last executing test programs: 25m40.462390394s ago: executing program 32 (id=389): syz_open_dev$vim2m(0x0, 0x7ffffffffffffffe, 0x2) syz_io_uring_setup(0x33a4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x1) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40, 0x1}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) 23m27.41680179s ago: executing program 33 (id=700): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x800a, 0x64c80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xa00) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x119966ec, 0x69cf39a9dadd5612, 0x7}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, 0x0) 20m12.969308583s ago: executing program 3 (id=1566): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058005"], 0x4c}}, 0x0) 20m12.422749091s ago: executing program 3 (id=1575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x10}]}}}}}}}, 0x0) 20m12.086532835s ago: executing program 3 (id=1579): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='ext4_fallocate_exit\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[]) 20m10.789423693s ago: executing program 3 (id=1588): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a060400) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r5 = epoll_create(0x802) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000300)) ioctl$FS_IOC_GETFLAGS(r4, 0x5437, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fadvise64(r1, 0x5, 0x7fffffff, 0x2) execveat(r7, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x1000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vxcan1\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x2c004}, 0x20000000) 20m8.266046239s ago: executing program 3 (id=1594): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@dev, 0x0, 0x4, 0x0, 0x0, 0x0, 0x93}}, 0xe8) 20m7.773292277s ago: executing program 3 (id=1597): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xa0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee5233188", 0x0, 0x8000}, 0x50) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}]}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) 19m52.679631832s ago: executing program 34 (id=1597): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xa0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee5233188", 0x0, 0x8000}, 0x50) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}]}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) 11m28.092704304s ago: executing program 1 (id=4481): socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 11m28.008871716s ago: executing program 1 (id=4482): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000bc0)={0x1, 0x0, [{0x0, 0x3, &(0x7f0000000800)=""/3}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) unshare(0x64000600) 11m27.617258225s ago: executing program 1 (id=4486): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x4008014}, 0xd4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000006fc0)=0xbd7, 0x4) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x8000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, 0x0) 11m27.436638214s ago: executing program 1 (id=4487): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) 11m24.888950443s ago: executing program 1 (id=4497): r0 = socket$kcm(0x10, 0xce1068b99cd46df3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000502080002400000000e05000300000000000900010073797a"], 0x80}}, 0x24004800) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x170, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0xffe0, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x138, 0x2, [@TCA_FLOWER_ACT={0x134, 0x3, [@m_connmark={0x130, 0x1, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffc7, 0x0, 0x2, 0x3, 0x951}, 0xd495}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x3, 0x5, 0x1}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x0, 0x1, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x2, 0xb8, 0x4}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0xdcbb9f89ddd87698, 0xc, 0xffffffff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x427, 0xffffffffffffffff, 0x1, 0x3ff}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0xffffff7f, 0xffffffffffffffff, 0xa, 0x766}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1df, 0xe, 0x8, 0x200, 0x2}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x3a4, 0x4, 0x4, 0x3}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x7}}]}, 0x170}}, 0x200080c4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11m24.727381482s ago: executing program 1 (id=4498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4, 0x0, 0x1}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 11m8.418488765s ago: executing program 35 (id=4498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4, 0x0, 0x1}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 7m22.357206643s ago: executing program 0 (id=5218): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x871b2000) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000009c0)='cgroup\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1, 0x2000000, 0x1000) 7m17.208447549s ago: executing program 0 (id=5230): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7ff}}, &(0x7f00000005c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) 7m15.989692081s ago: executing program 0 (id=5234): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x27}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x0, 0x6, 0x3}, 0x0, 0x0) 7m14.61375049s ago: executing program 0 (id=5237): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}]}, 0x30}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r3, r2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f000000d6c0)={0x0, 0x0, &(0x7f000000d680)={&(0x7f000000d580)=ANY=[@ANYBLOB="240000000408030000000000000000000700000a05000300ffffffff060002"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000300)={0x440, 0x3}, 0x8) sendto$inet(r0, &(0x7f0000000100)="ab", 0x4164, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 7m9.346810474s ago: executing program 0 (id=5245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r1, &(0x7f0000000780)=[{0x0}], 0x1, 0x91, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) fcntl$lock(r2, 0x6, &(0x7f00000007c0)={0x1, 0x2, 0x9, 0x5}) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 7m7.626836535s ago: executing program 0 (id=5250): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 6m52.497606168s ago: executing program 36 (id=5250): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 6m7.381823422s ago: executing program 8 (id=5430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x1) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x1) 5m31.443990447s ago: executing program 8 (id=5430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x1) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x1) 2m38.887624677s ago: executing program 8 (id=5430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x1) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x1) 2m38.416249356s ago: executing program 2 (id=5960): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0x4e22, 0x1, 'fo\x00', 0x6, 0x10001, 0x40000}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7f) userfaultfd(0x801) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0x8, &(0x7f00000011c0)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f00000012c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r3}, 0x10) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 2m36.751297604s ago: executing program 2 (id=5961): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x14927e, 0x91) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r7, 0x0, 0x3) syz_fuse_handle_req(r5, &(0x7f0000004900)="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", 0x2000, &(0x7f0000000cc0)={0x0, &(0x7f0000000140)={0x18, 0x0, 0x7fffffffffffffff, {0x5c55804f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m35.630611941s ago: executing program 2 (id=5964): io_setup(0x23, &(0x7f0000000280)=0x0) io_getevents(r0, 0x6, 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) 2m34.53465268s ago: executing program 2 (id=5968): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2) msgsnd(0x0, &(0x7f0000000580)=ANY=[], 0x8, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000000b00)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) open_tree(0xffffffffffffff9c, 0x0, 0x88100) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008d010000010400000800000000000000", @ANYRES32, @ANYBLOB="05000000000000000000000000000000000000007b3b96297f3ab24e15bf582040be46a83a1d0ebef926c2533845a53f33542709ec3eb3aff8cb115341aec803db0716fb1634f3cfd186dbca0b8be52d0901e6", @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x56) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) syz_open_dev$video4linux(0x0, 0x6f8, 0x240940) add_key(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r4, 0x55fa3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) 2m32.489099505s ago: executing program 2 (id=5974): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0x4e22, 0x1, 'fo\x00', 0x6, 0x10001, 0x40000}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7f) userfaultfd(0x801) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0x8, &(0x7f00000011c0)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f00000012c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r3}, 0x10) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 2m31.318622084s ago: executing program 2 (id=5977): socketpair(0x2b, 0x1, 0xfff, 0x0) pipe2(&(0x7f0000000400), 0x800) pipe2(0x0, 0x0) pipe2(&(0x7f0000000140), 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = fsopen(&(0x7f00000003c0)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2m16.076906963s ago: executing program 37 (id=5977): socketpair(0x2b, 0x1, 0xfff, 0x0) pipe2(&(0x7f0000000400), 0x800) pipe2(0x0, 0x0) pipe2(&(0x7f0000000140), 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = fsopen(&(0x7f00000003c0)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2m0.607536855s ago: executing program 8 (id=5430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x1) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x1) 1m22.230073167s ago: executing program 8 (id=5430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x1) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x1) 41.650967685s ago: executing