188fdeced7b413b999ebcfc1a279fbc1f7992ff8f6dc9e4316b60b615c2a2872c8e7724f3c3fc6ff3a8970600eeb74193f5d2002f1292a93ba669905aecfc10a134e10d1ea7b0d25b24271d9aa8d94762e14211bddae9feb97355df757d724875b2e8f9e8640a82cc338c1c8db9c35817405fff93cd299a731", 0xfffffff7}, {&(0x7f0000000140)="0109d19d048ea0b997849fabc3c786f50d1a00151b8a6bb96ee60341f9ac985b3a14d2cbd9d69cfda4c990b28bdd852a481231c2c3a8c9dec5636e7e48d754e68d6c6d281aee9bd7de35990a98f29fe99f18e6e405c20ff78741d0fa3d6f566acf0d670ae29dc436576073d3c4cceb1dbdf6acb6cd6d22d8014aaf8f81ede260f0445905bd080320a3133ee862bee2117a0fcf3e12761490b3da467a8d15df22a12c91ad23ef1a6dddc88f150eb3e28ab4", 0xb1}, {&(0x7f0000000200)="8c04bbdbc0aed2dbbb44c1b920fea5f4b3ef264dae5d7d42b94a0e2256349ae12803b4c42df5862cdf1e5e6905864876e464ee2738ff735c69b11698e840b139", 0x40}, {&(0x7f00000005c0)="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", 0x120}, {&(0x7f0000000340)="f12ac36ca57f09b7e3a5c0dd218baf9b367d39bcd333c586b37007d28c7841af2017aee001e20047400f145ce503d6428a12751273c210b27a20cd410dcde719df846f3472ae95abad1a851674e5bd7781ad227bca03b1a7f0e46c8e8502d60b1074b10e0f0546d492bff4ab7893598671128fd3959afc1561cf598fc25a9a27d5f05d85bd11ff1e2a02e8dea44d8e75e73b89de9c4c7bf566b64ba4b6fb750f3aea9d2138d251423985057bea8c4dcbdd05316e1d6705f589", 0xb9}, {&(0x7f0000000400)="87fdc3c868bfc349d4e01dee89fac1e572a9ac73c457d98bb9c3018dfd818d56a6a6c96f2a16639fa2e81afaec024ee78a0514c493b27e4bba369b63894a57b711fd260ad9fb8df4836bb71ec34e427ee468d49e3bde0d235dead80e75eba9e18035c997fef4604b36e20303992984988666bfbc3c35f7d1812d74ad6a2f2a813aad93ec503df500c7737f513e7fdca802bca0c2d42445", 0x97}, {&(0x7f00000004c0)="54895f9d40d2c4d2620031ccbc44d2ff9e92d0f39831bc7a8802eb2ed31a13954ebcb9f6ad1be37707b5f0222927bcd54c357053a0e7afdbff9426a95421a64f7fbb833e85a4718814d5fd5d57bdcd392911522351d26d9c59a74f6f4f16d39635fb15c821ea3585662afdb942f446ab", 0x70}, {&(0x7f0000000ec0)="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", 0xbaf}], 0x8, 0x10000, 0x0) creat(&(0x7f0000001940)='./file0\x00', 0x0) [ 507.372954][ T3682] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 507.400299][ T3682] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 507.414650][ T3682] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.597164][ T3682] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.606548][ T3682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.614551][ T3682] usb 2-1: Product: syz [ 507.618878][ T3682] usb 2-1: Manufacturer: syz [ 507.623492][ T3682] usb 2-1: SerialNumber: syz 12:43:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 507.945963][ T3682] usb 2-1: 0:2 : does not exist [ 507.980680][ T3682] usb 2-1: USB disconnect, device number 7 12:43:32 executing program 1: socketpair(0x21, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 12:43:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x64f4b5f1d18c9b7a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000b05d25a80648c6394f90124fc60040002400a000000053582c137153e371448018000f01700d1bd", 0x33fe0}], 0x1}, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:43:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, 0x0, 0x0) 12:43:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:32 executing program 3: socketpair(0x21, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 12:43:32 executing program 1: socketpair(0x21, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) [ 508.399066][ T8964] netlink: 194472 bytes leftover after parsing attributes in process `syz-executor.5'. 12:43:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:32 executing program 1: socket$alg(0x26, 0x5, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) [ 508.496574][ T8964] netlink: zone id is out of range 12:43:32 executing program 3: socketpair(0x21, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) [ 508.568533][ T8964] netlink: zone id is out of range [ 508.636415][ T3714] Bluetooth: hci0: command 0x0419 tx timeout [ 508.753108][ T8964] netlink: set zone limit has 4 unknown bytes 12:43:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x0, 0x2811fdff) 12:43:32 executing program 3: socketpair(0x21, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 12:43:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x64f4b5f1d18c9b7a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000b05d25a80648c6394f90124fc60040002400a000000053582c137153e371448018000f01700d1bd", 0x33fe0}], 0x1}, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:43:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x0, 0x2811fdff) [ 508.929679][ T8986] netlink: 194472 bytes leftover after parsing attributes in process `syz-executor.5'. 