last executing test programs: 54m37.50026145s ago: executing program 32 (id=217): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="7bd2014511", 0x5}, {0x0}], 0x2}}], 0x1, 0x4045c90) 23m59.43851545s ago: executing program 33 (id=5909): syz_open_dev$sg(0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) alarm(0x100000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) io_uring_setup(0x463f, &(0x7f00000000c0)={0x0, 0x7660, 0x20000, 0x0, 0x190}) syz_open_dev$video4linux(&(0x7f0000000000), 0xa000000000, 0x2000) 23m24.797164752s ago: executing program 34 (id=5970): syz_open_dev$sg(0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) alarm(0x100000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) io_uring_setup(0x463f, &(0x7f00000000c0)={0x0, 0x7660, 0x20000, 0x0, 0x190}) syz_open_dev$video4linux(&(0x7f0000000000), 0xa000000000, 0x2000) 20m3.401756113s ago: executing program 35 (id=6337): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x20, 0x8000, 0x0, 0x800, {{0x1f, 0x4, 0x2, 0x5, 0x7c, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x44, 0xfb, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010102, 0x4}, {@rand_addr=0x64010100, 0x4}, {@multicast2}, {@multicast2, 0x3}, {@multicast1, 0x263}, {@broadcast, 0xe}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x45, 0x3, 0x8, [{@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010102, 0x6}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)=""/151}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 19m46.439111748s ago: executing program 36 (id=6349): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c8}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_disconnect(r0) r5 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) close_range(r5, 0xffffffffffffffff, 0x0) 19m40.934487221s ago: executing program 37 (id=6354): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000080104000000000000000005000008050003002f000000040004800900010073797a31000000002400047608000140000000070800014080000001080001407fffffff0800014000003d5a0600024000f900"], 0x58}, 0x1, 0x0, 0x0, 0x51}, 0x24004040) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000430001"], 0x24}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) 14m46.648449337s ago: executing program 5 (id=6816): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) bind$unix(r3, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') write$P9_RWSTAT(r6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 14m45.762077938s ago: executing program 5 (id=6819): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="1400040076e674090000006f5f7465616d00000008000500060000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aa", 0xf, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000340)={'dummy0\x00', @remote}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14m45.59894177s ago: executing program 5 (id=6820): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) gettid() socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x490082) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00)="1081", 0x2, r4) r5 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000000)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x1, 0x2, 0x1, 0x3, 0x9f1e, 0x8}}}, &(0x7f0000000780)={0x84, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xd7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0xe0, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000540)={0x40, 0xb, 0x2, "69ef"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x19, 0x2, 'rY'}, 0x0, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x8}, 0x0, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$printer(r5, 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000140)={0x371, 0x4, 0x7}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x2800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x40000) 14m42.563922569s ago: executing program 5 (id=6827): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa9", 0x10, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffff"], 0x80}}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)=""/188, 0x1001}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14m42.373706486s ago: executing program 5 (id=6829): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 14m41.303503088s ago: executing program 5 (id=6833): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x2c020400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000001bff4)={0x10000000}) signalfd4(r1, &(0x7f0000000180), 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x400000000080803, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0xfffffffffffffe4b}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 14m25.797565003s ago: executing program 38 (id=6833): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x2c020400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000001bff4)={0x10000000}) signalfd4(r1, &(0x7f0000000180), 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x400000000080803, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0xfffffffffffffe4b}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 8m47.495053455s ago: executing program 8 (id=7527): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2fa, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0x2c4, 0x3a, 0x0, @local, @private2, {[@srh={0x3c, 0x10, 0x4, 0x8, 0xae, 0x30, 0xb, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x16, "8335e7073e944cd6560b0e441c2147e92926694ecb3581a72202071849121cc7ce47424f4af5a8cb0601d35bbc9acd5e764f4b4a910fca336a69cb204ed3f617f9b38d63bd2f6a5333ed50bc314284702658f2f02d84c7ae846ddbc82e30ebb93e12566d204717f16ab96105cf7183419e2217730197edd3643bf4b5475296b1281bfecf061b8a7618c212771457df2a4aad61ae0db8abe773cf2674c78f4084167a9ca463e10d7500822eb54485ac976c05"}, {0x1f}, {0xe, 0x15, "f0749118229213f62d83ef54243e48e5b6fd3cae1ea3b5bac98682958392bbf8dd2458c0a58318e7880e4b4e62fc1871ca55c946056fb7c41ef634cc22cddec16e41bc37c3aea2f429fa687a70f6978dc6bf9ccaa6a0f9a09178921fe8aa89a037e506fc9dd6c17b676b8aaef9d91d6d89ce5d02c9b7a8a434ad9d01fd2e7547d4737a9a3b0622c1628075d49d9b439bf97b5c37a6d5c39fd32a115af2119f2175f0534663703aa9"}, {0x18, 0x18, "ea95ab0a03f93049172c0281c483125e5b0d01ec159c49c5a6924beddc8278e8168630508eada0f4e6d137abfdcdd034673c5bc0c0f922fcd822fe593240b2e66e2c656ac7bfced046cf5c3e03cd87fcd90bd1ca58eeecb40a8d8c16296394e1c09807c648fb5d0e0efdaeef82905fb1370796c5a1960836bf3cb007326010b88498fd095590d5bacf287d2ee767e9fda78cd1052492a684d63678082bc6099bd5f40237e9c2ef2a8151b729b8844077d57db6f20438fb44431a18f155c0c00c6cc5efb7"}, {0x14}]}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80)=[{{&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x5, 0x48000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) sendto$inet(r0, &(0x7f00000001c0)="696d9fe62306edf82ff96b94000c8ca8702447ef2fe7f51ac97716", 0x1b, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x1003502, 0xa}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 8m44.559467138s ago: executing program 8 (id=7532): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f00000002c0)={0x0, 0x30d9, 0x10100, 0x0, 0x10}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) close(r7) 8m42.842773236s ago: executing program 8 (id=7538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000007c0)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@my=0x0, 0xffffbfff}, @my=0x1, 0x9, 0x2000000, 0x6449, 0xfffffffffffffffd, 0x8, 0xfffffffd, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'ipvlan1\x00', {0x2}}) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000100)=' \x01\x1b\x06\xf1wt\xf6\xd2\xdc\x1c\xa4\xe3Is\x9ee\xb9(\xf5\xec\xc7\xe11\xd2\x7fs\xbe:\xa5\xd1\xb5\xc5\xf4\xb9\xdf\xee\x06\xef\x06a\xcd\xe0\x88\x99']}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0000000008530846010000000000010902"], 0x0) 8m39.687745541s ago: executing program 8 (id=7542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r4 = socket(0x10, 0x3, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01030000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0x60}, 0x1, 0x0, 0x0, 0x800c}, 0x20000000) 8m38.687061804s ago: executing program 8 (id=7543): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 8m37.556594782s ago: executing program 8 (id=7546): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r8, 0xffffffffffffffff, 0x600000000000000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 8m22.249469455s ago: executing program 39 (id=7546): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r8, 0xffffffffffffffff, 0x600000000000000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 6m54.429742923s ago: executing program 4 (id=7757): socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x7c80, 0x0) sendmsg$nl_generic(r5, 0x0, 0x4000) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r3) 6m50.110424536s ago: executing program 4 (id=7764): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xeffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x1, 0x9, 0x4, 0x7, 0xe, 0x6, 0x6, 0x5, 0x9, 0x4, 0x9, 0x8, 0x5, 0x7}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x4, 0x2, 0x1000000081, 0x5, 0xfffffffffffffffe, 0x5, 0x8, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x42, 0x6, 0x8, 0x80, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m48.741564428s ago: executing program 1 (id=7768): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000400)=0x5) 6m47.589864479s ago: executing program 1 (id=7770): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1001, 0x7], [0x9, 0xfff], 0x108}}) socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=no%e') 6m47.323137384s ago: executing program 1 (id=7771): socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x6a4, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r7, 0xffffffffffffffff, 0x600000000000000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 6m46.005200733s ago: executing program 1 (id=7775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020839f1000034fffe00e1fc06900101010101ac1414aa00004e22774a2562daf2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000290780932080a000000020000000b0502"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r3 = socket(0x1, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x1000, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0xd8, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xa8, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 6m45.121543487s ago: executing program 4 (id=7776): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d115", 0xaf}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0", 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x20f}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m44.737542082s ago: executing program 4 (id=7778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20081, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) 6m43.7314532s ago: executing program 4 (id=7779): wait4(0x0, 0x0, 0x1000000, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r5 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) r7 = fanotify_init(0x40, 0x0) write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x001'], 0x20) 6m43.656225814s ago: executing program 1 (id=7781): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000400)=0x5) 6m42.798473507s ago: executing program 1 (id=7782): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 6m42.75833488s ago: executing program 4 (id=7783): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m27.641285681s ago: executing program 40 (id=7782): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 6m27.296985154s ago: executing program 41 (id=7783): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5m50.525581586s ago: executing program 3 (id=7817): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x10000) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5m46.596635361s ago: executing program 3 (id=7821): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 5m40.819935426s ago: executing program 3 (id=7826): socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r2) 5m38.878517543s ago: executing program 3 (id=7827): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000090}, 0x48091) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x1000156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r5, 0x3, {0x0, 0x0, 0x3}, 0x2}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)}, 0x4048081) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 5m34.825285037s ago: executing program 3 (id=7830): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2564], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) r2 = io_uring_setup(0x93d, &(0x7f0000000080)={0x0, 0x70e6, 0x2, 0x2, 0x119}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r6, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) mremap(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000845000/0x1000)=nil) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000240)=[0x40, 0x8], 0x2) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) read$FUSE(r6, &(0x7f0000001080)={0x2020}, 0x2020) 5m28.194803986s ago: executing program 3 (id=7833): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, 0x0, 0x0, 0x6c}, 0x38) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x351}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) dup(0xffffffffffffffff) 5m12.911649673s ago: executing program 42 (id=7833): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, 0x0, 0x0, 0x6c}, 0x38) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x351}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) dup(0xffffffffffffffff) 17.570462107s ago: executing program 9 (id=8351): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 14.864859846s ago: executing program 9 (id=8355): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xff7fffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 14.618510682s ago: executing program 9 (id=8358): socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r3) 14.223897259s ago: executing program 2 (id=8359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00'}, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) 13.512642396s ago: executing program 9 (id=8361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/address_bits', 0xc0c00, 0x0) lseek(r3, 0x24, 0x0) getdents64(r3, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x22, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "c828adbc"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0xc, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x10, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xb, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xe, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x2, 0x9}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x8, 0x1, 0x10, 0xe6}, 0x3d, &(0x7f0000000dc0)={0x5, 0xf, 0x3d, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x9, 0x11f0f, 0x9, [0x30, 0xf0, 0x3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0xe, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x62, 0x7, 0x6, 0xfffe, 0x8}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x0, 0x84, 0x2, 0xa}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x406}}, {0xa3, &(0x7f0000000540)=@string={0xa3, 0x3, "4860145b1503b43a1d4cf5271fd4623471f8282a4449abf0e36751690bef302e68b2fd947fba5b1497afcf1b1056558662aa2f27765cb556e01735fa31d2adec7cae854d76acb091d0c64994dd24272ec3ea3d95556b29f00aba5fa72a407dddd8e422b8d924aed10982d6fe1a829318d852f647d2d8d2c8666667cd0b8faf5318effe3add2ac8254fbbc4f92ede51797e0e586e0fd20c77948b031d710739bb5c"}}, {0x0, 0x0}, {0x2b, &(0x7f0000000d40)=@string={0x2b, 0x3, "1ce4ff4693909c55825ce3232827a7d67657361af76d21de23b74c758f5581fe54584cddee729f12f0"}}, {0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}]}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x40, 0x5}, 0x0, 0x0}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r6, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x8, 0xfffffffff30bda46, 0x0, 0xfffc, 0x6, 0x5d3186cd, 0x0, 0x0, 0x10, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r7}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x80000) dup2(r8, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 12.023809584s ago: executing program 6 (id=8364): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xd6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='rxrpc_rx_ack\x00', r1, 0x0, 0x3}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$isdn_base(0x22, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r7, r8, 0x4, 0x0, 0xffffffff, 0x804, {0xac7a, 0x1, 0x803, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x0, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 11.34171978s ago: executing program 6 (id=8366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x11e, 0x1e, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0125ecc46800"]) 9.975229997s ago: executing program 6 (id=8368): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xff7fffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 9.388377108s ago: executing program 2 (id=8370): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) bind$unix(r3, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 9.094496954s ago: executing program 6 (id=8371): socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r2) 9.094168744s ago: executing program 7 (id=8372): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000380)='/proc.sys/net/p\x9aJ\xdc\xd6\'\xd9ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 8.515827583s ago: executing program 0 (id=8373): wait4(0x0, 0x0, 0x1000000, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r5 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) r7 = fanotify_init(0x40, 0x0) write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x001'], 0x20) 8.04920196s ago: executing program 9 (id=8374): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2564], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) r2 = io_uring_setup(0x93d, &(0x7f0000000080)={0x0, 0x70e6, 0x2, 0x2, 0x119}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r6, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) mremap(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000845000/0x1000)=nil) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000240)=[0x40, 