program 8 (id=5430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x1) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x1) 17.083242426s ago: executing program 7 (id=6326): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs$userns(r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000017c0)=""/4123, 0x101b, 0x1, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 15.703470448s ago: executing program 5 (id=6332): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) 15.621309723s ago: executing program 4 (id=6333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) 14.265300054s ago: executing program 4 (id=6336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) 12.989422219s ago: executing program 4 (id=6339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d00, &(0x7f0000000040)) 12.810541933s ago: executing program 7 (id=6341): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8, 0x7800, 0x98, 0x3, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x68, 0x0, 0xc, 0x2f, 0x0, @broadcast, @multicast1}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xa0}, 0x49004) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000092a2e3fc2e4a5e52c894fde0e98f044a78e201001c4fca5f5db2f1c636773459ce68ab79da267d7b32dc8e36559fb4e23df4aeb77acc01932fe9e082ead02701ab6fe09"], 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.94696021s ago: executing program 7 (id=6343): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0xa203, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) syz_io_uring_setup(0x59f4, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x0, 0x2c9}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x10000}) 11.289487202s ago: executing program 5 (id=6344): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_DO_IT(r0, 0xab03) 10.940858054s ago: executing program 9 (id=6346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{0x0}], 0x1, 0x91, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 10.811072656s ago: executing program 9 (id=6347): pipe(&(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x7fffffff, 0x7f, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 10.632929124s ago: executing program 6 (id=6348): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x4800) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f0000000000)=""/35, 0x23) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) 9.235611881s ago: executing program 6 (id=6349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) 9.229197239s ago: executing program 4 (id=6350): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8, 0x7800, 0x98, 0x3, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x68, 0x0, 0xc, 0x2f, 0x0, @broadcast, @multicast1}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xa0}, 0x49004) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01000000000000000000010000000ff082a8099733bfb090790f64f4f4c2bd4101dbd97e9784bb29dc367aaac94f1b761edc43350efd6b99b9a17fe1356265c9f0cee84aa7"], 0x14}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.173316673s ago: executing program 9 (id=6351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) 9.173030921s ago: executing program 5 (id=6352): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60120008003c3a00fe8000000000000000fffeffff000000008000000000000000000000000000aa0200907800000000605b29ab00001100ff020000000000000000000000000001fe880000000000000000000000000001fb36eeca6fad50b375a22a58"], 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x9, "c8"}, @global=@item_012={0x2, 0x1, 0x1, "3887"}]}}, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={0x0, 0x4, 0x7}, &(0x7f0000000540)=0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25010100800c00f600080000000000000014000100ff01000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc0"], 0x114}], 0x1}, 0x0) recvfrom$inet(r2, &(0x7f00000003c0), 0x0, 0x700, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000080)={0x3, 0x1, 0x3, 0x2, 0x5, 0x81, 0x6, 0x152, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000020601010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574000000008cbfa2ff83f787f9f81859cbcdf618a3abbf26a10aac36"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) 7.974584213s ago: executing program 4 (id=6353): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs$userns(r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000017c0)=""/4123, 0x101b, 0x1, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 7.963863653s ago: executing program 6 (id=6354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000000)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 5.639510705s ago: executing program 7 (id=6355): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8, 0x7800, 0x98, 0x3, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x68, 0x0, 0xc, 0x2f, 0x0, @broadcast, @multicast1}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xa0}, 0x49004) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000092a2e3fc2e4a5e52c894fde0e98f044a78e201001c4fca5f5db2f1c636773459ce68ab79da267d7b32dc8e36559fb4e23df4aeb77acc01932fe9e082ead02701ab6fe09"], 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.218369828s ago: executing program 9 (id=6356): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1f) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9ec) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x1]}, 0x8, 0x80800) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x2, 0x0, 0xc4b1, 0x4, 0x8000000000000001, r0}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001400)) writev(r4, &(0x7f0000000640)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb92bebeb32802ecd8e61032995b891d24c782afea345ed2f0a87bc1bfc6101fa7d1d2c2e57f889dbb28fe7b7e2fc562acebfd86566be11c267f5c5c5e1707a44f2795400fb26cd4170d76c6807d8270435f365d737751f00"/129, 0x81}], 0x1) 4.028434646s ago: executing program 9 (id=6357): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x3, 0x6, 0x2, 0x0, 0x0, "3377f877c734c4f928875ab8db00", "02008000", "00000001", "be4d22a4", ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1", "00060000000000c5098d2900"]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x18080, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 3.99561216s ago: executing program 6 (id=6358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 3.948277893s ago: executing program 7 (id=6359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{0x0}], 0x1, 0x91, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 3.945602424s ago: executing program 5 (id=6360): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x7fffffff, 0x101, 0x534, 0x2}, &(0x7f0000000180)=0x14) 2.943714595s ago: executing program 9 (id=6361): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r1, 0x0, 0x200) unlink(&(0x7f0000000040)='./file1\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x3, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @datasec={0x3, 0x2, 0x0, 0xf, 0x1, [{0x3, 0x1, 0x7}, {0x2, 0x2}], '\\'}]}, {0x0, [0x30]}}, &(0x7f0000000340)=""/142, 0x4f, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000240)="020000", 0x3}, {&(0x7f0000000000)='\x00', 0x1}], 0x2, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) 2.697083842s ago: executing program 6 (id=6362): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x4800) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f0000000000)=""/35, 0x23) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) 2.687033988s ago: executing program 5 (id=6363): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) socket(0x2, 0x80805, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.649435849s ago: executing program 7 (id=6364): syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0xb01, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) read$msr(r0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) 2.565286333s ago: executing program 4 (id=6365): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8, 0x7800, 0x98, 0x3, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x68, 0x0, 0xc, 0x2f, 0x0, @broadcast, @multicast1}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xa0}, 0x49004) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01000000000000000000010000000ff082a8099733bfb090790f64f4f4c2bd4101dbd97e9784bb29dc367aaac94f1b761edc43350efd6b99b9a17fe1356265c9f0cee84aa7"], 0x14}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 167.687227ms ago: executing program 6 (id=6366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) 0s ago: executing program 5 (id=6367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) kernel console output (not intermixed with test programs): 2927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.350892][T22927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.363727][T22927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.557255][T22927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.586061][T22927] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.613513][T22927] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.422785][T22927] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.432662][T22927] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.801707][T23289] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5539'. [ 1496.978827][T23295] netlink: 'syz.2.5541': attribute type 4 has an invalid length. [ 1497.059304][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1497.116814][T18861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.133276][T18861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.191940][ T6185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.212663][ T6185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.221603][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 1497.232730][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1497.258450][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1497.287648][ T5892] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1497.310207][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.333409][ T5892] usb 5-1: Product: syz [ 1497.342924][ T5892] usb 5-1: Manufacturer: syz [ 1497.352977][ T5892] usb 5-1: SerialNumber: syz [ 1497.381668][ T5892] usb 5-1: config 0 descriptor?? [ 1497.397260][ T5892] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1497.420132][ T5892] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1497.866596][ T6185] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.072177][ T6185] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.101047][ T5892] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1498.119005][ T5892] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1498.251869][ T6185] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.366505][T23309] netlink: 'syz.9.5545': attribute type 4 has an invalid length. [ 1498.385886][T23309] netlink: 'syz.9.5545': attribute type 4 has an invalid length. [ 1498.540788][ T5892] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1498.547970][ T5892] em28xx 5-1:0.0: No AC97 audio processor [ 1498.559862][ T6185] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.891309][T23318] loop7: detected capacity change from 0 to 4096 [ 1499.015974][T23319] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.089379][T23319] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.089863][T23319] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.116208][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1500.148308][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1500.159101][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1500.178978][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1500.186776][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1500.351993][ T5990] usb 5-1: USB disconnect, device number 4 [ 1500.359781][ T5990] em28xx 5-1:0.0: Disconnecting em28xx [ 1500.370888][T23319] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.444079][ T5990] em28xx 5-1:0.0: Freeing device [ 1500.626017][T23319] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.645307][T23319] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.666023][T23319] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.690222][T23319] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.007300][ T6185] bridge_slave_1: left allmulticast mode [ 1502.021014][ T6185] bridge_slave_1: left promiscuous mode [ 1502.026803][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.104590][ T6185] bridge_slave_0: left allmulticast mode [ 1502.114166][ T6185] bridge_slave_0: left promiscuous mode [ 1502.121309][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.268872][ T5846] Bluetooth: hci0: command tx timeout [ 1502.714861][T10215] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1502.845697][T23360] netlink: 'syz.9.5557': attribute type 4 has an invalid length. [ 1502.891230][T10215] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1503.493205][T10215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1503.507507][T10215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1503.539100][T10215] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1503.599733][T10215] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1503.616460][T10215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.664832][T10215] usb 6-1: config 0 descriptor?? [ 1504.212954][T23375] netlink: 'syz.2.5561': attribute type 4 has an invalid length. [ 1504.265048][T23376] netlink: 'syz.2.5561': attribute type 4 has an invalid length. [ 1504.311406][T10215] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 1504.349591][ T5846] Bluetooth: hci0: command tx timeout [ 1504.401437][T10215] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1504.610311][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1504.634079][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1504.655201][ T6185] bond0 (unregistering): Released all slaves [ 1504.897261][T10215] usb 6-1: USB disconnect, device number 108 [ 1505.249281][T23296] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1505.471500][T23296] usb 3-1: Using ep0 maxpacket: 16 [ 1505.611655][T23296] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1505.794350][T23296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1506.041700][T23296] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1506.118793][T23296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.126845][T23296] usb 3-1: Product: syz [ 1506.181275][T23296] usb 3-1: Manufacturer: syz [ 1506.215561][T23329] chnl_net:caif_netlink_parms(): no params data found [ 1506.222616][T23296] usb 3-1: SerialNumber: syz [ 1506.421208][T23296] usb 3-1: config 0 descriptor?? [ 1506.455859][ T5846] Bluetooth: hci0: command tx timeout [ 1506.596653][T23296] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1506.624988][T23296] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1507.046639][T23402] vivid-000: disconnect [ 1507.062754][ T6185] hsr_slave_0: left promiscuous mode [ 1507.135643][T23397] loop4: detected capacity change from 0 to 4096 [ 1507.176727][ T6185] hsr_slave_1: left promiscuous mode [ 1507.256001][T23296] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1507.291988][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1507.340439][T23296] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1507.424140][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1507.676042][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1507.817243][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1507.827304][T23400] vivid-000: reconnect [ 1507.872012][T23296] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1507.901519][T23296] em28xx 3-1:0.0: No AC97 audio processor [ 1508.183915][ T6185] veth1_macvtap: left promiscuous mode [ 1508.508798][ T5846] Bluetooth: hci0: command tx timeout [ 1508.831947][ T6185] veth0_macvtap: left promiscuous mode [ 1508.837711][ T6185] veth1_vlan: left promiscuous mode [ 1508.844852][ T6185] veth0_vlan: left promiscuous mode [ 1508.899321][ T5892] usb 3-1: USB disconnect, device number 81 [ 1508.906976][ T5892] em28xx 3-1:0.0: Disconnecting em28xx [ 1508.961955][ T5892] em28xx 3-1:0.0: Freeing device [ 1511.573991][T23441] netlink: 'syz.4.5576': attribute type 4 has an invalid length. [ 1511.626685][T23442] netlink: 'syz.4.5576': attribute type 4 has an invalid length. [ 1512.787719][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 1512.890089][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 1514.738071][T23470] vivid-000: disconnect [ 1515.311121][T23466] vivid-000: reconnect [ 1515.569107][T23329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.606039][T23329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.635776][T23329] bridge_slave_0: entered allmulticast mode [ 1515.728945][T23329] bridge_slave_0: entered promiscuous mode [ 1515.772380][T23329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.790163][T23329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.798974][ T5894] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1515.831541][T23329] bridge_slave_1: entered allmulticast mode [ 1515.869840][T23329] bridge_slave_1: entered promiscuous mode [ 1515.978820][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 1515.993009][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1516.025292][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1516.058240][ T5894] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1516.068039][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.120038][T23329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.131694][ T5894] usb 3-1: Product: syz [ 1516.187809][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5585'. [ 1516.197210][T23478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5585'. [ 1516.212504][ T5894] usb 3-1: Manufacturer: syz [ 1516.487562][ T5894] usb 3-1: SerialNumber: syz [ 1517.091683][ T5894] usb 3-1: config 0 descriptor?? [ 1517.102700][ T5894] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1517.112003][ T5894] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1517.162768][T23329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.148873][ T5894] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1518.193651][ T5894] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1518.801309][ T5894] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1519.143867][ T5894] em28xx 3-1:0.0: No AC97 audio processor [ 1519.150172][T23329] team0: Port device team_slave_0 added [ 1519.264026][T23504] Lens B: ================= START STATUS ================= [ 1519.271924][T23504] Lens B: Focus, Absolute: 0 [ 1519.276629][T23504] Lens B: ================== END STATUS ================== [ 1520.208057][ T5894] usb 3-1: USB disconnect, device number 82 [ 1520.215703][ T5894] em28xx 3-1:0.0: Disconnecting em28xx [ 1520.242112][ T5894] em28xx 3-1:0.0: Freeing device [ 1520.539170][T10215] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1520.557258][ T6185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.714165][T23329] team0: Port device team_slave_1 added [ 1520.767432][T10215] usb 6-1: Using ep0 maxpacket: 8 [ 1520.906477][T10215] usb 6-1: config 0 has an invalid interface number: 33 but max is 1 [ 1521.095149][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1521.113084][T10215] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.137832][T10215] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1521.155766][T10215] usb 6-1: config 0 has no interface number 0 [ 1521.209308][T10215] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1521.264479][T10215] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1521.273792][T10215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.313036][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1521.325227][T10215] usb 6-1: Product: syz [ 1521.354471][T10215] usb 6-1: Manufacturer: syz [ 1521.369799][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1521.381130][ T6185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.397379][T10215] usb 6-1: SerialNumber: syz [ 1521.405578][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.453275][T10215] usb 6-1: config 0 descriptor?? [ 1521.465126][T10215] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1521.490799][ T10] usb 3-1: config 0 descriptor?? [ 1521.572410][T23329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.611011][T23329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.642619][T23329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1521.684773][ T2335] pvrusb2: Invalid write control endpoint [ 1521.702530][ T2335] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1521.758797][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1521.764831][ T2335] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1521.777933][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1521.797826][ T6185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.812048][ T10] usb 3-1: USB disconnect, device number 83 [ 1521.854977][T23329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.865669][T23329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.927615][T10215] usb 6-1: USB disconnect, device number 109 [ 1521.958868][T23329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.049725][ T6185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.234476][T23329] hsr_slave_0: entered promiscuous mode [ 1522.257543][T23329] hsr_slave_1: entered promiscuous mode [ 1522.278997][ T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1522.295770][T23329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1522.305286][T23329] Cannot create hsr debugfs directory [ 1522.439204][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1522.454845][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1522.477715][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1522.504741][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.535936][ T10] usb 3-1: config 0 descriptor?? [ 1523.617279][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1523.652431][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5600'. [ 1523.662016][T23537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5600'. [ 1523.694666][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1523.847734][ T10] usb 3-1: USB disconnect, device number 84 [ 1524.957414][ T6185] bridge_slave_1: left allmulticast mode [ 1525.029193][ T6185] bridge_slave_1: left promiscuous mode [ 1525.073112][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.249374][ T6185] bridge_slave_0: left allmulticast mode [ 1525.255078][ T6185] bridge_slave_0: left promiscuous mode [ 1525.336177][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.608019][T23556] Lens B: ================= START STATUS ================= [ 1525.615754][T23556] Lens B: Focus, Absolute: 0 [ 1525.621452][T23556] Lens B: ================== END STATUS ================== [ 1526.749931][T23531] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1527.369555][T23531] usb 3-1: Using ep0 maxpacket: 16 [ 1527.387977][T23531] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1527.428823][T23531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1527.469466][T23531] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1527.490824][T23531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.515766][T23531] usb 3-1: Product: syz [ 1527.534160][T23531] usb 3-1: Manufacturer: syz [ 1527.548863][T23531] usb 3-1: SerialNumber: syz [ 1527.564880][T23531] usb 3-1: config 0 descriptor?? [ 1527.578604][T23531] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1527.807382][T23531] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1528.230758][T23531] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1528.237707][T23531] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1528.796675][T23531] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1528.954866][T23531] em28xx 3-1:0.0: No AC97 audio processor [ 1529.222719][ T6185] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1529.242518][ T6185] bond1 (unregistering): (slave geneve2): the permanent HWaddr of slave - 5a:ae:bb:c4:93:92 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1529.375719][ T6185] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1529.388524][ T6185] bridge0 (unregistering): left promiscuous mode [ 1529.868967][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1530.422886][T23531] usb 3-1: USB disconnect, device number 85 [ 1530.447388][T23531] em28xx 3-1:0.0: Disconnecting em28xx [ 1530.496933][T23531] em28xx 3-1:0.0: Freeing device [ 1530.703064][ T6185] bond0 (unregistering): left promiscuous mode [ 1530.716828][ T6185] bond_slave_0: left promiscuous mode [ 1530.725188][ T6185] bond_slave_1: left promiscuous mode [ 1530.734480][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1530.756923][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1530.771762][ T6185] bond0 (unregistering): Released all slaves [ 1530.943460][ T6185] bond1 (unregistering): (slave veth3): Releasing active interface [ 1531.003981][ T6185] bond1 (unregistering): Released all slaves [ 1531.279258][T23531] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1531.385825][ T6185] tipc: Left network mode [ 1531.474659][T23531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1531.509033][T23531] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1531.532825][T23531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.624394][T23531] usb 3-1: config 0 descriptor?? [ 1531.643222][T23609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5619'. [ 1531.652269][T23609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5619'. [ 1532.055466][T23531] usbhid 3-1:0.0: can't add hid device: -71 [ 1532.061704][T23531] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1532.125373][T23531] usb 3-1: USB disconnect, device number 86 [ 1532.820313][ T6148] Bluetooth: Error in BCSP hdr checksum [ 1532.915547][T23617] syzkaller1: entered promiscuous mode [ 1532.921240][T23617] syzkaller1: entered allmulticast mode [ 1532.969562][T23531] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1533.025168][ T6185] team0: left promiscuous mode [ 1533.032872][ T6185] team_slave_0: left promiscuous mode [ 1533.038599][ T6185] team_slave_1: left promiscuous mode [ 1533.119374][ T6185] hsr_slave_0: left promiscuous mode [ 1533.146542][ T6185] hsr_slave_1: left promiscuous mode [ 1533.152877][T23531] usb 3-1: Using ep0 maxpacket: 16 [ 1533.191590][T23531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.207012][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1533.237484][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1533.246228][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1533.261132][T23531] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1533.305276][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1533.321055][T23531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.343264][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1533.430815][T23531] usb 3-1: config 0 descriptor?? [ 1533.461921][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.544580][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1533.601646][ T6185] veth1_macvtap: left promiscuous mode [ 1533.616409][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.668350][ T6185] veth0_macvtap: left promiscuous mode [ 1533.737710][ T6185] veth1_vlan: left promiscuous mode [ 1533.875822][ T10] usb 5-1: config 0 descriptor?? [ 1533.879330][ T6185] veth0_vlan: left promiscuous mode [ 1534.017916][T23531] usbhid 3-1:0.0: can't add hid device: -71 [ 1534.125449][T23531] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1534.550121][ T10] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 1534.571303][T23531] usb 3-1: USB disconnect, device number 87 [ 1534.624590][T23625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.630993][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0020/input/input78 [ 1534.709230][T23625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.787606][ T10] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1534.835418][ T5846] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1534.838720][T22929] Bluetooth: hci3: command 0x1003 tx timeout [ 1534.939205][T23531] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1534.977120][ T5894] usb 5-1: USB disconnect, device number 5 [ 1535.129727][T23531] usb 3-1: Using ep0 maxpacket: 16 [ 1535.178913][T23531] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1535.273369][T23531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1535.711185][T23531] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1535.738342][T23531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.777658][T23531] usb 3-1: Product: syz [ 1535.784173][T23531] usb 3-1: Manufacturer: syz [ 1535.791528][T23531] usb 3-1: SerialNumber: syz [ 1535.830116][T23531] usb 3-1: config 0 descriptor?? [ 1535.852781][T23531] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1535.892862][T23531] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1536.677005][T23531] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1536.684160][T23531] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1537.215229][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 1537.298846][T23531] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1537.309157][T23531] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1537.330719][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 1537.339033][T23531] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1537.372066][T23531] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1537.379920][T23531] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1537.387215][T23531] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1537.424486][T23531] usb 3-1: USB disconnect, device number 88 [ 1539.933604][T23671] syzkaller1: entered promiscuous mode [ 1539.979494][T23671] syzkaller1: entered allmulticast mode [ 1540.345637][ T6814] Bluetooth: Error in BCSP hdr checksum [ 1540.795047][T23329] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1540.837557][T23329] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1540.919562][T23329] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1541.007590][T23329] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1541.136253][T23693] netlink: 112 bytes leftover after parsing attributes in process `syz.9.5646'. [ 1541.419302][T23531] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1541.499078][T23329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.601442][T23329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.657854][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.665143][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.046810][T23531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.059111][T23531] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1542.101212][T23531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.141773][T21479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.149022][T21479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.168160][T23531] usb 5-1: config 0 descriptor?? [ 1542.349709][T22929] Bluetooth: hci3: command 