12:43:32 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x7, 0x0, &(0x7f0000000040)) [ 508.976110][ T8986] netlink: zone id is out of range [ 508.984188][ T8986] netlink: zone id is out of range 12:43:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x0, 0x2811fdff) 12:43:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x8, 0x4, 0x2c00, 0x0, 0x1}, 0x48) 12:43:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) [ 509.196026][ T916] Bluetooth: hci4: command 0x041b tx timeout [ 509.256984][ T8986] netlink: set zone limit has 4 unknown bytes 12:43:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:33 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x64f4b5f1d18c9b7a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000b05d25a80648c6394f90124fc60040002400a000000053582c137153e371448018000f01700d1bd", 0x33fe0}], 0x1}, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:43:33 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) clock_gettime(0x1, &(0x7f0000000a80)) [ 509.582351][ T9015] netlink: 194472 bytes leftover after parsing attributes in process `syz-executor.5'. [ 509.703013][ T9015] netlink: zone id is out of range 12:43:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) [ 509.740073][ T9015] netlink: zone id is out of range 12:43:33 executing program 1: brk(0x200000000007fff) 12:43:33 executing program 1: syz_mount_image$affs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x7401, &(0x7f0000001940)) [ 509.923837][ T9015] netlink: set zone limit has 4 unknown bytes 12:43:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:34 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) 12:43:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:43:34 executing program 3: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) clock_gettime(0x1, &(0x7f0000000a80)) 12:43:34 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) 12:43:34 executing program 3: socket$alg(0x26, 0x5, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) dup(r0) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x18, r1, 0x301, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 12:43:34 executing program 5: syz_clone(0x3aaad000, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0) 12:43:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:34 executing program 1: r0 = syz_io_uring_setup(0x501d, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 12:43:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) [ 511.279555][ T916] Bluetooth: hci4: command 0x040f tx timeout 12:43:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:35 executing program 5: syz_clone(0x3aaad000, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0) 12:43:35 executing program 1: sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x5) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x6bf7, 0x0, 0xac, 0x4}]}) 12:43:35 executing program 3: socket$alg(0x26, 0x5, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) dup(r0) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:43:35 executing program 1: socket$alg(0x26, 0x5, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) dup(r0) r1 = syz_io_uring_setup(0x27a, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x47026100, 0x0, 0x0, 0x0, 0x0, 0x0) 12:43:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:35 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 12:43:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:36 executing program 5: clock_gettime(0x0, &(0x7f0000000a80)) 12:43:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:36 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000040)) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000240)='./file0\x00', 0x0) faccessat2(r0, 0x0, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x400800, 0x0) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_mount_image$erofs(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x5, 0x4, &(0x7f0000001000)=[{&(0x7f0000000b40)="9e", 0x1, 0x4}, {&(0x7f0000000bc0)="5fe4b1bfa1c260fbaf1b", 0xa, 0x7fffffff}, {&(0x7f0000000c40)="99", 0x1, 0x80000000}, {0x0}], 0x4000, &(0x7f00000010c0)={[{@acl}, {@noacl}, {}, {@fault_injection={'fault_injection', 0x3d, 0x7fff}}, {@noacl}], [{@smackfsdef={'smackfsdef', 0x3d, '^'}}, {@uid_gt={'uid>', 0xee01}}, {@subj_role={'subj_role', 0x3d, '/dev/zero\x00'}}, {@appraise_type}]}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000001240)={{}, {0x77359400}}, 0x0) 12:43:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000380)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e25, 0x0, @remote}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4048041) 12:43:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:36 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)) 12:43:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}], 0x2c) [ 512.568046][ T9099] loop3: detected capacity change from 0 to 264192 12:43:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xffffff7f00000000}}, 0x0) 12:43:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:36 