0x8], 0x2) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) read$FUSE(r6, &(0x7f0000001080)={0x2020}, 0x2020) 7.910923644s ago: executing program 2 (id=8375): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f1"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.807578764s ago: executing program 6 (id=8376): socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0x7c80, 0x0) sendmsg$nl_generic(r6, 0x0, 0x4000) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r4) 6.748485021s ago: executing program 0 (id=8377): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_bpf={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x271f, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) listen(0xffffffffffffffff, 0x80) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) 5.871702407s ago: executing program 6 (id=8378): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd8000ff600000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r6, r4, 0x7}, 0x10) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r7 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000240)={0xff, 0x82, 0x7, 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x4000080) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 5.708167213s ago: executing program 0 (id=8379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x2f3d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$tun(r5, 0x0, 0x96) 4.509521074s ago: executing program 0 (id=8380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000007c0)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@my=0x0, 0xffffbfff}, @my=0x1, 0x9, 0x2000000, 0x6449, 0xfffffffffffffffd, 0x8, 0xfffffffd, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'ipvlan1\x00', {0x2}}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 4.508335207s ago: executing program 2 (id=8381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00'}, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) 4.475698052s ago: executing program 7 (id=8382): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xff7fffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 3.820429909s ago: executing program 7 (id=8383): r0 = syz_open_procfs(0x0, &(0x7f0000003180)='net/vlan/config\x00') r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85}, 0x50) semget(0x1, 0x1, 0x789) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="700000006800010003001000fdffff7f00000000000000000c000200010000001500000044000c800600010081000000080202000300000006000100ff7f0000080002001a00000006000100dc000000080002000e000000080003000400000008000200010000000600030001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000002f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r6, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x70}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x8004) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000003040)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="2800000003080101000000e4ffffff000a00000305000300010000000c0004800800034000007af4"], 0x28}, 0x1, 0x0, 0x0, 0x240208c1}, 0x4040000) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 3.755048756s ago: executing program 0 (id=8384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r4, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 3.542276285s ago: executing program 9 (id=8385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/address_bits', 0xc0c00, 0x0) lseek(r3, 0x24, 0x0) getdents64(r3, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x22, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "c828adbc"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0xc, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x10, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xb, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xe, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x2, 0x9}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x8, 0x1, 0x10, 0xe6}, 0x3d, &(0x7f0000000dc0)={0x5, 0xf, 0x3d, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x9, 0x11f0f, 0x9, [0x30, 0xf0, 0x3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0xe, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x62, 0x7, 0x6, 0xfffe, 0x8}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x0, 0x84, 0x2, 0xa}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x406}}, {0xa6, &(0x7f0000000540)=@string={0xa6, 0x3, "4860145b1503b43a1d4cf5271fd4623471f8282a4449abf0e36751690bef302e68b2fd947fba5b1497afcf1b1056558662aa2f27765cb556e01735fa31d2adec7cae854d76acb091d0c64994dd24272ec3ea3d95556b29f00aba5fa72a407dddd8e422b8d924aed10982d6fe1a829318d852f647d2d8d2c8666667cd0b8faf5318effe3add2ac8254fbbc4f92ede51797e0e586e0fd20c77948b031d710739bb5cd23d6d"}}, {0x0, 0x0}, {0x2b, &(0x7f0000000d40)=@string={0x2b, 0x3, "1ce4ff4693909c55825ce3232827a7d67657361af76d21de23b74c758f5581fe54584cddee729f12f0"}}, {0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}]}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x40, 0x5}, 0x0, 0x0}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r6, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x8, 0xfffffffff30bda46, 0x0, 0xfffc, 0x6, 0x5d3186cd, 0x0, 0x0, 0x10, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r7}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x80000) dup2(r8, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2.497101222s ago: executing program 7 (id=8386): socket$alg(0x26, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c80, 0x0) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 1.366852711s ago: executing program 2 (id=8387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020839f1000034fffe00e1fc06900101010101ac1414aa00004e22774a2562daf2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000290780932080a000000020000000b0502"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r3 = socket(0x1, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x1000, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x19c, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x16c, 0x8, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x4}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 1.258745379s ago: executing program 7 (id=8388): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = add_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x4, r6, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x8000) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.050491061s ago: executing program 2 (id=8389): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x2e34, &(0x7f0000000180)) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0x100) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) setns(r3, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) fsmount(r0, 0x1, 0xa) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0480000008003950323030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x10080, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 73.378649ms ago: executing program 0 (id=8390): socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0) recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r2) 0s ago: executing program 7 (id=8391): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) pipe2$watch_queue(&(0x7f0000000000), 0x80) userfaultfd(0x80001) r1 = gettid() read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) kernel console output (not intermixed with test programs): 7][T29809] usb 3-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2968.183792][T29809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2968.344494][T29809] usb 3-1: config 0 descriptor?? [ 2968.647765][ T30] audit: type=1326 audit(1752573135.153:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2664 comm="syz.9.7622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a42f8e929 code=0x0 [ 2969.150275][T29809] usb 3-1: USB disconnect, device number 26 [ 2969.204768][ T2656] [U]  [ 2970.729090][ T2488] udevd[2488]: inotify_add_watch(7, /dev/loop52, 10) failed: No such file or directory [ 2971.174757][ T2464] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2971.210167][ T2464] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2971.312616][ T2464] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2971.324206][ T2464] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2972.382828][ T2464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2972.557379][ T2464] 8021q: adding VLAN 0 to HW filter on device team0 [ 2973.151178][ T2599] bridge0: port 1(bridge_slave_0) entered blocking state [ 2973.158450][ T2599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2973.195152][ T2599] bridge0: port 2(bridge_slave_1) entered blocking state [ 2973.202350][ T2599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2973.331422][ T2464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2973.681632][ T2727] bad cache= option: no%e [ 2973.681632][ T2727] [ 2973.688285][ T2727] CIFS: VFS: bad cache= option: no%e [ 2973.829824][ T2728] No buffer was provided with the request [ 2974.123947][ T43] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 2974.344729][ T43] usb 10-1: Using ep0 maxpacket: 16 [ 2974.362014][ T43] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2974.398926][ T43] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2974.407988][ T2464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2974.430735][ T43] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2974.478495][ T43] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2974.504160][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2974.512292][ T43] usb 10-1: Product: syz [ 2974.540156][ T43] usb 10-1: Manufacturer: syz [ 2974.556467][ T2464] veth0_vlan: entered promiscuous mode [ 2974.567370][ T43] usb 10-1: SerialNumber: syz [ 2974.817500][ T2740] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2974.880621][ T2740] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2974.888979][ T2740] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2974.898128][ T2740] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2974.906602][ T2740] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2975.106573][ T2464] veth1_vlan: entered promiscuous mode [ 2975.188969][ T2464] veth0_macvtap: entered promiscuous mode [ 2975.214604][ T2464] veth1_macvtap: entered promiscuous mode [ 2975.254636][T31809] Bluetooth: hci4: command 0x0406 tx timeout [ 2975.347324][ T2464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2975.372619][ T2464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2975.392743][ T2464] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2975.403097][ T2464] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2975.432102][ T2464] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2975.452669][ T43] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 2975.460350][ T30] audit: type=1326 audit(1752573141.963:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2719 comm="syz.3.7630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed3e38e929 code=0x0 [ 2975.460718][ T2464] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2975.491300][ T43] usb 10-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 2975.598424][ T43] usb 10-1: USB disconnect, device number 25 [ 2975.712068][T31228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2975.768393][T31228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2975.998577][ T2599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2976.057122][ T2599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2977.382847][ T2760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7580'. [ 2981.838505][ T2806] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7644'. [ 2984.159018][ T2838] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2984.173492][ T2838] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2984.181550][ T2838] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2984.190195][ T2838] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2984.198504][ T2838] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 2984.778762][ T2842] bad cache= option: no%e [ 2984.778762][ T2842] [ 2984.799292][ T2842] CIFS: VFS: bad cache= option: no%e [ 2985.049828][ T2855] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2985.804121][ T2862] bad cache= option: no%e [ 2985.804121][ T2862] [ 2985.810733][ T2862] CIFS: VFS: bad cache= option: no%e [ 2988.085182][ T2877] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2988.993470][ T2883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7659'. [ 2989.002803][ T2883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7659'. [ 2990.299766][ T2896] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 2990.347844][ T2896] sp0: Synchronizing with TNC [ 2991.074626][ T30] audit: type=1326 audit(1752573157.548:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2897 comm="syz.9.7665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a42f8e929 code=0x0 [ 2991.733870][ T2909] bad cache= option: no%e [ 2991.733870][ T2909] [ 2991.740437][ T2909] CIFS: VFS: bad cache= option: no%e [ 2992.669118][ T2920] No buffer was provided with the request [ 2993.834914][ T2926] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2993.857506][ T2926] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2993.865685][ T2926] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2993.875016][ T2926] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2993.882831][ T2926] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 2995.825632][ T2945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7674'. [ 2995.834947][ T2945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7674'. [ 2997.006941][ T2952] No buffer was provided with the request [ 2997.690810][ T2957] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3001.421006][ T30] audit: type=1326 audit(1752573167.613:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2983 comm="syz.4.7685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4edb8e929 code=0x0 [ 3002.754439][ T2995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7687'. [ 3002.763741][ T2995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7687'. [ 3003.271279][ T3001] No buffer was provided with the request [ 3004.585799][ T3005] bad cache= option: no%e [ 3004.585799][ T3005] [ 3004.592380][ T3005] CIFS: VFS: bad cache= option: no%e [ 3008.008932][ T3043] bad cache= option: no%e [ 3008.008932][ T3043] [ 3008.015917][ T3043] CIFS: VFS: bad cache= option: no%e [ 3008.723218][ T3049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7701'. [ 3008.732624][ T3049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7701'. [ 3008.960540][ T3053] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 3009.142618][ T3056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7702'. [ 3011.722196][ T30] audit: type=1326 audit(1752573178.237:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3067 comm="syz.9.7706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a42f8e929 code=0x0 [ 3014.355239][ T3090] vivid-000: disconnect [ 3015.865226][ T3094] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3016.227147][ T30] audit: type=1326 audit(1752573182.367:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3091 comm="syz.9.7712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a42f8e929 code=0x0 [ 3016.266666][ T3087] vivid-000: reconnect [ 3017.684392][ T30] audit: type=1326 audit(1752573184.177:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3103 comm="syz.4.7716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4edb8e929 code=0x0 [ 3018.512612][ T3119] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3018.521875][ T3119] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3018.531008][ T3119] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3018.540264][ T3119] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3018.721264][ T3111] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3018.753441][ T3111] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3018.761363][ T3111] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 3018.769734][ T3111] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3018.777513][ T3111] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 3018.953179][ T3128] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3019.530111][ T3129] No buffer was provided with the request [ 3020.749737][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.756280][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.355970][ T3146] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3021.598631][ T3153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7728'. [ 3021.609443][ T3153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7728'. [ 3025.406359][ T30] audit: type=1326 audit(1752573191.517:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3178 comm="syz.3.7735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed3e38e929 code=0x0 [ 3025.532133][ T3186] netlink: 'syz.2.7736': attribute type 4 has an invalid length. [ 3025.539949][ T3186] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7736'. [ 3026.127224][ T3196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7739'. [ 3026.153874][ T3196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7739'. [ 3026.227684][ T3204] vivid-000: disconnect [ 3027.121060][ T3200] vivid-000: reconnect [ 3027.415496][ T3217] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 3027.424782][ T3217] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 3027.905402][ T3219] udevd[3219]: inotify_add_watch(7, /dev/loop53, 10) failed: No such file or directory [ 3030.185786][ T3234] dummy0: entered promiscuous mode [ 3030.190976][ T3234] dummy0: entered allmulticast mode [ 3030.460126][ T3237] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3031.210986][ T3249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7751'. [ 3032.753784][ T30] audit: type=1326 audit(1752573199.267:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3257 comm="syz.3.7756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed3e38e929 code=0x0 [ 3032.774869][ C1] vkms_vblank_simulate: vblank timer overrun [ 3034.125997][ T3279] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3034.462225][ T30] audit: type=1326 audit(1752573200.377:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3267 comm="syz.1.7758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a3398e929 code=0x0 [ 3035.226700][ T3271] No buffer was provided with the request [ 3035.910428][ T3284] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7761'. [ 3037.404641][ T3303] netlink: 'syz.1.7765': attribute type 4 has an invalid length. [ 3037.412393][ T3303] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7765'. [ 3037.426020][ T3303] : renamed from bond0 (while UP) [ 3038.881610][ T3317] bad cache= option: no%e [ 3038.881610][ T3317] [ 3038.888266][ T3317] CIFS: VFS: bad cache= option: no%e [ 3039.978456][ T30] audit: type=1326 audit(1752573206.484:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3322 comm="syz.1.7771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a3398e929 code=0x0 [ 3040.474300][ T3334] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3040.657549][ T3333] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3040.665699][ T3333] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3040.679117][ T3333] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3040.687639][ T3333] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 3040.990488][ T3338] No buffer was provided with the request [ 3042.815100][ T3356] netlink: 'syz.4.7779': attribute type 4 has an invalid length. [ 3042.822855][ T3356] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7779'. [ 3046.527010][ T3379] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3046.536566][ T3379] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3046.544718][ T3379] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3046.554144][ T3379] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3046.561955][ T3379] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 3050.963706][T29810] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 3051.333703][T29810] usb 10-1: Using ep0 maxpacket: 16 [ 3051.593469][ T3390] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 3051.816164][T29810] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 3051.854603][ T3389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7788'. [ 3052.483670][T29810] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3052.493568][T29810] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3052.941211][T29810] usb 10-1: string descriptor 0 read error: -71 [ 3053.048165][T29810] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3056.436826][T29810] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3058.477094][T29810] usb 10-1: can't set config #1, error -71 [ 3058.543845][T29810] usb 10-1: USB disconnect, device number 26 [ 3059.515125][ T3419] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3059.524432][ T3419] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3059.572827][ T3419] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3059.584903][ T3419] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3059.592823][ T3419] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 3068.811592][ T3438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7801'. [ 3075.945261][T31809] Bluetooth: hci0: command 0x0406 tx timeout [ 3076.737054][T31809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3076.754085][T31809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3076.772172][T31809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3076.782495][T31809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3076.966368][T31809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3076.977283][T31809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3076.986549][T31809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3076.998061][ T3451] No buffer was provided with the request [ 3077.007023][T31809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3077.024175][T31809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3077.037662][T31809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3079.772035][ T3455] 9pnet_fd: Insufficient options for proto=fd [ 3080.192470][ T3452] Bluetooth: hci2: command tx timeout [ 3080.203708][ T2323] Bluetooth: hci1: command tx timeout [ 3081.898562][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.906576][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.293816][ T2323] Bluetooth: hci1: command tx timeout [ 3082.300144][ T2323] Bluetooth: hci2: command tx timeout [ 3084.374688][ T3452] Bluetooth: hci1: command tx timeout [ 3084.382736][ T2323] Bluetooth: hci2: command tx timeout [ 3085.233367][ T2599] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3085.310305][ T2599] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3085.644963][ T2599] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3085.667600][ T2599] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3086.464392][ T2323] Bluetooth: hci1: command tx timeout [ 3086.600593][ T2599] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3086.619008][ T2599] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3086.801827][ T2323] Bluetooth: hci2: command tx timeout [ 3090.595921][ T2446] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3093.368166][ T2599] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3093.423872][ T2599] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3094.381776][ T3447] chnl_net:caif_netlink_parms(): no params data found [ 3094.403784][ T9] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 3094.563791][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 3094.579996][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3094.593368][ T9] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 3094.616538][ T9] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 3094.632055][ T9] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 3094.641798][ T9] usb 10-1: Product: syz [ 3094.651981][ T9] usb 10-1: Manufacturer: syz [ 3094.658715][ T9] usb 10-1: SerialNumber: syz [ 3094.763205][ T3443] chnl_net:caif_netlink_parms(): no params data found [ 3095.166425][ T3509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3095.341000][ T3509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3095.381291][ T3516] 9pnet_fd: Insufficient options for proto=fd [ 3095.398557][ T3509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3095.419991][ T3509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3099.300533][ T10] usb 10-1: USB disconnect, device number 27 [ 3101.118023][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 3101.479334][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 3101.516524][ T3447] bridge_slave_0: entered allmulticast mode [ 3102.918765][ T3447] bridge_slave_0: entered promiscuous mode [ 3103.714028][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 3103.722745][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 3103.761273][ T3447] bridge_slave_1: entered allmulticast mode [ 3104.744475][ T3447] bridge_slave_1: entered promiscuous mode [ 3105.627008][ T3562] No buffer was provided with the request [ 3107.319019][ T3447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3108.748191][ T3566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7827'. [ 3110.291371][ T3447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3111.502339][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 3111.526041][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state [ 3111.557066][ T3443] bridge_slave_0: entered allmulticast mode [ 3111.598855][ T3443] bridge_slave_0: entered promiscuous mode [ 3113.028386][ T3447] team0: Port device team_slave_0 added [ 3113.152383][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 3113.178225][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state [ 3114.324716][ T3443] bridge_slave_1: entered allmulticast mode [ 3114.472095][ T3443] bridge_slave_1: entered promiscuous mode [ 3114.571603][ T3447] team0: Port device team_slave_1 added [ 3116.384246][ T3587] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3117.890832][ T3443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3117.940822][ T2599] bridge_slave_1: left allmulticast mode [ 3117.952915][ T2599] bridge_slave_1: left promiscuous mode [ 3117.983857][ T2599] bridge0: port 2(bridge_slave_1) entered disabled state [ 3118.073050][ T2599] bridge_slave_0: left allmulticast mode [ 3118.106510][ T2599] bridge_slave_0: left promiscuous mode [ 3118.112450][ T2599] bridge0: port 1(bridge_slave_0) entered disabled state [ 3118.249245][ T3590] No buffer was provided with the request [ 3124.872299][ T3608] usb usb8: usbfs: process 3608 (syz.2.7836) did not claim interface 0 before use [ 3125.233428][ T3452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3125.260096][ T3452] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3125.270146][ T3452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3125.278925][ T3452] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3125.286968][ T3452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3125.348837][ T3452] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3125.361242][ T3452] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3125.370918][ T3452] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3125.379757][ T3452] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3125.392627][ T3452] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3127.334228][ T3452] Bluetooth: hci0: command tx timeout [ 3127.583661][ T3452] Bluetooth: hci6: command tx timeout [ 3128.973356][ T2599]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 3128.992331][ T2599]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 3129.013425][ T2599]  (unregistering): Released all slaves [ 3129.069152][ T3447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3129.132742][ T3447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3129.220514][ T3447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3129.268871][ T2599] tipc: Left network mode [ 3129.296067][ T3443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3129.413985][ T3452] Bluetooth: hci0: command tx timeout [ 3129.678700][ T3452] Bluetooth: hci6: command tx timeout [ 3131.512738][ T3452] Bluetooth: hci0: command tx timeout [ 3131.741493][ T3452] Bluetooth: hci6: command tx timeout [ 3133.582128][ T3452] Bluetooth: hci0: command tx timeout [ 3133.813991][ T3452] Bluetooth: hci6: command tx timeout [ 3134.463406][ T3630] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7839'. [ 3135.594044][ T2599] hsr_slave_0: left promiscuous mode [ 3135.873991][ T2599] hsr_slave_1: left promiscuous mode [ 3135.880298][ T2599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3136.141187][ T2599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3136.227826][ T2599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3136.263636][ T2599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3137.153680][ T2599] veth1_macvtap: left promiscuous mode [ 3137.200202][ T3642] No buffer was provided with the request [ 3137.853845][ T2599] veth0_macvtap: left promiscuous mode [ 3137.859680][ T2599] veth1_vlan: left promiscuous mode [ 3137.943774][ T2599] veth0_vlan: left promiscuous mode [ 3143.355618][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.362591][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3146.854258][ T2323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3146.867109][ T2323] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3146.878993][ T2323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3146.887710][ T2323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3146.896186][ T2323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3147.611496][ T3656] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3148.944524][ T2323] Bluetooth: hci1: command tx timeout [ 3151.030914][ T2323] Bluetooth: hci1: command tx timeout [ 3151.178430][ T2599] team0 (unregistering): Port device team_slave_1 removed [ 3151.321234][ T2599] team0 (unregistering): Port device team_slave_0 removed [ 3153.110340][ T2323] Bluetooth: hci1: command tx timeout [ 3153.429951][ T3671] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7847'. [ 3155.174101][ T2323] Bluetooth: hci1: command tx timeout [ 3156.168293][ T3692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7852'. [ 3159.371371][ T3610] chnl_net:caif_netlink_parms(): no params data found [ 3159.887913][ T3609] chnl_net:caif_netlink_parms(): no params data found [ 3160.334968][ T3700] No buffer was provided with the request [ 3166.768170][ T2599] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3167.653718][ T2599] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3167.763259][ T3644] chnl_net:caif_netlink_parms(): no params data found [ 3168.516341][ T2599] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3168.528009][ T2599] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3168.875236][ T3729] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3169.492962][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state [ 3169.502476][ T3610] bridge0: port 1(bridge_slave_0) entered disabled state [ 3169.510181][ T3610] bridge_slave_0: entered allmulticast mode [ 3169.522266][ T3610] bridge_slave_0: entered promiscuous mode [ 3169.570726][ T2599] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3169.587321][ T2599] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3169.648821][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 3169.657393][ T3610] bridge0: port 2(bridge_slave_1) entered disabled state [ 3169.669948][ T3610] bridge_slave_1: entered allmulticast mode [ 3169.681095][ T3610] bridge_slave_1: entered promiscuous mode [ 3169.759958][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 3169.768059][ T3609] bridge0: port 1(bridge_slave_0) entered disabled state [ 3169.788110][ T3609] bridge_slave_0: entered allmulticast mode [ 3169.852361][ T3609] bridge_slave_0: entered promiscuous mode [ 3169.879631][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 3169.887853][ T3609] bridge0: port 2(bridge_slave_1) entered disabled state [ 3169.904947][ T3609] bridge_slave_1: entered allmulticast mode [ 3169.936948][ T3609] bridge_slave_1: entered promiscuous mode [ 3170.422732][ T2599] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3170.486468][ T2599] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3171.833396][ T3610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3172.006624][ T3610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3172.027205][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state [ 3172.039731][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state [ 3172.051056][ T3644] bridge_slave_0: entered allmulticast mode [ 3172.059540][ T3644] bridge_slave_0: entered promiscuous mode [ 3172.076563][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state [ 3172.084308][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state [ 3172.092123][ T3644] bridge_slave_1: entered allmulticast mode [ 3172.104892][ T3644] bridge_slave_1: entered promiscuous mode [ 3172.127125][ T3609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3172.180245][ T3609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3172.323418][ T3610] team0: Port device team_slave_0 added [ 3172.449568][ T3610] team0: Port device team_slave_1 added [ 3172.520762][ T3644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3172.541930][ T3609] team0: Port device team_slave_0 added [ 3172.695505][ T3746] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7861'. [ 3173.109395][ T3609] team0: Port device team_slave_1 added [ 3173.172568][ T3644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3173.435226][ T3644] team0: Port device team_slave_0 added [ 3173.491473][ T3610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3173.500169][ T3610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3173.526210][ C0] vkms_vblank_simulate: vblank timer overrun [ 3173.595855][ T3610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3173.734485][ T3644] team0: Port device team_slave_1 added [ 3173.790409][ T3609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3173.817031][ T3609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3173.843242][ C0] vkms_vblank_simulate: vblank timer overrun [ 3173.933125][ T3609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3174.015484][ T3610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3174.041446][ T3610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3174.082202][ T3610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3174.307928][ T3609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3174.325066][ T3609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3174.396900][ T3609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3174.467146][ T3753] No buffer was provided with the request [ 3174.722332][ T2599] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3174.772725][ T2599] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3175.083053][ T3644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3175.092770][ T3644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3175.141806][ T3644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3175.241673][ T2599] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3175.259000][ T2599] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3175.293014][ T3610] hsr_slave_0: entered promiscuous mode [ 3175.306874][ T3610] hsr_slave_1: entered promiscuous mode [ 3175.352675][ T3644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3175.363638][ T3644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3175.425655][ T3644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3176.003919][ T3609] hsr_slave_0: entered promiscuous mode [ 3176.016589][ T3609] hsr_slave_1: entered promiscuous mode [ 3176.023264][ T3609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3176.037644][ T3609] Cannot create hsr debugfs directory [ 3176.145209][ T2599] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3176.162764][ T2599] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3176.403716][ T3762] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3176.501084][ T3762] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3176.512778][ T3762] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3176.523535][ T3762] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3176.531437][ T3762] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 3176.713831][ T2599] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3176.730719][ T2599] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3177.494004][ T3644] hsr_slave_0: entered promiscuous mode [ 3177.501002][ T3644] hsr_slave_1: entered promiscuous mode [ 3177.519629][ T3644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3177.538676][ T3644] Cannot create hsr debugfs directory [ 3177.607562][ T3772] bad cache= option: no%e [ 3177.607562][ T3772] [ 3177.614799][ T3772] CIFS: VFS: bad cache= option: no%e [ 3177.751053][ T3774] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3178.860119][ T2599] bridge_slave_1: left allmulticast mode [ 3178.882163][ T2599] bridge_slave_1: left promiscuous mode [ 3178.895511][ T2599] bridge0: port 2(bridge_slave_1) entered disabled state [ 3178.944837][ T2599] bridge_slave_0: left allmulticast mode [ 3178.964604][ T2599] bridge_slave_0: left promiscuous mode [ 3178.970431][ T2599] bridge0: port 1(bridge_slave_0) entered disabled state [ 3178.996750][ T2599] bridge_slave_1: left allmulticast mode [ 3179.106293][ T2599] bridge_slave_1: left promiscuous mode [ 3179.112148][ T2599] bridge0: port 2(bridge_slave_1) entered disabled state [ 3179.159804][ T2599] bridge_slave_0: left allmulticast mode [ 3179.165564][ T2599] bridge_slave_0: left promiscuous mode [ 3179.183968][ T2599] bridge0: port 1(bridge_slave_0) entered disabled state [ 3179.194111][ T2599] bridge_slave_1: left allmulticast mode [ 3179.199964][ T2599] bridge_slave_1: left promiscuous mode [ 3179.214750][ T2599] bridge0: port 2(bridge_slave_1) entered disabled state [ 3179.235528][ T2599] bridge_slave_0: left allmulticast mode [ 3179.241214][ T2599] bridge_slave_0: left promiscuous mode [ 3179.254525][ T2599] bridge0: port 1(bridge_slave_0) entered disabled state [ 3179.283384][ T2599] bridge_slave_1: left allmulticast mode [ 3179.343569][ T2599] bridge_slave_1: left promiscuous mode [ 3179.361572][ T2599] bridge0: port 2(bridge_slave_1) entered disabled state [ 3179.412752][ T2599] bridge_slave_0: left allmulticast mode [ 3179.425033][ T2599] bridge_slave_0: left promiscuous mode [ 3179.430861][ T2599] bridge0: port 1(bridge_slave_0) entered disabled state [ 3179.852810][ T30] audit: type=1326 audit(1752573346.366:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3780 comm="syz.9.7870" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a42f8e929 code=0x0 [ 3180.804347][ T3452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3180.817782][ T3452] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3180.852375][ T3452] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3180.866087][ T3452] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3180.892572][ T3452] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3181.124556][ T2323] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3181.134873][ T2323] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3181.143582][ T2323] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3181.153154][ T2323] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3181.161074][ T2323] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3183.369573][ T3452] Bluetooth: hci2: command tx timeout [ 3183.370940][ T2323] Bluetooth: hci4: command tx timeout [ 3183.666224][ T2599]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 3183.814680][ T2599]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 3183.865679][ T2599]  (unregistering): Released all slaves [ 3184.017938][ T3817] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7875'. [ 3184.930306][ T2599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3184.948325][ T2599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3184.961683][ T2599] bond0 (unregistering): Released all slaves [ 3185.038928][ T2599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3185.049803][ T2599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3185.060933][ T2599] bond0 (unregistering): Released all slaves [ 3185.424302][ T2323] Bluetooth: hci2: command tx timeout [ 3185.493988][ T2323] Bluetooth: hci4: command tx timeout [ 3185.579916][ T2599]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 3185.590718][ T2599]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 3185.601769][ T2599]  (unregistering): Released all slaves [ 3185.697758][ T3810] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7874'. [ 3186.726470][ T3825] bad cache= option: no%e [ 3186.726470][ T3825] [ 3186.733038][ T3825] CIFS: VFS: bad cache= option: no%e [ 3187.881557][ T3452] Bluetooth: hci4: command tx timeout [ 3187.890313][ T2323] Bluetooth: hci2: command tx timeout [ 3188.853601][ T3839] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7880'. [ 3189.771318][ T43] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3190.028641][ T3452] Bluetooth: hci2: command tx timeout [ 3190.034329][ T2323] Bluetooth: hci4: command tx timeout [ 3190.054001][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 3190.164694][ T43] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 3190.294511][ T43] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3190.400084][ T43] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3190.400728][ T3794] chnl_net:caif_netlink_parms(): no params data found [ 3190.414105][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3190.427451][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3190.462685][ T43] usb 3-1: Product: syz [ 3190.475760][ T43] usb 3-1: Manufacturer: syz [ 3190.480601][ T43] usb 3-1: SerialNumber: syz [ 3190.545822][ T2599] hsr_slave_0: left promiscuous mode [ 3190.577939][ T2599] hsr_slave_1: left promiscuous mode [ 3190.594717][ T2599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3190.606300][ T2599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3190.622285][ T2599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3190.630378][ T2599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3190.650140][ T2599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3190.668902][ T2599] hsr_slave_0: left promiscuous mode [ 3190.677329][ T2599] hsr_slave_1: left promiscuous mode [ 3190.683832][ T2599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3190.691329][ T2599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3190.700080][ T2599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3190.707723][ T2599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3190.769067][ T2599] veth1_macvtap: left promiscuous mode [ 3190.779125][ T2599] veth0_macvtap: left promiscuous mode [ 3190.787554][ T2599] veth1_vlan: left promiscuous mode [ 3190.798272][ T2599] veth0_vlan: left promiscuous mode [ 3190.811623][ T2599] veth1_macvtap: left promiscuous mode [ 3190.823852][ T2599] veth0_macvtap: left promiscuous mode [ 3190.830595][ T2599] veth1_vlan: left promiscuous mode [ 3190.836310][ T2599] veth0_vlan: left promiscuous mode [ 3190.935672][ T43] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 3190.960730][ T43] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 3191.017243][ T43] usb 3-1: USB disconnect, device number 28 [ 3191.134692][ T3855] udevd[3855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3194.344535][ T2599] team0 (unregistering): Port device team_slave_1 removed [ 3194.444399][ T2599] team0 (unregistering): Port device team_slave_0 removed [ 3194.460075][ T3452] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3194.493774][ T3452] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3194.515190][ T3452] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3194.523063][ T3452] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3194.535061][ T3452] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3195.489359][ T2599] team0 (unregistering): Port device team_slave_1 removed [ 3195.530108][ T2599] team0 (unregistering): Port device team_slave_0 removed [ 3196.398483][ T2599] team0 (unregistering): Port device team_slave_1 removed [ 3196.469138][ T2599] team0 (unregistering): Port device team_slave_0 removed [ 3196.613668][ T3452] Bluetooth: hci6: command tx timeout [ 3197.581768][ T3792] chnl_net:caif_netlink_parms(): no params data found [ 3197.612486][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state [ 3197.622009][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 3198.081270][ T3794] bridge_slave_0: entered allmulticast mode [ 3198.089893][ T3794] bridge_slave_0: entered promiscuous mode [ 3198.101122][ T3794] bridge0: port 2(bridge_slave_1) entered blocking state [ 3198.108769][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 3198.116893][ T3794] bridge_slave_1: entered allmulticast mode [ 3198.201341][ T3794] bridge_slave_1: entered promiscuous mode [ 3198.293312][ T3883] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7888'. [ 3198.328669][ T3883] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7888'. [ 3198.547801][ T3794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3198.695274][ T3452] Bluetooth: hci6: command tx timeout [ 3199.236422][ T3794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3199.513075][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 3199.537449][ T3792] bridge0: port 1(bridge_slave_0) entered disabled state [ 3199.548147][ T3792] bridge_slave_0: entered allmulticast mode [ 3199.564245][ T3792] bridge_slave_0: entered promiscuous mode [ 3199.584474][ T3794] team0: Port device team_slave_0 added [ 3199.621269][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 3199.628670][ T3792] bridge0: port 2(bridge_slave_1) entered disabled state [ 3199.648193][ T3792] bridge_slave_1: entered allmulticast mode [ 3199.659585][ T3792] bridge_slave_1: entered promiscuous mode [ 3199.717691][ T3794] team0: Port device team_slave_1 added [ 3199.849280][ T3792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3199.932327][ T3794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3199.963553][ T3794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3199.990357][ T3794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3200.007812][ T3792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3200.065228][ T3794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3200.072221][ T3794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3200.108527][ T3794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3200.266446][ T3792] team0: Port device team_slave_0 added [ 3200.382221][ T3792] team0: Port device team_slave_1 added [ 3200.686040][ T3792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3200.693026][ T3792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3200.778183][ T3452] Bluetooth: hci6: command tx timeout [ 3200.858059][ T3792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3202.367861][ T3792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3202.375405][ T3792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3202.404942][ T3792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3202.428876][ T3794] hsr_slave_0: entered promiscuous mode [ 3202.499444][ T3794] hsr_slave_1: entered promiscuous mode [ 3202.508878][ T3794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3202.518163][ T3794] Cannot create hsr debugfs directory [ 3202.817010][ T3873] chnl_net:caif_netlink_parms(): no params data found [ 3202.878756][ T3452] Bluetooth: hci6: command tx timeout [ 3204.086379][ T3918] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3204.783865][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.790403][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.069896][ T3924] bad cache= option: no%e [ 3205.069896][ T3924] [ 3205.076669][ T3924] CIFS: VFS: bad cache= option: no%e [ 3205.949757][ T3792] hsr_slave_0: entered promiscuous mode [ 3206.054431][ T3792] hsr_slave_1: entered promiscuous mode [ 3206.074265][ T3792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3206.106344][ T3792] Cannot create hsr debugfs directory [ 3206.225900][ T3932] No buffer was provided with the request [ 3206.752045][ T3938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7900'. [ 3206.761735][ T3938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7900'. [ 3206.782060][ T3873] bridge0: port 1(bridge_slave_0) entered blocking state [ 3206.821861][ T3873] bridge0: port 1(bridge_slave_0) entered disabled state [ 3206.831729][ T3873] bridge_slave_0: entered allmulticast mode [ 3206.842588][ T3873] bridge_slave_0: entered promiscuous mode [ 3206.874625][ T3873] bridge0: port 2(bridge_slave_1) entered blocking state [ 3206.886285][ T3873] bridge0: port 2(bridge_slave_1) entered disabled state [ 3206.895186][ T3873] bridge_slave_1: entered allmulticast mode [ 3206.904387][ T3873] bridge_slave_1: entered promiscuous mode [ 3207.243178][ T3873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3207.889601][ T3873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3208.006658][ T3873] team0: Port device team_slave_0 added [ 3208.051058][ T3794] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3208.111689][ T2599] bridge_slave_1: left allmulticast mode [ 3208.122269][ T2599] bridge_slave_1: left promiscuous mode [ 3208.129958][ T2599] bridge0: port 2(bridge_slave_1) entered disabled state [ 3208.145052][ T2599] bridge_slave_0: left allmulticast mode [ 3208.150966][ T2599] bridge_slave_0: left promiscuous mode [ 3208.162976][ T2599] bridge0: port 1(bridge_slave_0) entered disabled state [ 3208.183734][ T2599] bridge_slave_1: left allmulticast mode [ 3208.189438][ T2599] bridge_slave_1: left promiscuous mode [ 3208.196041][ T2599] bridge0: port 2(bridge_slave_1) entered disabled state [ 3208.205877][ T2599] bridge_slave_0: left allmulticast mode [ 3208.211630][ T2599] bridge_slave_0: left promiscuous mode [ 3208.218850][ T2599] bridge0: port 1(bridge_slave_0) entered disabled state [ 3208.230876][ T2599] bridge_slave_1: left allmulticast mode [ 3208.236653][ T2599] bridge_slave_1: left promiscuous mode [ 3208.250823][ T2599] bridge0: port 2(bridge_slave_1) entered disabled state [ 3208.261821][ T2599] bridge_slave_0: left allmulticast mode [ 3208.272828][ T2599] bridge_slave_0: left promiscuous mode [ 3208.279886][ T2599] bridge0: port 1(bridge_slave_0) entered disabled state [ 3208.535439][ T3946] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7902'. [ 3209.034149][ T2599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3209.060267][ T2599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3209.078150][ T2599] bond0 (unregistering): Released all slaves [ 3209.378280][ T2599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3209.400127][ T2599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3209.412387][ T2599] bond0 (unregistering): Released all slaves [ 3210.263821][ T2599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3210.281041][ T2599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3210.292356][ T2599] bond0 (unregistering): Released all slaves [ 3210.308126][ T3873] team0: Port device team_slave_1 added [ 3210.339418][ T3794] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3210.448321][ T3873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3210.455700][ T3873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3210.492967][ T3873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3210.507790][ T3794] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3210.582933][ T3794] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3210.671558][ T3956] usb usb8: usbfs: process 3956 (syz.9.7904) did not claim interface 0 before use [ 3210.819166][ T3873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3210.831631][ T3873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3210.862655][ T3873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3210.911458][ T2599] hsr_slave_0: left promiscuous mode [ 3210.921716][ T2599] hsr_slave_1: left promiscuous mode [ 3210.929135][ T2599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3210.953268][ T2599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3211.125840][ T2599] hsr_slave_0: left promiscuous mode [ 3211.139533][ T2599] hsr_slave_1: left promiscuous mode [ 3211.145657][ T2599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3211.160419][ T2599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3211.313379][ T2599] hsr_slave_0: left promiscuous mode [ 3211.326238][ T2599] hsr_slave_1: left promiscuous mode [ 3211.914318][ T2599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3211.948586][ T2599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3212.541205][ T2599] team0 (unregistering): Port device team_slave_1 removed [ 3213.449895][ T2599] team0 (unregistering): Port device team_slave_0 removed [ 3214.343968][ T3976] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3214.357546][ T3976] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3214.365611][ T3976] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3214.374255][ T3976] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3214.382121][ T3976] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 3215.041956][ T2599] team0 (unregistering): Port device team_slave_1 removed [ 3215.121104][ T2599] team0 (unregistering): Port device team_slave_0 removed [ 3216.437088][ T2599] team0 (unregistering): Port device team_slave_1 removed [ 3216.514621][ T2599] team0 (unregistering): Port device team_slave_0 removed [ 3217.466303][ T3994] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3217.522211][ T3994] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3217.530293][ T3994] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3217.539438][ T3994] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3217.547981][ T3994] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 3217.827729][ T3873] hsr_slave_0: entered promiscuous mode [ 3217.834402][ T3873] hsr_slave_1: entered promiscuous mode [ 3217.909722][ T3792] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3217.959855][ T3792] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3218.028812][ T3792] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3218.075893][ T3997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7912'. [ 3218.085147][ T3997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7912'. [ 3218.137246][ T3792] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3219.052397][ T3794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3219.108927][ T3873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3219.143062][ T3873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3219.155164][ T3873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3219.199394][ T3873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3219.221785][ T3794] 8021q: adding VLAN 0 to HW filter on device team0 [ 3219.264975][ T2177] bridge0: port 1(bridge_slave_0) entered blocking state [ 3219.272549][ T2177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3219.292195][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 3219.299467][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3219.379075][ T3792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3219.479868][ T3792] 8021q: adding VLAN 0 to HW filter on device team0 [ 3219.568178][T29106] bridge0: port 1(bridge_slave_0) entered blocking state [ 3219.575418][T29106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3219.647350][T29106] bridge0: port 2(bridge_slave_1) entered blocking state [ 3219.654691][T29106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3220.123240][ T3792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3220.323019][ T3873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3220.399641][ T3873] 8021q: adding VLAN 0 to HW filter on device team0 [ 3220.447662][T29115] bridge0: port 1(bridge_slave_0) entered blocking state [ 3220.454900][T29115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3220.485480][T29115] bridge0: port 2(bridge_slave_1) entered blocking state [ 3220.492728][T29115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3221.240901][ T3873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3221.666770][ T3792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3221.701328][ T3794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3223.718714][ T3794] veth0_vlan: entered promiscuous mode [ 3223.786738][ T4066] No buffer was provided with the request [ 3223.921191][ T3873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3224.008777][ T3794] veth1_vlan: entered promiscuous mode [ 3224.305477][ T3792] veth0_vlan: entered promiscuous mode [ 3224.313046][ T3873] veth0_vlan: entered promiscuous mode [ 3224.607001][ T3873] veth1_vlan: entered promiscuous mode [ 3224.614183][ T3792] veth1_vlan: entered promiscuous mode [ 3224.838841][ T3794] veth0_macvtap: entered promiscuous mode [ 3224.867623][ T3794] veth1_macvtap: entered promiscuous mode [ 3224.965635][ T3873] veth0_macvtap: entered promiscuous mode [ 3224.984839][ T3794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3225.002262][ T3792] veth0_macvtap: entered promiscuous mode [ 3225.084518][ T3873] veth1_macvtap: entered promiscuous mode [ 3225.096073][ T3792] veth1_macvtap: entered promiscuous mode [ 3225.107681][ T3794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3225.138741][ T3794] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3225.153653][ T3794] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3225.162535][ T3794] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3225.173876][ T3794] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3225.743625][ T4078] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7922'. [ 3225.775569][ T3873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3225.812707][ T3792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3225.948820][ T3873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3225.966573][ T3792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3226.402459][ T3873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3226.415510][ T3873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3226.463019][ T3873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3226.472735][ T3873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3226.531864][ T3792] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3226.543293][ T3792] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3226.575405][ T3792] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3226.614124][ T3792] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3226.828512][T29106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3226.855830][T29106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3226.961181][ T4093] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3227.631322][T29106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3227.657698][T29106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3227.889757][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3227.987636][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3228.003409][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3228.554330][ T2446] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3228.597056][ T4051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3228.685346][ T4100] netlink: 'syz.6.7794': attribute type 4 has an invalid length. [ 3228.693110][ T4100] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7794'. [ 3228.715348][ T4051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3228.736831][ T4100] : renamed from bond0 (while UP) [ 3228.779571][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3228.794271][ T2446] usb 3-1: Using ep0 maxpacket: 8 [ 3228.797258][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3228.804020][ T2446] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3228.919202][ T2446] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 3229.190586][ T2446] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 3229.562535][ T2446] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 3229.579626][ T2446] usb 3-1: Product: syz [ 3229.585401][ T2446] usb 3-1: Manufacturer: syz [ 3229.590177][T26132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3229.601036][ T2446] usb 3-1: SerialNumber: syz [ 3229.631565][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3229.643690][T26132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3229.850851][ T4113] No buffer was provided with the request [ 3229.975830][ T4096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3229.989729][ T4096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3230.075254][ T4096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3230.101921][ T4096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3231.702249][ T4136] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7931'. [ 3232.926387][ T2446] usb 3-1: USB disconnect, device number 29 [ 3233.649091][ T4147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7934'. [ 3235.563922][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3236.626597][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3236.899347][ T4172] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 3236.908899][ T4172] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 3237.863071][ T4182] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7942'. [ 3238.366664][ T4184] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7943'. [ 3239.217191][ T4191] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3239.384578][ T2446] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3239.440152][ T4191] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3239.448221][ T4191] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3239.459613][ T4191] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3239.467890][ T4191] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 3239.764661][ T4193] No buffer was provided with the request [ 3239.873564][ T2446] usb 3-1: Using ep0 maxpacket: 8 [ 3240.128124][ T2446] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3240.168906][ T2446] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 3240.235792][ T2446] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 3240.327969][ T2446] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 3240.359030][ T2446] usb 3-1: Product: syz [ 3240.363367][ T2446] usb 3-1: Manufacturer: syz [ 3240.368905][ T2446] usb 3-1: SerialNumber: syz [ 3240.614705][ T4186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3240.647119][ T4186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3240.661141][ T4186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3240.697876][ T4186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3240.808512][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3242.113116][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3243.016075][ T43] usb 3-1: USB disconnect, device number 30 [ 3243.146288][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3243.845204][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3244.143954][ T43] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 3244.171467][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3245.193855][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3245.201990][ T43] usb 3-1: Product: syz [ 3245.245350][ T43] usb 3-1: Manufacturer: syz [ 3245.250009][ T43] usb 3-1: SerialNumber: syz [ 3245.257447][ T43] usb 3-1: config 0 descriptor?? [ 3245.265967][ T43] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 3246.041450][ T43] gspca_sq905c: sq905c_read: usb_control_msg failed (-32) [ 3246.076582][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3246.102771][ T43] sq905c 3-1:0.0: Reading version command failed [ 3246.303667][ T43] sq905c 3-1:0.0: probe with driver sq905c failed with error -32 [ 3246.355420][ T43] usb 3-1: USB disconnect, device number 31 [ 3246.777810][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3246.815170][ T4259] netlink: 'syz.9.7964': attribute type 4 has an invalid length. [ 3246.822970][ T4259] netlink: 152 bytes leftover after parsing attributes in process `syz.9.7964'. [ 3247.293568][ T43] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 3247.613517][ T43] usb 10-1: Using ep0 maxpacket: 8 [ 3248.186008][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3248.196513][ T43] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 3248.231834][ T43] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 3248.245573][ T43] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 3248.255694][ T43] usb 10-1: Product: syz [ 3248.259979][ T43] usb 10-1: Manufacturer: syz [ 3248.264917][ T43] usb 10-1: SerialNumber: syz [ 3248.352733][ T4273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7969'. [ 3248.362091][ T4273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7969'. [ 3248.511414][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3248.580114][ T4264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3248.734870][ T4264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3248.943977][ T4279] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7971'. [ 3249.365837][ T4264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3249.924324][ T4264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3250.173849][ T43] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 3250.184851][ T4284] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3250.337278][ T43] usb 7-1: device descriptor read/64, error -71 [ 3250.713564][ T43] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 3250.875075][ T43] usb 7-1: device descriptor read/64, error -71 [ 3250.987606][ T43] usb usb7-port1: attempt power cycle [ 3251.958330][ T4017] usb 10-1: USB disconnect, device number 28 [ 3252.113136][ T43] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 3252.274576][ T4295] overlayfs: failed to resolve './file0': -2 [ 3252.424012][ T43] usb 7-1: device not accepting address 23, error -71 [ 3253.609523][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3255.501155][ T4328] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 3255.527709][ T4328] CIFS mount error: No usable UNC path provided in device string! [ 3255.527709][ T4328] [ 3255.538082][ T4328] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 3257.607216][ T4336] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7984'. [ 3259.422612][ T4348] usb usb8: usbfs: process 4348 (syz.0.7987) did not claim interface 0 before use [ 3260.428340][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3260.690659][ T4363] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3261.901456][ T30] audit: type=1326 audit(1752573428.206:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4355 comm="syz.6.7993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3873d8e929 code=0x0 [ 3261.922580][ C1] vkms_vblank_simulate: vblank timer overrun [ 3262.688504][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3263.409268][ T4378] CIFS mount error: No usable UNC path provided in device string! [ 3263.409268][ T4378] [ 3263.419529][ T4378] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 3264.032830][ T4380] No buffer was provided with the request [ 3265.237048][ T4389] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3265.264503][ T4388] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3265.274582][ T4388] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3265.284794][ T4388] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3265.293844][ T4388] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3265.390057][ T4393] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3265.398181][ T4393] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 3265.409012][ T4393] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3265.417418][ T4393] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 3265.806369][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3266.331669][ T4407] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8004'. [ 3266.346825][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.355426][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.723543][ T2446] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 3267.095089][ T2446] usb 7-1: device descriptor read/64, error -71 [ 3267.929248][ T4419] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8006'. [ 3268.749434][ T2446] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 3268.833673][ T4017] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3268.903546][ T2446] usb 7-1: device descriptor read/64, error -71 [ 3269.014126][ T4017] usb 3-1: device descriptor read/64, error -71 [ 3269.025176][ T2446] usb usb7-port1: attempt power cycle [ 3269.563732][ T4017] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3269.612277][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3269.720908][ T4429] CIFS mount error: No usable UNC path provided in device string! [ 3269.720908][ T4429] [ 3269.731140][ T4429] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 3270.243608][ T4017] usb 3-1: device descriptor read/64, error -71 [ 3270.363981][ T4017] usb usb3-port1: attempt power cycle [ 3270.433994][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3270.882991][ T4017] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3270.926389][ T4017] usb 3-1: device descriptor read/8, error -71 [ 3271.054313][ T4436] No buffer was provided with the request [ 3271.263495][ T4017] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3271.337610][ T4017] usb 3-1: device descriptor read/8, error -71 [ 3271.543940][ T4017] usb usb3-port1: unable to enumerate USB device [ 3271.704108][ T4443] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 3271.718140][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8013'. [ 3272.254199][ T3452] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 3272.561850][ T4447] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3272.570594][ T4447] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 3272.656677][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3272.695123][ T4447] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 3272.723993][ T4447] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 3272.818659][ T4461] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3273.438542][ T4447] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3273.468209][ T4447] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 3273.676734][ T4447] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 3273.707172][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3273.747744][ T4447] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3273.834222][ T4447] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 3273.867607][ T4447] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 3274.057646][ T4473] fuse: Bad value for 'fd' [ 3274.453549][ T2323] Bluetooth: hci3: command 0x0406 tx timeout [ 3274.483589][ T30] audit: type=1326 audit(1752573440.596:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4467 comm="syz.7.8021" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f906998e929 code=0x0 [ 3274.694010][ T4447] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3274.912221][ T4447] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 3275.019965][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3275.032571][ T4447] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 3275.493797][ T2323] Bluetooth: hci2: command 0x0c1a tx timeout [ 3275.576248][ T4477] netlink: 'syz.7.8024': attribute type 4 has an invalid length. [ 3275.584626][ T4477] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8024'. [ 3275.694340][ T4477] : renamed from bond0 (while UP) [ 3275.813792][ T2323] Bluetooth: hci4: command 0x0c1a tx timeout [ 3276.536571][ T2323] Bluetooth: hci3: command 0x0406 tx timeout [ 3276.773927][ T2323] Bluetooth: hci6: command 0x0c1a tx timeout [ 3277.824698][ T2323] Bluetooth: hci2: command 0x0c1a tx timeout [ 3278.328399][ T3452] Bluetooth: hci4: command 0x0c1a tx timeout [ 3278.971771][ T3452] Bluetooth: hci3: command 0x0406 tx timeout [ 3278.978396][ T3452] Bluetooth: hci6: command 0x0c1a tx timeout [ 3279.850878][ T4504] No buffer was provided with the request [ 3279.926142][ T2323] Bluetooth: hci2: command 0x0c1a tx timeout [ 3280.299421][ T4509] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3280.373574][ T2323] Bluetooth: hci4: command 0x0c1a tx timeout [ 3280.376987][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3280.686926][ T4517] overlayfs: failed to resolve './file1': -2 [ 3281.023806][ T3452] Bluetooth: hci3: command 0x0406 tx timeout [ 3281.030381][ T2323] Bluetooth: hci6: command 0x0c1a tx timeout [ 3282.596447][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3283.459266][ T4535] usb usb8: usbfs: process 4535 (syz.6.8039) did not claim interface 0 before use [ 3284.240494][ T4551] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3285.278803][ T4559] overlayfs: failed to resolve './file1': -2 [ 3286.100837][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3286.318468][ T4566] No buffer was provided with the request [ 3289.237551][ T30] audit: type=1326 audit(1752573455.756:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4587 comm="syz.2.8055" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51d498e929 code=0x0 [ 3290.428561][ T30] audit: type=1326 audit(1752573456.946:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4595 comm="syz.9.8057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a42f8e929 code=0x0 [ 3291.618067][ T4615] No buffer was provided with the request [ 3291.864119][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3292.635978][ T4627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8063'. [ 3292.803198][ T4629] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8064'. [ 3293.481797][ T4632] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3294.213858][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3294.774125][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 3295.114886][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3295.183720][ T9] usb 1-1: device descriptor read/64, error -71 [ 3295.310899][ T4653] No buffer was provided with the request [ 3295.876446][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 3296.479326][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3296.504050][ T4656] binder: BINDER_SET_CONTEXT_MGR already set [ 3296.510303][ T4656] binder: 4655:4656 ioctl 4018620d 200000000040 returned -16 [ 3296.622591][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3296.637186][ T9] usb 1-1: device descriptor read/64, error -71 [ 3296.781728][ T9] usb usb1-port1: attempt power cycle [ 3297.673682][ T4670] No buffer was provided with the request [ 3298.168460][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3298.484572][ T4683] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3298.977848][T29809] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 3299.201138][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3299.219811][T29809] usb 10-1: Using ep0 maxpacket: 8 [ 3299.237203][ T4687] netlink: 'syz.2.8086': attribute type 4 has an invalid length. [ 3299.245045][ T4687] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8086'. [ 3299.439632][T29809] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3299.568515][T29809] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 3299.581527][T29809] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 3299.596921][T29809] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 3299.607220][T29809] usb 10-1: Product: syz [ 3299.613091][T29809] usb 10-1: Manufacturer: syz [ 3299.618457][T29809] usb 10-1: SerialNumber: syz [ 3299.842332][ T4674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3299.897538][ T4674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3299.977191][ T4674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3299.995367][ T4674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3301.609245][T29809] usb 10-1: USB disconnect, device number 29 [ 3302.631543][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3302.992259][ T4719] netlink: 'syz.2.8098': attribute type 4 has an invalid length. [ 3303.000114][ T4719] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8098'. [ 3303.204068][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3303.605639][ T4736] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8102'. [ 3304.153660][T29809] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 3304.302394][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3304.323492][T29809] usb 10-1: Using ep0 maxpacket: 8 [ 3304.342061][T29809] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3304.401397][T29809] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 3305.123715][T29809] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 3305.273526][T29809] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 3305.318284][T29809] usb 10-1: Product: syz [ 3305.332429][T29809] usb 10-1: Manufacturer: syz [ 3305.372774][T29809] usb 10-1: SerialNumber: syz [ 3305.660215][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3305.698881][ T4735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3305.716501][ T4735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3305.735858][ T4735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3305.745019][ T4735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3305.862141][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3307.297160][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3307.330970][ T9] usb 10-1: USB disconnect, device number 30 [ 3307.706821][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3307.831911][ T4768] netlink: 'syz.7.8112': attribute type 4 has an invalid length. [ 3307.842261][ T4768] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8112'. [ 3308.433541][ T9] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 3308.693627][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 3308.702248][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3309.273545][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3309.440297][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3309.476408][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3309.510560][ T9] usb 10-1: Product: syz [ 3309.543736][ T9] usb 10-1: Manufacturer: syz [ 3309.582373][ T4787] usb usb8: usbfs: process 4787 (syz.7.8117) did not claim interface 0 before use [ 3309.619947][ T9] usb 10-1: SerialNumber: syz [ 3309.766386][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3310.268380][ T9] usb 10-1: 0:2 : does not exist [ 3310.410776][ T9] usb 10-1: USB disconnect, device number 31 [ 3310.907626][ T4090] udevd[4090]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3312.034928][ T4807] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8123'. [ 3313.334471][T22106] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 3313.693513][T22106] usb 10-1: Using ep0 maxpacket: 8 [ 3313.836179][ T4819] netlink: 'syz.0.8127': attribute type 4 has an invalid length. [ 3313.844379][ T4819] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8127'. [ 3313.885542][ T4819] : renamed from bond0 (while UP) [ 3313.923938][T22106] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3313.965508][T22106] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 3314.041544][T22106] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 3314.057564][T22106] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 3314.085294][T22106] usb 10-1: Product: syz [ 3314.089713][T22106] usb 10-1: Manufacturer: syz [ 3314.101589][T22106] usb 10-1: SerialNumber: syz [ 3314.426237][ T4809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3314.446415][ T4809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3315.457536][ T4809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3315.494108][ T4809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3317.009533][ T4847] bad cache= option: no%e [ 3317.009533][ T4847] [ 3317.016280][ T4847] CIFS: VFS: bad cache= option: no%e [ 3317.656472][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3317.770088][ T4849] No buffer was provided with the request [ 3318.154684][ T3471] usb 10-1: USB disconnect, device number 32 [ 3318.588339][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3318.711626][ T4862] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3320.750707][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3321.213041][ T4893] No buffer was provided with the request [ 3322.637688][ T4900] bad cache= option: no%e [ 3322.637688][ T4900] [ 3322.644354][ T4900] CIFS: VFS: bad cache= option: no%e [ 3323.641614][ T4907] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3324.343329][ T4909] usb usb8: usbfs: process 4909 (syz.9.8146) did not claim interface 0 before use [ 3325.214167][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 3325.246379][ T4915] No buffer was provided with the request [ 3325.414573][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3326.055432][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 3326.083774][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3326.094019][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 3326.114406][ T9] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 3326.124046][ T9] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 3326.132196][ T9] usb 1-1: Product: syz [ 3326.155971][ T9] usb 1-1: Manufacturer: syz [ 3326.193930][ T9] usb 1-1: SerialNumber: syz [ 3326.485584][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3326.506184][ T4912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3326.663644][ T4912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3326.679501][ T4912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3326.783816][ T4912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3326.800482][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3327.403499][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 3327.892168][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.904289][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.184742][ T10] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 3328.243479][ T9] usb 7-1: device descriptor read/64, error -71 [ 3328.357140][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 3328.366269][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3328.382587][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3328.400629][ T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3328.412113][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3328.428961][ T10] usb 10-1: Product: syz [ 3328.459039][ T10] usb 10-1: Manufacturer: syz [ 3328.474997][T29809] usb 1-1: USB disconnect, device number 57 [ 3328.487822][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 3328.507742][ T10] usb 10-1: SerialNumber: syz [ 3328.710772][ T9] usb 7-1: device descriptor read/64, error -71 [ 3328.896870][ T9] usb usb7-port1: attempt power cycle [ 3329.516505][ C0] raw-gadget.4 gadget.9: ignoring, device is not running [ 3329.562198][ T10] usb 10-1: skipping empty audio interface (v1) [ 3329.586795][ T10] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3329.699688][ T10] usb 10-1: USB disconnect, device number 33 [ 3329.717011][ T4090] udevd[4090]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3329.743485][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 3330.263530][ T9] usb 7-1: device descriptor read/8, error -71 [ 3330.424699][ T4959] netlink: 'syz.9.8161': attribute type 10 has an invalid length. [ 3330.429421][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3330.556020][ T4959] 8021q: adding VLAN 0 to HW filter on device team0 [ 3331.775252][ T30] audit: type=1326 audit(1752573497.906:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4960 comm="syz.6.8162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3873d8e929 code=0x0 [ 3331.809465][ T4959] : (slave team0): Enslaving as an active interface with an up link [ 3331.940188][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3332.282343][ T4977] No buffer was provided with the request [ 3333.223828][ T9] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 3333.261537][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3333.743765][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 3333.778749][ T9] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 3333.803577][ T9] usb 10-1: config 0 has no interface number 0 [ 3333.863740][ T9] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3333.878520][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3333.906224][ T9] usb 10-1: Product: syz [ 3333.923112][ T9] usb 10-1: Manufacturer: syz [ 3333.931122][ T9] usb 10-1: SerialNumber: syz [ 3333.954944][ T9] usb 10-1: config 0 descriptor?? [ 3333.976739][ T9] smsc95xx v2.0.0 [ 3334.122676][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3334.265748][ T4994] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3334.272099][ T4994] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 3334.280827][ T4994] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3334.288990][ T4994] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3334.295938][ T4994] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 3334.307048][ T4994] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3334.315508][ T4994] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 3334.549788][T22106] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 3334.558620][ T9] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3334.574653][ T9] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3334.585465][ T9] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 3334.597102][ T9] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 3334.667604][ T5001] bad cache= option: no%e [ 3334.667604][ T5001] [ 3334.674258][ T5001] CIFS: VFS: bad cache= option: no%e [ 3335.160733][ T9] usb 10-1: USB disconnect, device number 34 [ 3335.323620][T22106] usb 7-1: Using ep0 maxpacket: 16 [ 3335.332263][T22106] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3335.349142][T22106] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3335.368017][T22106] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3335.510914][T22106] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3335.519486][T22106] usb 7-1: Product: syz [ 3335.529885][T22106] usb 7-1: Manufacturer: syz [ 3335.535115][T22106] usb 7-1: SerialNumber: syz [ 3336.303518][ T2323] Bluetooth: hci4: command 0x0c1a tx timeout [ 3336.303760][ T3446] Bluetooth: hci3: command 0x0406 tx timeout [ 3336.315787][ T3452] Bluetooth: hci2: command 0x0c1a tx timeout [ 3336.374253][ T3446] Bluetooth: hci6: command 0x0c1a tx timeout [ 3336.382001][ T5011] No buffer was provided with the request [ 3336.479473][ T5013] overlayfs: failed to clone upperpath [ 3337.326614][T22106] usb 7-1: skipping empty audio interface (v1) [ 3337.711665][T22106] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3337.755045][T22106] usb 7-1: USB disconnect, device number 32 [ 3338.376303][ T3446] Bluetooth: hci3: command 0x0406 tx timeout [ 3338.382396][ T3446] Bluetooth: hci4: command 0x0c1a tx timeout [ 3338.453527][ T3446] Bluetooth: hci6: command 0x0c1a tx timeout [ 3338.510151][ T4090] udevd[4090]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3339.385410][ T5033] No buffer was provided with the request [ 3339.818085][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3340.321314][T29809] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 3340.933799][T29809] usb 7-1: Using ep0 maxpacket: 8 [ 3340.950744][T29809] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3340.973750][T29809] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 3341.049641][T29809] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 3341.062485][T29809] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 3341.084236][T29809] usb 7-1: Product: syz [ 3341.088510][T29809] usb 7-1: Manufacturer: syz [ 3341.093101][T29809] usb 7-1: SerialNumber: syz [ 3341.448363][ T5040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3341.780635][ T5040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3341.791439][ T5040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3341.800472][ T5040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3343.473522][ T10] usb 7-1: USB disconnect, device number 33 [ 3344.427726][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3345.837164][ T5080] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3345.977717][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3348.698425][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3349.034631][ T5103] overlayfs: failed to resolve './file0': -2 [ 3351.316843][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3352.360427][ T5128] usb usb8: usbfs: process 5128 (syz.0.8203) did not claim interface 0 before use [ 3354.598523][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3355.654292][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3356.493010][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3357.725010][ T5190] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8219'. [ 3358.586485][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3358.891714][ T5197] vivid-000: disconnect [ 3358.896520][ T5196] vivid-000: reconnect [ 3359.448256][ T5199] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8224'. [ 3359.646304][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3359.883612][ T5208] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3359.890056][ T5208] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3359.897446][ T5208] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 3360.014417][ T5208] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3360.020567][ T5208] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3361.027262][ T5220] usb usb8: usbfs: process 5220 (syz.6.8226) did not claim interface 0 before use [ 3361.893565][ T3446] Bluetooth: hci3: command 0x0406 tx timeout [ 3361.973476][ T3446] Bluetooth: hci2: command 0x0c1a tx timeout [ 3362.053837][ T3452] Bluetooth: hci4: command 0x0c1a tx timeout [ 3362.059986][ T3446] Bluetooth: hci6: command 0x0c1a tx timeout [ 3362.563087][ T5235] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8233'. [ 3364.013890][ T5246] vivid-000: disconnect [ 3364.173546][ T3446] Bluetooth: hci2: command 0x0c1a tx timeout [ 3364.396987][ T5244] vivid-000: reconnect [ 3364.695210][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3365.015390][ T5256] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8238'. [ 