0x1003 tx timeout [ 1542.358384][ T5846] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1542.634524][T23531] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 1542.836942][T23695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.157622][T23531] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0021/input/input79 [ 1543.209577][T23695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.384881][T23531] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1544.352963][ T5894] usb 5-1: USB disconnect, device number 6 [ 1544.892395][T23329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.239674][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.277779][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.435823][T23731] syzkaller1: entered promiscuous mode [ 1545.635379][T23731] syzkaller1: entered allmulticast mode [ 1546.615678][T23752] overlayfs: missing 'lowerdir' [ 1547.315189][T18530] Bluetooth: hci6: command 0x0406 tx timeout [ 1548.353673][T23767] input: syz1 as /devices/virtual/input/input80 [ 1548.871628][T23775] befs: (nbd4): No write support. Marking filesystem read-only [ 1548.881338][T23775] syz.4.5667: attempt to access beyond end of device [ 1548.881338][T23775] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1548.896236][T23775] befs: (nbd4): unable to read superblock [ 1549.436492][T23774] bridge1: entered promiscuous mode [ 1549.816617][T23329] veth0_vlan: entered promiscuous mode [ 1549.852422][T23329] veth1_vlan: entered promiscuous mode [ 1549.976489][T23329] veth0_macvtap: entered promiscuous mode [ 1550.006246][T23329] veth1_macvtap: entered promiscuous mode [ 1550.117097][T23329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.166785][T23329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.188022][T23329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.217200][T23329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.243961][T23329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.273760][T23329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.296721][T23329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.329520][T23329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.373496][T23329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.818976][T23329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.875127][T23329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.909083][T23329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.927539][T23329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.967645][T23329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.999125][T23329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.008005][T23782] syzkaller1: entered promiscuous mode [ 1551.030042][T23782] syzkaller1: entered allmulticast mode [ 1551.288587][T23791] lo speed is unknown, defaulting to 1000 [ 1551.300183][ T6157] bridge_slave_1: left allmulticast mode [ 1551.313133][ T6157] bridge_slave_1: left promiscuous mode [ 1551.334851][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.403995][ T6157] bridge_slave_0: left allmulticast mode [ 1551.424776][ T6157] bridge_slave_0: left promiscuous mode [ 1551.556628][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.754590][T23810] Lens B: ================= START STATUS ================= [ 1552.762894][T23810] Lens B: Focus, Absolute: 0 [ 1552.768212][T23810] Lens B: ================== END STATUS ================== [ 1552.987263][T23814] befs: (nbd7): No write support. Marking filesystem read-only [ 1552.996446][T23814] syz.7.5682: attempt to access beyond end of device [ 1552.996446][T23814] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1553.010332][T23814] befs: (nbd7): unable to read superblock [ 1555.718011][T23824] loop4: detected capacity change from 0 to 4096 [ 1557.819182][T23845] 9pnet_fd: Insufficient options for proto=fd [ 1558.111494][T23851] fuse: Bad value for 'fd' [ 1558.669157][ T6157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1558.769981][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1558.812498][ T6157] bond0 (unregistering): Released all slaves [ 1558.930017][T23791] lo speed is unknown, defaulting to 1000 [ 1558.944594][T23813] bridge1: entered promiscuous mode [ 1558.953544][T23791] lo speed is unknown, defaulting to 1000 [ 1559.127707][T23791] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1559.998172][T23791] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1561.490376][T23791] lo speed is unknown, defaulting to 1000 [ 1561.530216][T23791] lo speed is unknown, defaulting to 1000 [ 1562.201878][T23892] netlink: 'syz.4.5700': attribute type 4 has an invalid length. [ 1562.332376][T23791] lo speed is unknown, defaulting to 1000 [ 1562.596657][T18530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1562.609584][T18530] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1562.626547][T18530] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1562.653073][T18530] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1562.705790][T18530] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1562.998200][T23791] lo speed is unknown, defaulting to 1000 [ 1563.383626][T23791] lo speed is unknown, defaulting to 1000 [ 1563.590765][T23791] lo speed is unknown, defaulting to 1000 [ 1563.598482][T23791] lo speed is unknown, defaulting to 1000 [ 1563.703166][T23791] lo speed is unknown, defaulting to 1000 [ 1563.744656][T23791] lo speed is unknown, defaulting to 1000 [ 1563.979227][T23912] fuse: Bad value for 'fd' [ 1563.999888][ T6157] hsr_slave_0: left promiscuous mode [ 1564.019882][ T6157] hsr_slave_1: left promiscuous mode [ 1564.143578][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1564.155864][T23907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5706'. [ 1564.165337][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1564.178872][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1564.188849][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1564.378514][T23918] befs: (nbd7): No write support. Marking filesystem read-only [ 1564.387536][T23918] syz.7.5707: attempt to access beyond end of device [ 1564.387536][T23918] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1564.400976][T23918] befs: (nbd7): unable to read superblock [ 1564.778361][ T5846] Bluetooth: hci3: command tx timeout [ 1564.824937][ T6157] veth1_macvtap: left promiscuous mode [ 1564.843302][ T6157] veth0_macvtap: left promiscuous mode [ 1564.863458][ T6157] veth1_vlan: left promiscuous mode [ 1564.874816][ T6157] veth0_vlan: left promiscuous mode [ 1566.828962][T18530] Bluetooth: hci3: command tx timeout [ 1567.194910][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 1568.292323][ T6157] team0 (unregistering): Port device team_slave_0 removed [ 1568.909037][T18530] Bluetooth: hci3: command tx timeout [ 1569.826885][T23917] bridge2: entered promiscuous mode [ 1569.986939][T23895] lo speed is unknown, defaulting to 1000 [ 1570.368823][T23946] netlink: 'syz.2.5716': attribute type 4 has an invalid length. [ 1571.094459][T18530] Bluetooth: hci3: command tx timeout [ 1572.025237][T23972] No control pipe specified [ 1574.389217][T23895] chnl_net:caif_netlink_parms(): no params data found [ 1575.387030][T24002] netlink: 'syz.4.5730': attribute type 4 has an invalid length. [ 1577.800038][T24021] No control pipe specified [ 1577.885274][T23895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.132741][T24024] befs: (nbd5): No write support. Marking filesystem read-only [ 1578.240346][T23895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.596874][T23895] bridge_slave_0: entered allmulticast mode [ 1578.609557][T24024] syz.5.5728: attempt to access beyond end of device [ 1578.609557][T24024] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1578.623817][T24024] befs: (nbd5): unable to read superblock [ 1578.634234][T23895] bridge_slave_0: entered promiscuous mode [ 1579.600424][T24023] bridge3: entered promiscuous mode [ 1579.648988][T23895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.724008][T23895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.958948][T23895] bridge_slave_1: entered allmulticast mode [ 1580.929071][T23895] bridge_slave_1: entered promiscuous mode [ 1582.396871][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1582.396895][ T30] audit: type=1326 audit(2000000215.159:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24043 comm="syz.7.5742" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84b778e969 code=0x0 [ 1582.501452][T23895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1582.584936][T23895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.049655][T24062] netlink: 'syz.2.5745': attribute type 4 has an invalid length. [ 1583.059711][T23895] team0: Port device team_slave_0 added [ 1583.385168][T23895] team0: Port device team_slave_1 added [ 1584.298052][T23895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.366126][T23895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.489845][T23895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.561383][ T6157] bridge_slave_1: left allmulticast mode [ 1584.588809][ T6157] bridge_slave_1: left promiscuous mode [ 1584.600072][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.573387][ T6157] bridge_slave_0: left allmulticast mode [ 1585.629200][ T6157] bridge_slave_0: left promiscuous mode [ 1585.635046][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.800278][T24080] overlayfs: missing 'lowerdir' [ 1585.850191][T24082] 9pnet_fd: Insufficient options for proto=fd [ 1585.929444][T24086] input: syz1 as /devices/virtual/input/input83 [ 1587.182013][ T2335] pvrusb2: request_firmware fatal error with code=-110 [ 1587.978260][ T2335] pvrusb2: Failure uploading firmware1 [ 1588.003177][ T2335] pvrusb2: Device initialization was not successful. [ 1588.172088][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1588.298893][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1588.363004][T10215] pvrusb2: Device being rendered inoperable [ 1589.424806][T24122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1590.884699][ T6157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1590.915228][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1590.944900][ T6157] bond0 (unregistering): Released all slaves [ 