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000005c40), 0x2b0202, 0x0) [ 512.709831][ T9099] erofs: Unknown parameter 'fault_injection' 12:43:36 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xc2003, 0x0) [ 513.355937][ T3714] Bluetooth: hci4: command 0x0419 tx timeout 12:43:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:37 executing program 3: r0 = socket(0x18, 0x0, 0x1) setsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 12:43:37 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="ea") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/9, 0x9}, {0x0}, {&(0x7f0000000200)=""/127, 0x7f}], 0x3, &(0x7f0000000440)=[{&(0x7f0000000540)=""/232, 0xe8}], 0x1, 0x0) 12:43:37 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:37 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}], 0x2c) 12:43:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) 12:43:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005780)={0x0}}, 0x0) 12:43:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 12:43:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:38 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000006680)={0x0, 0x0, 0x0}, 0x0) 12:43:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='f'], 0x34}}, 0x0) [ 514.423825][ T91] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.639026][ T91] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.751204][ T91] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.904813][ T91] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:43:39 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:39 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) 12:43:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:39 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f00000065c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) 12:43:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000640), &(0x7f0000000680)=0xc) 12:43:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000057c0)={0x0, 0x0, 0x0}, 0x0) 12:43:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "102bb66adc4dbff6c3e0bd7e6ee91365b48d2ea90bf96a908b3b63b8512d1c297fb782e204bf740402241a0e578a31a69f54586cbb9e9cd72646ea8f13a3510718d08133b7de6c849f9bc6fe6319b22f"}, 0xd8) 12:43:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x45, 0x0, 0x0, 0xbbdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x39, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff33ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000001]}) 12:43:39 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 12:43:39 executing program 1: openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 12:43:39 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0) [ 515.809901][ T91] device hsr_slave_0 left promiscuous mode [ 515.837536][ T91] device hsr_slave_1 left promiscuous mode [ 515.860128][ T91] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.905494][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.941980][ T91] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.966306][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.994644][ T91] device bridge_slave_1 left promiscuous mode [ 516.018119][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.054705][ T91] device bridge_slave_0 left promiscuous mode [ 516.088422][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.152178][ T91] device veth1_macvtap left promiscuous mode [ 516.185314][ T91] device veth0_macvtap left promiscuous mode [ 516.215368][ T91] device veth1_vlan left promiscuous mode [ 516.247069][ T91] device veth0_vlan left promiscuous mode [ 516.620688][ T91] team0 (unregistering): Port device team_slave_1 removed [ 516.634932][ T91] team0 (unregistering): Port device team_slave_0 removed [ 516.656382][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.672802][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.769171][ T91] bond0 (unregistering): Released all slaves [ 520.965976][ T3651] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 523.450781][ T3645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 523.459357][ T3645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 523.467081][ T3645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 523.475082][ T3645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 523.485691][ T3645] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 523.493053][ T3645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 523.555470][ T9360] chnl_net:caif_netlink_parms(): no params data found [ 523.591490][ T9360] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.598727][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.606776][ T9360] device bridge_slave_0 entered promiscuous mode [ 523.614761][ T9360] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.622226][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.629928][ T9360] device bridge_slave_1 entered promiscuous mode [ 523.648904][ T9360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.659856][ T9360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.682835][ T9360] team0: Port device team_slave_0 added [ 523.690071][ T9360] team0: Port device team_slave_1 added [ 523.707115][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.714137][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.740294][ T9360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.752113][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.759357][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.785323][ T9360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.811744][ T9360] device hsr_slave_0 entered promiscuous mode [ 523.818568][ T9360] device hsr_slave_1 entered promiscuous mode [ 523.825193][ T9360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.833015][ T9360] Cannot create hsr debugfs directory [ 523.888569][ T9360] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.895629][ T9360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.902970][ T9360] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.910190][ T9360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.954424][ T9360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.967738][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.976388][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.983939][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.992167][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 524.003891][ T9360] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.014546][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.023201][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.030331][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.042162][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.050723][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.057832][ T3714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.076922][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 524.088108][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 524.096205][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 524.108953][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.120345][ T9360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.131730][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 524.147870][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 524.169364][ T9360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.177111][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.184472][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.386187][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 524.394809][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 524.403292][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 524.412047][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 524.422026][ T9360] device veth0_vlan entered promiscuous mode [ 524.433909][ T9360] device veth1_vlan entered promiscuous mode [ 524.451336][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 524.459257][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 524.467725][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 524.479453][ T9360] device veth0_macvtap entered promiscuous mode [ 524.489350][ T9360] device veth1_macvtap entered promiscuous mode [ 524.502130][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.514192][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.524294][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.535029][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.545090][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.556492][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.566332][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.576793][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.586662][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.597460][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.609572][ T9360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.618530][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 524.628429][ T916] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 524.639809][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.650906][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.660929][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.672065][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.682116][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.692885][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.702806][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.714079][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.724077][ T9360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.734566][ T9360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.745836][ T9360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.754758][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 524.763298][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:43:48 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:48 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:43:48 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, 0x0, 0x4008010) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) 12:43:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:43:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000), 0x4) 12:43:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000057c0)={&(0x7f00000056c0), 0xc, &(0x7f0000005780)={0x0}}, 0x4000001) 12:43:48 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/200, 0xc8}, {&(0x7f0000000040)=""/57, 0x39}, {0x0}], 0x3, &(0x7f0000000440)=[{&(0x7f0000000540)=""/232, 0xe8}], 0x1, 0x0) 12:43:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:43:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 12:43:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) 12:43:48 executing program 5: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 12:43:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:49 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="ea") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/200, 0xc8}, {0x0}, {&(0x7f0000000200)=""/127, 0x7f}, {0x0}, {0x0}], 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)=""/232, 0xe8}], 0x1, 0x0) 12:43:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8941, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @broadcast}, @rc={0x1f, @fixed}, @vsock={0x28, 0x0, 0x0, @my=0x1}}) 12:43:49 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) r0 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x20000800) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000ac0)={0x20000000}) [ 525.516722][ T14] Bluetooth: hci5: command 0x0409 tx timeout 12:43:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:49 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="ea") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/200, 0xc8}, {0x0}, {&(0x7f0000000200)=""/127, 0x7f}, {0x0}, {0x0}], 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)=""/232, 0xe8}], 0x1, 0x0) 12:43:49 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) 12:43:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 12:43:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:49 executing program 5: openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x4c0, 0x0) 12:43:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:50 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) 12:43:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001c00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 12:43:50 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 12:43:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x0, 0x2811fdff) 12:43:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 12:43:50 executing program 5: syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0xc8080) 12:43:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:43:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x0, 0x2811fdff) 12:43:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:50 executing program 3: ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000002e00)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000002e40)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000002ec0), 0x6041, 0x0) 12:43:50 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000002e00)=[{&(0x7f0000000640)=""/219, 0xdb}, {0x0}, {0x0}, {&(0x7f00000007c0)=""/80, 0x50}, {0x0}, {&(0x7f0000001d40)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 12:43:50 executing program 1: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 12:43:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x0, 0x2811fdff) 12:43:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:51 executing program 1: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) 12:43:51 executing program 5: sched_setparam(0x0, &(0x7f0000000000)=0x9) 12:43:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x27a, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x3d1b, 0x0, 0x0, 0x0, 0x0) 12:43:51 executing program 3: openat$damon_kdamond_pid(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r0 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) 12:43:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) [ 527.595928][ T3679] Bluetooth: hci5: command 0x041b tx timeout [ 527.649565][ T91] ================================================================== [ 527.657654][ T91] BUG: KASAN: use-after-free in ovs_ct_exit+0x2df/0x4a0 [ 527.664603][ T91] Read of size 8 at addr ffff888035aae880 by task kworker/u4:4/91 [ 527.672394][ T91] [ 527.674703][ T91] CPU: 