3366.023906][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3366.053814][ T4017] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 3366.976288][ T4017] usb 1-1: device descriptor read/64, error -71 [ 3367.499071][ T5262] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8240'. [ 3367.545772][ T3452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3367.556174][ T3452] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3367.565872][ T3452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3367.623510][ T4017] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 3367.638578][ T3452] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3367.647235][ T3452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3367.663070][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3367.803462][ T4017] usb 1-1: device descriptor read/64, error -71 [ 3367.968512][ T2177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3368.023419][ T2177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3368.053837][ T4017] usb usb1-port1: attempt power cycle [ 3368.458835][ T5284] vivid-000: disconnect [ 3368.483330][ T2177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3368.874956][ T5281] vivid-000: reconnect [ 3368.883649][ T2177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3369.743504][ T3452] Bluetooth: hci0: command tx timeout [ 3370.860567][ T2177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3370.873212][ T2177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3371.530525][ T2177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3371.567139][ T2177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3371.572052][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3371.899188][ T5303] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8249'. [ 3372.338117][ T3452] Bluetooth: hci0: command tx timeout [ 3372.660486][ T5306] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3372.669412][ T5306] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3372.678369][ T5306] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3372.687239][ T5306] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3373.225172][ T5269] chnl_net:caif_netlink_parms(): no params data found [ 3373.289898][ T2177] bridge_slave_1: left allmulticast mode [ 3373.301632][ T2177] bridge_slave_1: left promiscuous mode [ 3373.918665][ T5302] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3373.928939][ T2177] bridge0: port 2(bridge_slave_1) entered disabled state [ 3374.086160][ T5302] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3374.093983][ T5302] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3374.102223][ T5302] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3374.110004][ T5302] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 3374.217031][ T5319] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3374.428704][ T3452] Bluetooth: hci0: command tx timeout [ 3374.800272][ T2177] bridge_slave_0: left allmulticast mode [ 3374.843192][ T2177] bridge_slave_0: left promiscuous mode [ 3374.849497][ T2177] bridge0: port 1(bridge_slave_0) entered disabled state [ 3376.453510][ T3452] Bluetooth: hci0: command tx timeout [ 3376.681534][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3378.313927][ T2177]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 3378.325627][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3378.346431][ T2177]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 3378.374184][ T2177]  (unregistering): Released all slaves [ 3378.578043][ T5316] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8252'. [ 3379.342604][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3379.840179][ T5358] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8261'. [ 3380.848430][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3381.018371][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 3381.045907][ T5269] bridge0: port 1(bridge_slave_0) entered disabled state [ 3381.053176][ T5269] bridge_slave_0: entered allmulticast mode [ 3381.103463][T29809] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 3381.147032][ T5269] bridge_slave_0: entered promiscuous mode [ 3382.054478][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 3382.061683][ T5269] bridge0: port 2(bridge_slave_1) entered disabled state [ 3382.083664][ T5269] bridge_slave_1: entered allmulticast mode [ 3382.091448][ T5269] bridge_slave_1: entered promiscuous mode [ 3382.146539][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3382.191732][T29809] usb 1-1: device descriptor read/64, error -71 [ 3382.401598][ T5269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3382.480081][ T5269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3382.493530][T29809] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 3382.545381][ T2177] hsr_slave_0: left promiscuous mode [ 3382.582872][ T2177] hsr_slave_1: left promiscuous mode [ 3382.599969][ T2177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3382.612893][ T2177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3382.664123][ T2177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3382.702108][ T2177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3382.709506][T29809] usb 1-1: device descriptor read/64, error -71 [ 3382.825530][T29809] usb usb1-port1: attempt power cycle [ 3382.981045][ T2177] veth1_macvtap: left promiscuous mode [ 3382.988529][ T2177] veth0_macvtap: left promiscuous mode [ 3383.808744][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3383.875968][ T5384] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 3384.048888][ T2177] team0 (unregistering): Port device team_slave_1 removed [ 3384.169447][ T2177] team0 (unregistering): Port device team_slave_0 removed [ 3385.425032][ T5386] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 3385.434603][ T5386] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 3385.444201][ T5386] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3385.553214][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3385.613291][ T5269] team0: Port device team_slave_0 added [ 3385.773943][ T5269] team0: Port device team_slave_1 added [ 3386.773177][ T5395] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3386.885631][ T5395] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3386.898278][ T5395] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3386.905874][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3386.922396][ T5395] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3386.930626][ T5395] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 3387.283525][ T5269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3387.290779][ T5269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3387.472041][ T5269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3387.556864][ T5269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3387.595990][ T5269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3387.624125][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3387.693780][ T5406] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8274'. [ 3387.709306][ T5269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3387.807516][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3388.048398][ T5412] No buffer was provided with the request [ 3388.609581][ T5269] hsr_slave_0: entered promiscuous mode [ 3388.625506][ T5269] hsr_slave_1: entered promiscuous mode [ 3388.746305][ T5269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3388.754617][ T5269] Cannot create hsr debugfs directory [ 3388.854089][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3389.096601][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.103251][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.827911][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3391.055234][ T5431] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 3391.489681][ T4091] udevd[4091]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3392.110934][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3392.228475][ T5269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3392.297956][ T5269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3392.323834][ T5440] vivid-000: disconnect [ 3392.334067][ T5439] vivid-000: reconnect [ 3392.373236][ T5269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3392.412387][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3392.450453][ T5269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3392.492466][ T5443] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8284'. [ 3392.614267][ T5444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3392.620722][ T5444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3392.642087][ T5444] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 3392.705575][ T5444] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3392.717682][ T5444] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3392.725818][ T5444] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 3392.733965][ T5444] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 3393.020210][ T5269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3393.055838][ T5269] 8021q: adding VLAN 0 to HW filter on device team0 [ 3393.705463][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3393.731776][ T2599] bridge0: port 1(bridge_slave_0) entered blocking state [ 3393.739006][ T2599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3393.964240][ T2599] bridge0: port 2(bridge_slave_1) entered blocking state [ 3393.971601][ T2599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3394.423918][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3394.628565][ T3452] Bluetooth: hci2: command 0x0c1a tx timeout [ 3394.706427][ T3452] Bluetooth: hci4: command 0x0c1a tx timeout [ 3394.774692][ T3452] Bluetooth: hci0: command 0x0c1a tx timeout [ 3394.781109][ T3446] Bluetooth: hci6: command 0x0c1a tx timeout [ 3395.585867][ T5269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3395.993753][ T5269] veth0_vlan: entered promiscuous mode [ 3396.007323][ T5269] veth1_vlan: entered promiscuous mode [ 3396.184943][ T5269] veth0_macvtap: entered promiscuous mode [ 3396.213219][ T5269] veth1_macvtap: entered promiscuous mode [ 3396.362260][ T5269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3396.552986][ T5269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3396.662532][ T5269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3396.705482][ T5269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3396.735592][ T5269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3396.753497][ T5269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3396.833093][ T3446] Bluetooth: hci4: command 0x0c1a tx timeout [ 3396.854076][ T3446] Bluetooth: hci0: command 0x0c1a tx timeout [ 3397.088525][ T5491] 8021q: VLANs not supported on ipvlan1 [ 3397.534756][ T5489] [U]  [ 3397.551528][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3397.601629][ T2177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3397.623756][ T2177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3398.360771][ T4051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3398.385863][ T4051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3398.659356][ T5504] bad cache= option: no%e [ 3398.659356][ T5504] [ 3398.666018][ T5504] CIFS: VFS: bad cache= option: no%e [ 3398.935320][ T3446] Bluetooth: hci0: command 0x0c1a tx timeout [ 3399.868052][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3399.897543][ T5507] netlink: 'syz.2.8235': attribute type 4 has an invalid length. [ 3399.905921][ T5507] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8235'. [ 3399.918679][ T5507] : renamed from bond0 (while UP) [ 3399.941297][ T5513] bad cache= option: no%e [ 3399.941297][ T5513] [ 3400.053725][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 3400.075212][ T5513] CIFS: VFS: bad cache= option: no%e [ 3400.220919][ T5516] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8298'. [ 3400.752539][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 3400.791290][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 3400.833791][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3400.868276][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3400.902432][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3400.958951][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3400.991354][ T9] usb 1-1: Product: syz [ 3401.001715][ T9] usb 1-1: Manufacturer: syz [ 3401.017962][ T9] usb 1-1: SerialNumber: syz [ 3401.066208][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3401.863385][ T5521] No buffer was provided with the request [ 3402.052837][ T9] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 3402.975239][ T9] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 3403.087776][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3403.089880][ T9] usb 1-1: USB disconnect, device number 64 [ 3403.723998][ T4091] udevd[4091]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3404.404297][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3405.208539][ T5554] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3406.342222][ T30] audit: type=1326 audit(1752573572.856:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5558 comm="syz.7.8309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f906998e929 code=0x0 [ 3407.508272][ T5570] netlink: 'syz.7.8311': attribute type 4 has an invalid length. [ 3407.516785][ T5570] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8311'. [ 3407.897712][ T5578] bad cache= option: no%e [ 3407.897712][ T5578] [ 3407.904470][ T5578] CIFS: VFS: bad cache= option: no%e [ 3407.955282][ T5581] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 3407.977361][ T5581] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3407.985290][ T5581] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 3407.997441][ T5581] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3408.005544][ T5581] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 3408.950485][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3410.073439][ T4017] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 3410.206135][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3410.284116][ T4017] usb 10-1: Using ep0 maxpacket: 8 [ 3410.298825][ T4017] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 3410.308140][ T4017] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3410.319242][ T4017] usb 10-1: config 0 has no interface number 0 [ 3410.328292][ T4017] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 3410.337702][ T4017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3410.346483][ T4017] usb 10-1: Product: syz [ 3410.350886][ T4017] usb 10-1: Manufacturer: syz [ 3410.356099][ T4017] usb 10-1: SerialNumber: syz [ 3410.372034][ T4017] usb 10-1: config 0 descriptor?? [ 3410.382425][ T4017] usb 10-1: Found UVC 0.04 device syz (046d:08c3) [ 3410.405499][ T4017] usb 10-1: No valid video chain found. [ 3411.694119][ T5606] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3411.808396][ T5606] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3411.833727][ T5606] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3411.848544][ T5606] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3412.298596][ T5606] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 3412.383495][ T3446] Bluetooth: hci2: command 0x0c1a tx timeout [ 3413.133911][ T3594] usb 10-1: USB disconnect, device number 35 [ 3413.823545][ T3446] Bluetooth: hci4: command 0x0c1a tx timeout [ 3413.893653][ T3446] Bluetooth: hci0: command 0x0c1a tx timeout [ 3413.899925][ T3446] Bluetooth: hci6: command 0x0c1a tx timeout [ 3415.008879][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8326'. [ 3415.984679][ T3446] Bluetooth: hci0: command 0x0c1a tx timeout [ 3417.607269][ T30] audit: type=1326 audit(1752573583.526:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5643 comm="syz.2.8330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb6078e929 code=0x0 [ 3419.200299][ T5662] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8333'. [ 3420.471318][ T5671] bad cache= option: no%e [ 3420.471318][ T5671] [ 3420.478589][ T5671] CIFS: VFS: bad cache= option: no%e [ 3421.071813][ T5673] No buffer was provided with the request [ 3421.659058][ T5681] No buffer was provided with the request [ 3421.812041][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3423.058244][ T5692] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3423.139809][ T5692] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 3423.153103][ T5692] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3423.161266][ T5692] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 3423.485718][ T5683] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3423.491854][ T5683] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3423.739613][ T5699] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8342'. [ 3424.083753][ T5683] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3424.156810][ T5683] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3425.861710][ T3446] Bluetooth: hci2: command 0x0c1a tx timeout [ 3425.867987][ T3446] Bluetooth: hci4: command 0x0c1a tx timeout [ 3426.222331][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3427.103731][ T3452] Bluetooth: hci6: command 0x0c1a tx timeout [ 3427.109835][ T3452] Bluetooth: hci0: command 0x0c1a tx timeout [ 3427.553524][T29810] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3428.513866][ T3594] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 3428.593743][T29810] usb 3-1: Using ep0 maxpacket: 8 [ 3428.601885][T29810] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 3428.610431][T29810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3428.612483][ T5730] usb usb8: usbfs: process 5730 (syz.7.8347) did not claim interface 0 before use [ 3428.722374][T29810] usb 3-1: config 0 has no interface number 0 [ 3428.726804][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3428.737317][T29810] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 3428.750854][T29810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3428.770993][T29810] usb 3-1: Product: syz [ 