1590.986277][T23895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1591.032241][T23895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.119692][T23895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.445365][ T6157] hsr_slave_0: left promiscuous mode [ 1591.510852][ T6157] hsr_slave_1: left promiscuous mode [ 1591.517666][T24131] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5762'. [ 1591.538740][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1591.560099][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1591.596699][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1591.750167][ T6157] veth1_macvtap: left promiscuous mode [ 1591.764423][ T6157] veth0_macvtap: left promiscuous mode [ 1592.618162][ T6157] veth1_vlan: left promiscuous mode [ 1592.623664][ T6157] veth0_vlan: left promiscuous mode [ 1592.772434][T24150] overlayfs: missing 'lowerdir' [ 1595.831161][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 1595.954999][ T6157] team0 (unregistering): Port device team_slave_0 removed [ 1596.651680][T24143] tipc: Enabling of bearer rejected, failed to enable media [ 1596.769514][T23895] hsr_slave_0: entered promiscuous mode [ 1596.789711][T23895] hsr_slave_1: entered promiscuous mode [ 1597.411674][T24186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1599.044329][T24194] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5776'. [ 1599.987376][T24210] overlayfs: missing 'lowerdir' [ 1601.740463][T24226] tipc: Enabling of bearer rejected, failed to enable media [ 1602.149159][T24231] befs: (nbd4): No write support. Marking filesystem read-only [ 1602.229340][T24231] syz.4.5781: attempt to access beyond end of device [ 1602.229340][T24231] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1602.279077][T24231] befs: (nbd4): unable to read superblock [ 1602.309714][T24226] syzkaller0: entered promiscuous mode [ 1602.353399][T24226] syzkaller0: entered allmulticast mode [ 1604.088182][T24249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1604.376581][T24251] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5793'. [ 1605.503873][T24229] bridge2: entered promiscuous mode [ 1605.846804][T23895] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1606.160458][T23895] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1606.674313][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.680843][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.864126][T23895] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1607.372721][T23895] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1607.883606][T24274] netlink: 'syz.4.5799': attribute type 4 has an invalid length. [ 1607.903653][T24274] netlink: 'syz.4.5799': attribute type 4 has an invalid length. [ 1608.093347][T23895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1609.323826][T23895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1609.390242][T18861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.397399][T18861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1609.477834][T18861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.485157][T18861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1611.089164][T24299] tipc: Enabling of bearer rejected, failed to enable media [ 1611.355568][T24305] syzkaller0: entered promiscuous mode [ 1611.380411][T24305] syzkaller0: entered allmulticast mode [ 1613.720430][T24309] befs: (nbd9): No write support. Marking filesystem read-only [ 1613.728253][T24309] syz.9.5811: attempt to access beyond end of device [ 1613.728253][T24309] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1613.741692][T24309] befs: (nbd9): unable to read superblock [ 1616.337828][T23895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1616.382150][T24332] bridge2: entered promiscuous mode [ 1616.566160][T24339] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.783186][T24339] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.865186][T24356] overlayfs: missing 'lowerdir' [ 1617.940827][T24339] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.060969][T24339] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.388798][T24339] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.409490][T24339] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.427735][T24339] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.445324][T24339] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.056530][T24371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1619.572944][T23895] veth0_vlan: entered promiscuous mode [ 1620.352214][T24387] netlink: 'syz.9.5827': attribute type 4 has an invalid length. [ 1620.709048][T24383] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5828'. [ 1621.129931][T24390] fuse: Bad value for 'fd' [ 1621.386334][T24385] loop7: detected capacity change from 0 to 4096 [ 1621.462557][T24394] tipc: Enabling of bearer rejected, failed to enable media [ 1622.321297][T24394] syzkaller0: entered promiscuous mode [ 1622.341536][T24394] syzkaller0: entered allmulticast mode [ 1622.541102][T24405] netlink: 'syz.5.5833': attribute type 11 has an invalid length. [ 1622.549565][T24405] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5833'. [ 1623.052192][T24407] befs: (nbd4): No write support. Marking filesystem read-only [ 1623.060056][T24407] syz.4.5834: attempt to access beyond end of device [ 1623.060056][T24407] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1623.072883][T24407] befs: (nbd4): unable to read superblock [ 1623.380423][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1623.393111][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1623.401774][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1623.428883][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1623.441177][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1623.887065][T24416] befs: (nbd9): No write support. Marking filesystem read-only [ 1623.895551][T24416] syz.9.5831: attempt to access beyond end of device [ 1623.895551][T24416] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1623.908381][T24416] befs: (nbd9): unable to read superblock [ 1625.469398][ T5846] Bluetooth: hci0: command tx timeout [ 1627.549081][ T5846] Bluetooth: hci0: command tx timeout [ 1627.806157][T24415] bridge3: entered promiscuous mode [ 1628.122881][ T30] audit: type=1326 audit(2000000007.399:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24437 comm="syz.2.5842" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4514f8e969 code=0x0 [ 1628.852058][T24445] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5844'. [ 1629.304368][T24408] lo speed is unknown, defaulting to 1000 [ 1629.633136][ T5846] Bluetooth: hci0: command tx timeout [ 1630.533627][T24456] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1631.711012][ T5846] Bluetooth: hci0: command tx timeout [ 1631.718514][T24469] overlayfs: missing 'lowerdir' [ 1631.746067][T23855] bridge_slave_1: left allmulticast mode [ 1631.752124][T23855] bridge_slave_1: left promiscuous mode [ 1631.760974][T23855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.307551][T23855] bridge_slave_0: left allmulticast mode [ 1632.319047][T23855] bridge_slave_0: left promiscuous mode [ 1632.327205][T23855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.989349][T24507] befs: (nbd4): No write support. Marking filesystem read-only [ 1634.997613][T24507] syz.4.5853: attempt to access beyond end of device [ 1634.997613][T24507] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1635.010570][T24507] befs: (nbd4): unable to read superblock [ 1635.537890][T23855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1635.553367][T23855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1635.572312][T23855] bond0 (unregistering): Released all slaves [ 1635.708136][T24486] tipc: Enabling of bearer rejected, failed to enable media [ 1635.777510][T24505] bridge3: entered promiscuous mode [ 1635.915448][T24408] chnl_net:caif_netlink_parms(): no params data found [ 1636.073209][T23855] hsr_slave_0: left promiscuous mode [ 1636.116936][T23855] hsr_slave_1: left promiscuous mode [ 1636.130759][T23855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1636.175476][T23855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1636.251767][T23855] veth0_vlan: left promiscuous mode [ 1636.338741][T19104] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1636.851761][T19104] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1636.861803][T19104] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1636.876833][T19104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.046892][T19104] usb 5-1: config 0 descriptor?? [ 1637.222293][T19104] xbox_remote_probe: Unexpected endpoint_in [ 1637.258822][T19104] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1637.437285][T12268] usb 5-1: USB disconnect, device number 7 [ 1637.755084][T24535] loop7: detected capacity change from 0 to 4096 [ 1637.879718][T24542] netlink: 'syz.5.5872': attribute type 4 has an invalid length. [ 1640.160335][T23855] team0 (unregistering): Port device team_slave_1 removed [ 1641.247532][T23855] team0 (unregistering): Port device team_slave_0 removed [ 1641.929999][T24576] befs: (nbd7): No write support. Marking filesystem read-only [ 1641.937957][T24576] syz.7.5877: attempt to access beyond end of device [ 1641.937957][T24576] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1641.951077][T24576] befs: (nbd7): unable to read superblock [ 1643.251428][T24569] tipc: Enabling of bearer rejected, failed to enable media [ 1643.286298][T24574] bridge3: entered promiscuous mode [ 1644.268868][T24408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.282414][T24408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.290801][T24408] bridge_slave_0: entered allmulticast mode [ 1644.311004][T24408] bridge_slave_0: entered promiscuous mode [ 1645.602429][T24408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.653992][T24408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.684236][T24408] bridge_slave_1: entered allmulticast mode [ 1645.718890][T24408] bridge_slave_1: entered promiscuous mode [ 1645.977828][T24408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1646.052712][T24408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1647.342149][T24613] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5891'. [ 1648.322521][T24408] team0: Port device team_slave_0 added [ 1648.392607][T24408] team0: Port device team_slave_1 added [ 