1 PID: 91 Comm: kworker/u4:4 Not tainted 6.0.0-rc3-syzkaller-00031-gc5e4d5e99162 #0 [ 527.684665][ T91] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 527.694710][ T91] Workqueue: netns cleanup_net [ 527.699467][ T91] Call Trace: [ 527.702733][ T91] [ 527.705648][ T91] dump_stack_lvl+0xcd/0x134 [ 527.710237][ T91] print_report.cold+0x2ba/0x719 [ 527.715169][ T91] ? ovs_ct_exit+0x2df/0x4a0 [ 527.719752][ T91] kasan_report+0xb1/0x1e0 [ 527.724162][ T91] ? ovs_ct_exit+0x2df/0x4a0 [ 527.728745][ T91] ovs_ct_exit+0x2df/0x4a0 [ 527.733153][ T91] ovs_exit_net+0x19c/0xbc0 [ 527.737646][ T91] ? afs_put_sysnames+0x1d3/0x250 [ 527.742670][ T91] ? kfree+0xe2/0x580 [ 527.746641][ T91] ? group_init+0x6b0/0x6b0 [ 527.751136][ T91] ? ovs_dp_cmd_del+0x270/0x270 [ 527.755988][ T91] ? ovs_dp_cmd_del+0x270/0x270 [ 527.760840][ T91] ops_exit_list+0xb0/0x170 [ 527.765334][ T91] cleanup_net+0x4ea/0xb00 [ 527.769743][ T91] ? lockdep_hardirqs_on+0x79/0x100 [ 527.775111][ T91] ? unregister_pernet_device+0x70/0x70 [ 527.780651][ T91] process_one_work+0x991/0x1610 [ 527.785584][ T91] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 527.790949][ T91] ? rwlock_bug.part.0+0x90/0x90 [ 527.795878][ T91] ? _raw_spin_lock_irq+0x41/0x50 [ 527.800899][ T91] worker_thread+0x665/0x1080 [ 527.805575][ T91] ? __kthread_parkme+0x15f/0x220 [ 527.810589][ T91] ? process_one_work+0x1610/0x1610 [ 527.815779][ T91] kthread+0x2e4/0x3a0 [ 527.819899][ T91] ? kthread_complete_and_exit+0x40/0x40 [ 527.825613][ T91] ret_from_fork+0x1f/0x30 [ 527.830031][ T91] [ 527.833035][ T91] [ 527.835343][ T91] Allocated by task 9015: [ 527.839652][ T91] kasan_save_stack+0x1e/0x40 [ 527.844498][ T91] __kasan_kmalloc+0xa9/0xd0 [ 527.849078][ T91] ovs_ct_limit_cmd_set+0x3dd/0xc70 [ 527.854269][ T91] genl_family_rcv_msg_doit+0x228/0x320 [ 527.859810][ T91] genl_rcv_msg+0x328/0x580 [ 527.864305][ T91] netlink_rcv_skb+0x153/0x420 [ 527.869056][ T91] genl_rcv+0x24/0x40 [ 527.873028][ T91] netlink_unicast+0x543/0x7f0 [ 527.877779][ T91] netlink_sendmsg+0x917/0xe10 [ 527.882533][ T91] sock_sendmsg+0xcf/0x120 [ 527.886944][ T91] ____sys_sendmsg+0x6eb/0x810 [ 527.891694][ T91] ___sys_sendmsg+0x110/0x1b0 [ 527.896361][ T91] __sys_sendmsg+0xf3/0x1c0 [ 527.900852][ T91] do_syscall_64+0x35/0xb0 [ 527.905260][ T91] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 527.911142][ T91] [ 527.913450][ T91] Freed by task 3683: [ 527.917414][ T91] kasan_save_stack+0x1e/0x40 [ 527.922083][ T91] kasan_set_track+0x21/0x30 [ 527.926663][ T91] kasan_set_free_info+0x20/0x30 [ 527.931676][ T91] ____kasan_slab_free+0x166/0x1c0 [ 527.936778][ T91] slab_free_freelist_hook+0x8b/0x1c0 [ 527.942136][ T91] kmem_cache_free_bulk.part.0+0x205/0x880 [ 527.947936][ T91] kfree_rcu_work+0x56c/0xa60 [ 527.952605][ T91] process_one_work+0x991/0x1610 [ 527.957536][ T91] worker_thread+0x665/0x1080 [ 527.962210][ T91] kthread+0x2e4/0x3a0 [ 527.966272][ T91] ret_from_fork+0x1f/0x30 [ 527.970681][ T91] [ 527.972990][ T91] Last potentially related work creation: [ 527.978687][ T91] kasan_save_stack+0x1e/0x40 [ 527.983353][ T91] __kasan_record_aux_stack+0xbe/0xd0 [ 527.988718][ T91] kvfree_call_rcu+0x74/0x940 [ 527.993387][ T91] ovs_ct_exit+0x21e/0x4a0 [ 527.997801][ T91] ovs_exit_net+0x19c/0xbc0 [ 528.002290][ T91] ops_exit_list+0xb0/0x170 [ 528.006786][ T91] cleanup_net+0x4ea/0xb00 [ 528.011220][ T91] process_one_work+0x991/0x1610 [ 528.016239][ T91] worker_thread+0x665/0x1080 [ 528.020908][ T91] kthread+0x2e4/0x3a0 [ 528.024961][ T91] ret_from_fork+0x1f/0x30 [ 528.029367][ T91] [ 528.031672][ T91] The buggy address belongs to the object at ffff888035aae880 [ 528.031672][ T91] which belongs to the cache kmalloc-64 of size 64 [ 528.045541][ T91] The buggy address is located 0 bytes inside of [ 528.045541][ T91] 64-byte region [ffff888035aae880, ffff888035aae8c0) [ 528.058559][ T91] [ 528.060869][ T91] The buggy address belongs to the physical page: [ 528.067263][ T91] page:ffffea0000d6ab80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35aae [ 528.077401][ T91] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 528.084938][ T91] raw: 00fff00000000200 ffffea000083b500 dead000000000005 ffff888011841640 [ 528.093513][ T91] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 528.102085][ T91] page dumped because: kasan: bad access detected [ 528.108484][ T91] page_owner tracks the page as allocated [ 528.114179][ T91] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 9015, tgid 9013 (syz-executor.5), ts 509923681742, free_ts 509905985663 [ 528.132750][ T91] get_page_from_freelist+0x109b/0x2ce0 [ 528.138292][ T91] __alloc_pages+0x1c7/0x510 [ 528.142871][ T91] alloc_pages+0x1a6/0x270 [ 528.147276][ T91] allocate_slab+0x27e/0x3d0 [ 528.151854][ T91] ___slab_alloc+0x7f1/0xe10 [ 528.156441][ T91] __slab_alloc.constprop.0+0x4d/0xa0 [ 