3428.782430][T29810] usb 3-1: Manufacturer: syz [ 3428.791520][T29810] usb 3-1: SerialNumber: syz [ 3428.811004][T29810] usb 3-1: config 0 descriptor?? [ 3428.821447][T29810] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 3428.828216][T29810] usb 3-1: No valid video chain found. [ 3428.916371][ T3594] usb 10-1: device not accepting address 36, error -71 [ 3430.013817][ T5744] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8352'. [ 3430.762654][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3431.435789][ T3594] usb 3-1: USB disconnect, device number 36 [ 3431.453668][ T5751] 8021q: VLANs not supported on ipvlan1 [ 3431.463452][ T5750] [U]  [ 3431.617555][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3431.926056][ T10] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 3432.231187][ T5762] No buffer was provided with the request [ 3432.633383][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 3432.660266][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3432.675236][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3432.736176][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3432.753408][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3432.761528][ T10] usb 7-1: Product: syz [ 3432.796606][ T10] usb 7-1: Manufacturer: syz [ 3432.801262][ T10] usb 7-1: SerialNumber: syz [ 3433.156446][ T5767] netlink: 'syz.7.8360': attribute type 4 has an invalid length. [ 3433.167602][ T5767] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8360'. [ 3433.328298][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 3433.335860][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 3433.343284][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 3433.350882][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 3433.358414][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 3433.366538][ T10] usb 7-1: 0:2 : does not exist [ 3433.378893][ T10] usb 7-1: USB disconnect, device number 34 [ 3433.443188][ T4090] udevd[4090]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3433.655385][ T5935] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 3433.878480][ T5776] No buffer was provided with the request [ 3433.974564][ T5935] usb 10-1: Using ep0 maxpacket: 8 [ 3434.222543][ T5935] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3434.246046][ T5935] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 3434.280559][ T5935] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 3434.304422][ T5935] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 3434.306936][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3434.342499][ T5935] usb 10-1: Product: syz [ 3434.793358][ T5935] usb 10-1: Manufacturer: syz [ 3434.823370][ T5935] usb 10-1: SerialNumber: syz [ 3435.069749][ T5769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3435.147455][ T5769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3435.359498][ T5769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3435.429007][ T5769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3436.189341][ T5789] 8021q: VLANs not supported on ipvlan1 [ 3436.316246][ T5787] [U]  [ 3436.321175][ T5794] fuse: Bad value for 'fd' [ 3436.605337][ T3972] udevd[3972]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3437.738789][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3437.898684][ T5813] No buffer was provided with the request [ 3438.215859][ T4017] usb 10-1: USB disconnect, device number 38 [ 3438.462774][ T5820] netlink: 'syz.0.8373': attribute type 4 has an invalid length. [ 3438.470989][ T5820] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8373'. [ 3439.473727][ T43] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3439.585097][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3439.623524][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 3439.658183][ T5829] No buffer was provided with the request [ 3439.669399][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3440.060127][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3440.105530][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3440.298037][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3440.306451][ T43] usb 3-1: Product: syz [ 3440.399335][ T43] usb 3-1: Manufacturer: syz [ 3440.426781][ T43] usb 3-1: SerialNumber: syz [ 3440.458822][ T4090] udevd[4090]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 3440.728711][ T43] usb 3-1: 0:2 : does not exist [ 3440.743073][ T43] usb 3-1: USB disconnect, device number 37 [ 3441.937769][ T5846] 8021q: VLANs not supported on ipvlan1 [ 3443.270218][ T5856] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8383'. [ 3443.368284][ T5857] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 3443.389244][ T5857] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 3443.944907][ T5935] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 3444.473425][ T5935] usb 10-1: Using ep0 maxpacket: 8 [ 3444.498701][ T5935] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3444.680567][ T5935] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 3444.724541][ T5935] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 3444.743427][ T5935] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 3444.752089][ T5863] No buffer was provided with the request [ 3444.772095][ T5935] usb 10-1: Product: syz [ 3444.778433][ T5935] usb 10-1: Manufacturer: syz [ 3444.785636][ T5935] usb 10-1: SerialNumber: syz [ 3445.014790][ T5859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3445.060701][ T5859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3445.115714][ T5859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3445.124739][ T5859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3446.246521][ T5881] No buffer was provided with the request [ 3446.288857][ T3446] ================================================================== [ 3446.296986][ T3446] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 3446.305881][ T3446] Read of size 8 at addr ffff888028381588 by task kworker/u9:3/3446 [ 3446.313867][ T3446] [ 3446.316200][ T3446] CPU: 0 UID: 0 PID: 3446 Comm: kworker/u9:3 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 3446.316214][ T3446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3446.316227][ T3446] Workqueue: hci0 hci_rx_work [ 3446.316255][ T3446] Call Trace: [ 3446.316262][ T3446] [ 3446.316268][ T3446] dump_stack_lvl+0x189/0x250 [ 3446.316282][ T3446] ? rcu_is_watching+0x15/0xb0 [ 3446.316294][ T3446] ? __kasan_check_byte+0x12/0x40 [ 3446.316310][ T3446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3446.316321][ T3446] ? rcu_is_watching+0x15/0xb0 [ 3446.316332][ T3446] ? lock_release+0x4b/0x3e0 [ 3446.316342][ T3446] ? __virt_addr_valid+0x1c8/0x5c0 [ 3446.316354][ T3446] ? __virt_addr_valid+0x4a5/0x5c0 [ 3446.316366][ T3446] print_report+0xca/0x230 [ 3446.316380][ T3446] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 3446.316392][ T3446] kasan_report+0x118/0x150 [ 3446.316406][ T3446] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 3446.316420][ T3446] l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 3446.316433][ T3446] l2cap_connect_cfm+0x377/0x1040 [ 3446.316446][ T3446] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 3446.316458][ T3446] ? device_add+0x70b/0xb50 [ 3446.316469][ T3446] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 3446.316480][ T3446] hci_connect_cfm+0x95/0x140 [ 3446.316497][ T3446] le_conn_complete_evt+0xcd3/0x1220 [ 3446.316513][ T3446] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 3446.316524][ T3446] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 3446.316535][ T3446] ? __asan_memcpy+0x40/0x70 [ 3446.316546][ T3446] ? __pfx___mutex_lock+0x10/0x10 [ 3446.316555][ T3446] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3446.316564][ T3446] ? skb_pull_data+0xfb/0x200 [ 3446.316580][ T3446] hci_le_conn_complete_evt+0x187/0x450 [ 3446.316593][ T3446] hci_event_packet+0x78c/0x1200 [ 3446.316607][ T3446] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 3446.316618][ T3446] ? __pfx_hci_event_packet+0x10/0x10 [ 3446.316631][ T3446] ? kcov_remote_start+0x4d3/0x7f0 [ 3446.316645][ T3446] ? lockdep_hardirqs_on+0x90/0x150 [ 3446.316658][ T3446] ? hci_send_to_monitor+0xe2/0x570 [ 3446.316670][ T3446] hci_rx_work+0x46a/0xe80 [ 3446.316685][ T3446] ? process_scheduled_works+0x9ef/0x17b0 [ 3446.316696][ T3446] process_scheduled_works+0xade/0x17b0 [ 3446.316712][ T3446] ? __pfx_process_scheduled_works+0x10/0x10 [ 3446.316725][ T3446] worker_thread+0x8a0/0xda0 [ 3446.316746][ T3446] kthread+0x711/0x8a0 [ 3446.316766][ T3446] ? __pfx_worker_thread+0x10/0x10 [ 3446.316783][ T3446] ? __pfx_kthread+0x10/0x10 [ 3446.316802][ T3446] ? _raw_spin_unlock_irq+0x23/0x50 [ 3446.316823][ T3446] ? lockdep_hardirqs_on+0x9c/0x150 [ 3446.316840][ T3446] ? __pfx_kthread+0x10/0x10 [ 3446.316851][ T3446] ret_from_fork+0x3fc/0x770 [ 3446.316864][ T3446] ? __pfx_ret_from_fork+0x10/0x10 [ 3446.316882][ T3446] ? __switch_to_asm+0x39/0x70 [ 3446.316902][ T3446] ? __switch_to_asm+0x33/0x70 [ 3446.316918][ T3446] ? __pfx_kthread+0x10/0x10 [ 3446.316938][ T3446] ret_from_fork_asm+0x1a/0x30 [ 3446.316965][ T3446] [ 3446.316969][ T3446] [ 3446.602741][ T3446] Allocated by task 3446: [ 3446.607059][ T3446] kasan_save_track+0x3e/0x80 [ 3446.611727][ T3446] __kasan_kmalloc+0x93/0xb0 [ 3446.616319][ T3446] __kmalloc_noprof+0x27a/0x4f0 [ 3446.621171][ T3446] sk_prot_alloc+0xe7/0x220 [ 3446.625663][ T3446] sk_alloc+0x3a/0x370 [ 3446.629720][ T3446] bt_sock_alloc+0x3b/0x310 [ 3446.634211][ T3446] l2cap_sock_new_connection_cb+0xe2/0x2b0 [ 3446.640530][ T3446] l2cap_connect_cfm+0x377/0x1040 [ 3446.645556][ T3446] hci_connect_cfm+0x95/0x140 [ 3446.650231][ T3446] le_conn_complete_evt+0xcd3/0x1220 [ 3446.655532][ T3446] hci_le_conn_complete_evt+0x187/0x450 [ 3446.661074][ T3446] hci_event_packet+0x78c/0x1200 [ 3446.666001][ T3446] hci_rx_work+0x46a/0xe80 [ 3446.670406][ T3446] process_scheduled_works+0xade/0x17b0 [ 3446.675948][ T3446] worker_thread+0x8a0/0xda0 [ 3446.680552][ T3446] kthread+0x711/0x8a0 [ 3446.684613][ T3446] ret_from_fork+0x3fc/0x770 [ 3446.689223][ T3446] ret_from_fork_asm+0x1a/0x30 [ 3446.693981][ T3446] [ 3446.696291][ T3446] Freed by task 5882: [ 3446.700252][ T3446] kasan_save_track+0x3e/0x80 [ 3446.704925][ T3446] kasan_save_free_info+0x46/0x50 [ 3446.709944][ T3446] __kasan_slab_free+0x62/0x70 [ 3446.714709][ T3446] kfree+0x18e/0x440 [ 3446.718603][ T3446] __sk_destruct+0x4e1/0x660 [ 3446.723186][ T3446] l2cap_sock_cleanup_listen+0xda/0x3e0 [ 3446.728727][ T3446] l2cap_sock_release+0x5d/0x1d0 [ 3446.733657][ T3446] sock_close+0xc0/0x240 [ 3446.737892][ T3446] __fput+0x449/0xa70 [ 3446.741867][ T3446] task_work_run+0x1d4/0x260 [ 3446.746450][ T3446] exit_to_user_mode_loop+0xec/0x110 [ 3446.751720][ T3446] do_syscall_64+0x2bd/0x3b0 [ 3446.756336][ T3446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3446.762220][ T3446] [ 3446.764538][ T3446] The buggy address belongs to the object at ffff888028381000 [ 3446.764538][ T3446] which belongs to the cache kmalloc-2k of size 2048 [ 3446.778601][ T3446] The buggy address is located 1416 bytes inside of [ 3446.778601][ T3446] freed 2048-byte region [ffff888028381000, ffff888028381800) [ 3446.792568][ T3446] [ 3446.794904][ T3446] The buggy address belongs to the physical page: [ 3446.801324][ T3446] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28380 [ 3446.810075][ T3446] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3446.818567][ T3446] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3446.826109][ T3446] page_type: f5(slab) [ 3446.830076][ T3446] raw: 00fff00000000040 ffff88801a442000 dead000000000122 0000000000000000 [ 3446.838657][ T3446] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 3446.847238][ T3446] head: 00fff00000000040 ffff88801a442000 dead000000000122 0000000000000000 [ 3446.855911][ T3446] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 3446.864582][ T3446] head: 00fff00000000003 ffffea0000a0e001 00000000ffffffff 00000000ffffffff [ 3446.873241][ T3446] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3446.881898][ T3446] page dumped because: kasan: bad access detected [ 3446.888308][ T3446] page_owner tracks the page as allocated [ 3446.894009][ T3446] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5881, tgid 5880 (syz.0.8390), ts 3446244033619, free_ts 3446207626352 [ 3446.915557][ T3446] post_alloc_hook+0x240/0x2a0 [ 3446.920323][ T3446] get_page_from_freelist+0x21d5/0x22b0 [ 3446.925887][ T3446] __alloc_frozen_pages_noprof+0x181/0x370 [ 3446.931703][ T3446] alloc_pages_mpol+0x232/0x4a0 [ 3446.936564][ T3446] allocate_slab+0x8a/0x3b0 [ 3446.941053][ T3446] ___slab_alloc+0xbfc/0x1480 [ 3446.945712][ T3446] __kmalloc_noprof+0x305/0x4f0 [ 3446.950571][ T3446] sk_prot_alloc+0xe7/0x220 [ 3446.955060][ T3446] sk_alloc+0x3a/0x370 [ 3446.959115][ T3446] __netlink_create+0x65/0x260 [ 3446.963866][ T3446] netlink_create+0x3ca/0x590 [ 3446.968532][ T3446] __sock_create+0x4b0/0x9f0 [ 3446.973115][ T3446] __sys_socket+0xd7/0x1b0 [ 3446.977515][ T3446] __x64_sys_socket+0x7a/0x90 [ 3446.982186][ T3446] do_syscall_64+0xfa/0x3b0 [ 3446.986688][ T3446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3446.992574][ T3446] page last free pid 5875 tgid 5873 stack trace: [ 3446.998905][ T3446] __free_frozen_pages+0xc65/0xe60 [ 3447.004053][ T3446] __slab_free+0x326/0x400 [ 3447.008483][ T3446] qlist_free_all+0x97/0x140 [ 3447.013068][ T3446] kasan_quarantine_reduce+0x148/0x160 [ 3447.018520][ T3446] __kasan_slab_alloc+0x22/0x80 [ 3447.023374][ T3446] __kmalloc_noprof+0x224/0x4f0 [ 3447.028233][ T3446] tracepoint_probe_unregister+0x25a/0x9b0 [ 3447.034049][ T3446] bpf_raw_tp_link_release+0x43/0x70 [ 3447.039329][ T3446] bpf_link_free+0xea/0x330 [ 3447.043822][ T3446] bpf_link_release+0x6b/0x80 [ 3447.048578][ T3446] __fput+0x449/0xa70 [ 3447.052557][ T3446] task_work_run+0x1d4/0x260 [ 3447.057139][ T3446] exit_to_user_mode_loop+0xec/0x110 [ 3447.062411][ T3446] do_syscall_64+0x2bd/0x3b0 [ 3447.066999][ T3446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3447.072878][ T3446] [ 3447.075187][ T3446] Memory state around the buggy address: [ 3447.080801][ T3446] ffff888028381480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3447.088853][ T3446] ffff888028381500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3447.097113][ T3446] >ffff888028381580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3447.105159][ T3446] ^ [ 3447.109500][ T3446] ffff888028381600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3447.117601][ T3446] ffff888028381680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3447.125679][ T3446] ================================================================== [ 3447.162457][ T3446] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3447.169713][ T3446] CPU: 0 UID: 0 PID: 3446 Comm: kworker/u9:3 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 3447.181898][ T3446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3447.191962][ T3446] Workqueue: hci0 hci_rx_work [ 3447.196661][ T3446] Call Trace: [ 3447.199938][ T3446] [ 3447.202865][ T3446] dump_stack_lvl+0x99/0x250 [ 3447.207454][ T3446] ? __asan_memcpy+0x40/0x70 [ 3447.212061][ T3446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3447.217281][ T3446] ? __pfx__printk+0x10/0x10 [ 3447.221885][ T3446] panic+0x2db/0x790 [ 3447.225788][ T3446] ? __pfx_panic+0x10/0x10 [ 3447.230210][ T3446] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 3447.236111][ T3446] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3447.242454][ T3446] ? print_memory_metadata+0x314/0x400 [ 3447.247932][ T3446] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 3447.254009][ T3446] check_panic_on_warn+0x89/0xb0 [ 3447.258954][ T3446] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 3447.265020][ T3446] end_report+0x78/0x160 [ 3447.269285][ T3446] kasan_report+0x129/0x150 [ 3447.273804][ T3446] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 3447.279893][ T3446] l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 3447.285795][ T3446] l2cap_connect_cfm+0x377/0x1040 [ 3447.290824][ T3446] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 3447.296286][ T3446] ? device_add+0x70b/0xb50 [ 3447.300789][ T3446] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 3447.306251][ T3446] hci_connect_cfm+0x95/0x140 [ 3447.310928][ T3446] le_conn_complete_evt+0xcd3/0x1220 [ 3447.316225][ T3446] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 3447.321939][ T3446] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 3447.327567][ T3446] ? __asan_memcpy+0x40/0x70 [ 3447.332159][ T3446] ? __pfx___mutex_lock+0x10/0x10 [ 3447.337189][ T3446] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3447.343173][ T3446] ? skb_pull_data+0xfb/0x200 [ 3447.347858][ T3446] hci_le_conn_complete_evt+0x187/0x450 [ 3447.353405][ T3446] hci_event_packet+0x78c/0x1200 [ 3447.358346][ T3446] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 3447.363622][ T3446] ? __pfx_hci_event_packet+0x10/0x10 [ 3447.368998][ T3446] ? kcov_remote_start+0x4d3/0x7f0 [ 3447.374106][ T3446] ? lockdep_hardirqs_on+0x90/0x150 [ 3447.379304][ T3446] ? hci_send_to_monitor+0xe2/0x570 [ 3447.384500][ T3446] hci_rx_work+0x46a/0xe80 [ 3447.388921][ T3446] ? process_scheduled_works+0x9ef/0x17b0 [ 3447.394633][ T3446] process_scheduled_works+0xade/0x17b0 [ 3447.400185][ T3446] ? __pfx_process_scheduled_works+0x10/0x10 [ 3447.406161][ T3446] worker_thread+0x8a0/0xda0 [ 3447.410754][ T3446] kthread+0x711/0x8a0 [ 3447.414820][ T3446] ? __pfx_worker_thread+0x10/0x10 [ 3447.419938][ T3446] ? __pfx_kthread+0x10/0x10 [ 3447.424536][ T3446] ? _raw_spin_unlock_irq+0x23/0x50 [ 3447.429742][ T3446] ? lockdep_hardirqs_on+0x9c/0x150 [ 3447.434944][ T3446] ? __pfx_kthread+0x10/0x10 [ 3447.439538][ T3446] ret_from_fork+0x3fc/0x770 [ 3447.444123][ T3446] ? __pfx_ret_from_fork+0x10/0x10 [ 3447.449229][ T3446] ? __switch_to_asm+0x39/0x70 [ 3447.453990][ T3446] ? __switch_to_asm+0x33/0x70 [ 3447.458750][ T3446] ? __pfx_kthread+0x10/0x10 [ 3447.463341][ T3446] ret_from_fork_asm+0x1a/0x30 [ 3447.468109][ T3446] [ 3447.471410][ T3446] Kernel Offset: disabled [ 3447.475737][ T3446] Rebooting in 86400 seconds..