1648.881581][T24408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1648.954410][T24408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1649.307757][T24408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1649.322553][T24408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1649.331110][T24408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1649.405644][T24408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1650.128461][T24641] netlink: 'syz.5.5896': attribute type 4 has an invalid length. [ 1651.149935][T24408] hsr_slave_0: entered promiscuous mode [ 1651.156566][T24408] hsr_slave_1: entered promiscuous mode [ 1651.813281][T24667] bridge4: entered promiscuous mode [ 1651.844500][T24668] befs: (nbd5): No write support. Marking filesystem read-only [ 1651.852400][T24668] syz.5.5901: attempt to access beyond end of device [ 1651.852400][T24668] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1651.865715][T24668] befs: (nbd5): unable to read superblock [ 1653.785403][T24681] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5907'. [ 1655.241603][T24408] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1656.290545][T24408] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1656.539859][T24408] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1656.632551][T24408] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1657.552225][T24408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1657.677330][T24408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1657.724465][T21479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1657.731693][T21479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1657.917052][T12268] IPVS: starting estimator thread 0... [ 1658.009104][T24715] IPVS: using max 24 ests per chain, 57600 per kthread [ 1658.109925][ T6157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.117156][ T6157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1658.848884][T24408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1658.896339][T24408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1659.928069][T24730] netlink: 'syz.7.5923': attribute type 7 has an invalid length. [ 1661.447185][T23531] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1662.067553][T24408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1662.278789][T23531] usb 6-1: Using ep0 maxpacket: 16 [ 1662.324937][T23531] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1662.438675][T23531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1662.515692][T23531] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1662.555658][T23531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.621560][T23531] usb 6-1: Product: syz [ 1662.631819][T23531] usb 6-1: Manufacturer: syz [ 1662.648627][T23531] usb 6-1: SerialNumber: syz [ 1662.665078][T23531] usb 6-1: config 0 descriptor?? [ 1662.821943][T23531] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1662.852025][T23531] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1663.613073][T23531] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1663.983516][T23531] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1664.701033][T24408] veth0_vlan: entered promiscuous mode [ 1664.774336][T24408] veth1_vlan: entered promiscuous mode [ 1665.006654][T24408] veth0_macvtap: entered promiscuous mode [ 1665.032078][T24408] veth1_macvtap: entered promiscuous mode [ 1665.116806][T24408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.119257][T23531] em28xx 6-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1665.150438][T24408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.285587][T24408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.296978][T24408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.315329][T24408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.327972][T23531] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1665.942852][T23531] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1665.950127][T23531] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1666.041350][T23531] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1666.251562][T24408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.338870][T24408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1666.350100][T23531] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1666.356745][T24408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.366946][T23531] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1666.373591][T24408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1666.386921][T24408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.402753][T23531] usb 6-1: USB disconnect, device number 110 [ 1666.415653][T24408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1666.431000][T24408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.450294][T24408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1666.481507][T24408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1666.516254][T24408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.558176][T24408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1666.585825][T24408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.626937][T24408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1666.648006][T24408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.675685][T24408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1666.694633][T24408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.706568][T24408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1666.724247][T24408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.736351][T24408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1666.840860][T24408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.853441][T24408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1666.890679][T24817] befs: (nbd4): No write support. Marking filesystem read-only [ 1666.899083][T24817] syz.4.5948: attempt to access beyond end of device [ 1666.899083][T24817] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1666.915553][T24817] befs: (nbd4): unable to read superblock [ 1666.950976][T24408] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.981340][T24408] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.004909][T24408] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.078921][T24408] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.560891][ T6148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.582364][ T6148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.764162][ T6184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.793925][ T6184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.760126][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.766491][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.389052][T19104] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1670.647434][T19104] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1670.696539][T19104] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1670.790941][T19104] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.868914][ T5894] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1671.070200][ T6148] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.104561][T19104] usb 10-1: config 0 descriptor?? [ 1671.353761][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 1671.363407][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1671.381823][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1671.412703][ T5894] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1671.428735][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.477981][ T5894] usb 6-1: Product: syz [ 1671.482682][ T5894] usb 6-1: Manufacturer: syz [ 1671.487863][ T5894] usb 6-1: SerialNumber: syz [ 1671.497087][ T5894] usb 6-1: config 0 descriptor?? [ 1671.508274][ T5894] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1671.520998][ T6148] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.540400][ T5894] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1671.565593][T19104] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 1671.606669][T19104] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0022/input/input89 [ 1671.690445][ T6148] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.731708][T19104] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 1671.764785][T24849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1671.809388][T24849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1671.832223][T24859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1671.994689][ T6148] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.040878][T10215] usb 10-1: USB disconnect, device number 29 [ 1672.114674][ T5894] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1672.123766][ T5894] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1672.215183][ T6148] bridge_slave_1: left allmulticast mode [ 1672.221233][ T6148] bridge_slave_1: left promiscuous mode [ 1672.227205][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.240596][ T6148] bridge_slave_0: left allmulticast mode [ 1672.246279][ T6148] bridge_slave_0: left promiscuous mode [ 1672.253080][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.175433][ T5894] em28xx 6-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1673.229995][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1673.396641][ T5894] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1673.405696][ T5894] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1673.417973][ T5894] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1673.425352][ T5894] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1673.463543][ T5894] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1673.473296][ T5894] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1673.483863][ T5894] usb 6-1: USB disconnect, device number 111 [ 1673.782108][T18530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1673.797760][T18530] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1673.889834][T18530] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1673.898458][T18530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1673.908211][T18530] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1674.117103][T24883] befs: (nbd4): No write support. Marking filesystem read-only [ 1674.127979][T24883] syz.4.5965: attempt to access beyond end of device [ 