528.161801][ T91] kmem_cache_alloc_trace+0x323/0x3e0 [ 528.167162][ T91] ovs_ct_limit_cmd_set+0x3dd/0xc70 [ 528.172353][ T91] genl_family_rcv_msg_doit+0x228/0x320 [ 528.177892][ T91] genl_rcv_msg+0x328/0x580 [ 528.182388][ T91] netlink_rcv_skb+0x153/0x420 [ 528.187148][ T91] genl_rcv+0x24/0x40 [ 528.191126][ T91] netlink_unicast+0x543/0x7f0 [ 528.195878][ T91] netlink_sendmsg+0x917/0xe10 [ 528.200631][ T91] sock_sendmsg+0xcf/0x120 [ 528.205035][ T91] ____sys_sendmsg+0x6eb/0x810 [ 528.209790][ T91] page last free stack trace: [ 528.214444][ T91] free_pcp_prepare+0x5e4/0xd20 [ 528.219641][ T91] free_unref_page_list+0x16f/0xb90 [ 528.224917][ T91] release_pages+0xbd3/0x1400 [ 528.229587][ T91] tlb_batch_pages_flush+0xa8/0x1a0 [ 528.234778][ T91] tlb_finish_mmu+0x147/0x7e0 [ 528.239447][ T91] exit_mmap+0x1d2/0x490 [ 528.243677][ T91] __mmput+0x122/0x4b0 [ 528.247738][ T91] mmput+0x56/0x60 [ 528.251450][ T91] do_exit+0x9e2/0x29b0 [ 528.255589][ T91] do_group_exit+0xd2/0x2f0 [ 528.260081][ T91] get_signal+0x238c/0x2610 [ 528.264575][ T91] arch_do_signal_or_restart+0x82/0x2300 [ 528.270201][ T91] exit_to_user_mode_prepare+0x15f/0x250 [ 528.275822][ T91] syscall_exit_to_user_mode+0x19/0x50 [ 528.281275][ T91] do_syscall_64+0x42/0xb0 [ 528.285677][ T91] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 528.291563][ T91] [ 528.293870][ T91] Memory state around the buggy address: [ 528.299484][ T91] ffff888035aae780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 528.307529][ T91] ffff888035aae800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 528.315574][ T91] >ffff888035aae880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 528.323708][ T91] ^ [ 528.327759][ T91] ffff888035aae900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 528.335829][ T91] ffff888035aae980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 528.343972][ T91] ================================================================== 12:43:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) 12:43:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001240), 0x14) 12:43:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x3ff, 0x4) 12:43:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 12:43:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x201008800, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000580), {0x15}, &(0x7f00000003c0)=""/189, 0xbd, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003a80), 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x24004000}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) [ 528.374263][ T91] Kernel panic - not syncing: panic_on_warn set ... [ 528.380901][ T91] CPU: 0 PID: 91 Comm: kworker/u4:4 Not tainted 6.0.0-rc3-syzkaller-00031-gc5e4d5e99162 #0 [ 528.390906][ T91] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 528.401157][ T91] Workqueue: netns cleanup_net [ 528.405948][ T91] Call Trace: [ 528.409251][ T91] [ 528.412195][ T91] dump_stack_lvl+0xcd/0x134 [ 528.416813][ T91] panic+0x2c8/0x627 [ 528.420726][ T91] ? panic_print_sys_info.part.0+0x10b/0x10b [ 528.426744][ T91] ? preempt_schedule_common+0x59/0xc0 [ 528.432238][ T91] ? preempt_schedule_thunk+0x16/0x18 [ 528.437648][ T91] ? ovs_ct_exit+0x2df/0x4a0 [ 528.442276][ T91] end_report.part.0+0x3f/0x7c [ 528.447073][ T91] kasan_report.cold+0xa/0xf [ 528.451692][ T91] ? ovs_ct_exit+0x2df/0x4a0 [ 528.456315][ T91] ovs_ct_exit+0x2df/0x4a0 [ 528.460779][ T91] ovs_exit_net+0x19c/0xbc0 [ 528.465296][ T91] ? afs_put_sysnames+0x1d3/0x250 [ 528.470338][ T91] ? kfree+0xe2/0x580 12:43:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=@ipmr_getroute={0x1c, 0x1a, 0x301}, 0x1c}}, 0x0) 12:43:52 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000002e00)=[{&(0x7f00000007c0)=""/80, 0x50}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x2, &(0x7f0000000940)=[{&(0x7f0000001b40)=""/101, 0x65}], 0x1, 0x0) [ 528.474346][ T91] ? group_init+0x6b0/0x6b0 [ 528.478881][ T91] ? ovs_dp_cmd_del+0x270/0x270 [ 528.483758][ T91] ? ovs_dp_cmd_del+0x270/0x270 [ 528.488630][ T91] ops_exit_list+0xb0/0x170 [ 528.493155][ T91] cleanup_net+0x4ea/0xb00 [ 528.497621][ T91] ? lockdep_hardirqs_on+0x79/0x100 [ 528.502856][ T91] ? unregister_pernet_device+0x70/0x70 [ 528.508430][ T91] process_one_work+0x991/0x1610 [ 528.513403][ T91] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 528.518803][ T91] ? rwlock_bug.part.0+0x90/0x90 [ 528.523764][ T91] ? _raw_spin_lock_irq+0x41/0x50 [ 528.528821][ T91] worker_thread+0x665/0x1080 [ 528.533537][ T91] ? __kthread_parkme+0x15f/0x220 [ 528.538590][ T91] ? process_one_work+0x1610/0x1610 [ 528.543826][ T91] kthread+0x2e4/0x3a0 [ 528.547925][ T91] ? kthread_complete_and_exit+0x40/0x40 [ 528.553586][ T91] ret_from_fork+0x1f/0x30 [ 528.558045][ T91] [ 528.562044][ T91] Kernel Offset: disabled [ 528.570193][ T91] Rebooting in 86400 seconds..