1674.127979][T24883] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1674.141189][T24883] befs: (nbd4): unable to read superblock [ 1674.156889][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1674.170944][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1674.208553][ T6148] bond0 (unregistering): Released all slaves [ 1674.443358][T24879] lo speed is unknown, defaulting to 1000 [ 1675.774865][T24910] Lens B: ================= START STATUS ================= [ 1675.782624][T24910] Lens B: Focus, Absolute: 0 [ 1675.787324][T24910] Lens B: ================== END STATUS ================== [ 1675.959076][T18530] Bluetooth: hci0: command tx timeout [ 1676.969720][ T5894] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 1677.199010][ T5894] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1677.220508][ T5894] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1677.354001][ T5894] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1677.387751][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.633032][ T5894] usb 6-1: usb_control_msg returned -32 [ 1677.633076][ T5894] usbtmc 6-1:16.0: can't read capabilities [ 1678.039108][T18530] Bluetooth: hci0: command tx timeout [ 1678.074106][ T6148] hsr_slave_0: left promiscuous mode [ 1678.479545][ T6148] hsr_slave_1: left promiscuous mode [ 1679.129555][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1679.409009][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.454228][ T5894] usb 6-1: USB disconnect, device number 112 [ 1679.507373][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1679.568808][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1679.710134][ T6148] veth1_macvtap: left promiscuous mode [ 1679.719051][ T6148] veth0_macvtap: left promiscuous mode [ 1680.009968][ T6148] veth1_vlan: left promiscuous mode [ 1680.015602][ T6148] veth0_vlan: left promiscuous mode [ 1680.108692][T18530] Bluetooth: hci0: command tx timeout [ 1680.528925][T10215] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 1680.694414][T10215] usb 6-1: no configurations [ 1680.710438][T10215] usb 6-1: can't read configurations, error -22 [ 1680.902941][T10215] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 1681.080040][T10215] usb 6-1: no configurations [ 1681.084691][T10215] usb 6-1: can't read configurations, error -22 [ 1681.102049][T10215] usb usb6-port1: attempt power cycle [ 1681.625422][T10215] usb 6-1: new full-speed USB device number 115 using dummy_hcd [ 1681.668470][T10215] usb 6-1: no configurations [ 1681.675654][T10215] usb 6-1: can't read configurations, error -22 [ 1681.720891][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 1681.828851][T10215] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 1681.902207][T10215] usb 6-1: no configurations [ 1681.906861][T10215] usb 6-1: can't read configurations, error -22 [ 1681.953929][T10215] usb usb6-port1: unable to enumerate USB device [ 1682.226743][T18530] Bluetooth: hci0: command tx timeout [ 1682.468840][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 1684.667975][T24879] chnl_net:caif_netlink_parms(): no params data found [ 1685.459300][T24879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.469093][T24879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.476686][T24879] bridge_slave_0: entered allmulticast mode [ 1685.531093][T24879] bridge_slave_0: entered promiscuous mode [ 1685.567878][T24879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.593888][T24879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.618535][T24879] bridge_slave_1: entered allmulticast mode [ 1685.698871][ T5894] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1685.755271][T24879] bridge_slave_1: entered promiscuous mode [ 1685.947761][T24879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.963229][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 1685.983591][ T5894] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1686.003661][T24879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.029814][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.099868][ T5894] usb 6-1: config 0 descriptor?? [ 1686.141339][ T5894] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1686.436006][T24879] team0: Port device team_slave_0 added [ 1686.503469][T24879] team0: Port device team_slave_1 added [ 1686.923117][T24879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1686.931101][T24879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1687.639482][T24879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1687.656730][T24879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1687.664092][T24879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1687.668761][ T5894] gspca_sunplus: reg_w_riv err -110 [ 1687.695938][T24879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1687.787384][ T5894] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1687.972292][T24879] hsr_slave_0: entered promiscuous mode [ 1688.065165][T24879] hsr_slave_1: entered promiscuous mode [ 1688.319229][T23531] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1688.506871][T25027] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6008'. [ 1688.839997][T23531] usb 5-1: no configurations [ 1688.844627][T23531] usb 5-1: can't read configurations, error -22 [ 1688.995057][T23531] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1689.355489][T25034] kAFS: No cell specified [ 1689.526955][T23531] usb 5-1: no configurations [ 1689.562947][T23531] usb 5-1: can't read configurations, error -22 [ 1689.650444][T23531] usb usb5-port1: attempt power cycle [ 1690.114713][ T5894] usb 6-1: USB disconnect, device number 117 [ 1690.348737][T23531] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1690.386334][T23531] usb 5-1: no configurations [ 1690.391386][T23531] usb 5-1: can't read configurations, error -22 [ 1690.591747][T23531] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1690.650233][T23531] usb 5-1: no configurations [ 1690.655146][T23531] usb 5-1: can't read configurations, error -22 [ 1690.680664][T23531] usb usb5-port1: unable to enumerate USB device [ 1690.936656][T24879] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1690.971841][T24879] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1691.177255][T24879] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1691.969954][T24879] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1693.548330][T25067] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6021'. [ 1693.894414][T24879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1694.032446][T24879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1694.098596][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.105807][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.198358][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.205619][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.346147][T25071] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1694.499064][T25075] overlayfs: missing 'workdir' [ 1694.507967][T24879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1695.077696][T24879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1695.519052][T23296] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1695.738634][T23296] usb 6-1: Using ep0 maxpacket: 32 [ 1695.915674][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1695.920067][T23296] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1695.934930][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1696.058965][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1696.326243][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1696.388360][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1696.466785][T23296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.563368][T23296] usb 6-1: config 0 descriptor?? [ 1696.602425][T23296] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1696.636085][T24879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1696.687601][T25088] lo speed is unknown, defaulting to 1000 [ 1698.370494][T23296] gspca_sunplus: reg_w_riv err -71 [ 1698.378963][T23296] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1698.431003][T18530] Bluetooth: hci3: command tx timeout [ 1699.031301][T23296] usb 6-1: USB disconnect, device number 118 [ 1700.510027][T18530] Bluetooth: hci3: command tx timeout [ 1700.608412][T25088] chnl_net:caif_netlink_parms(): no params data found [ 1700.901608][T24879] veth0_vlan: entered promiscuous mode [ 1701.424812][T24879] veth1_vlan: entered promiscuous mode [ 1701.441127][T25088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.461023][T25088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.472721][T25152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6043'. [ 1701.495415][T25152] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6043'. [ 1701.505699][T25152] netlink: 'syz.7.6043': attribute type 14 has an invalid length. [ 1701.531163][T25088] bridge_slave_0: entered allmulticast mode [ 1701.544406][T25088] bridge_slave_0: entered promiscuous mode [ 1701.554427][T25088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.562550][T25088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.569929][T25088] bridge_slave_1: entered allmulticast mode [ 1701.580692][T25088] bridge_slave_1: entered promiscuous mode [ 1701.850216][T25088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.877075][T25088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.019005][T25158] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6045'. [ 1702.116611][T25159] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1702.219251][T25159] overlayfs: missing 'lowerdir' [ 1702.356831][T25088] team0: Port device team_slave_0 added [ 1702.402170][T25088] team0: Port device team_slave_1 added [ 1702.519921][T25088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1702.527028][T25088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1702.575407][T25088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1702.589065][T18530] Bluetooth: hci3: command tx timeout [ 1702.596873][T24879] veth0_macvtap: entered promiscuous mode [ 1702.625340][T24879] veth1_macvtap: entered promiscuous mode [ 1702.639448][T25088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1703.192499][T25088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1703.219626][T25088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.256838][ T30] audit: type=1326 audit(2000000009.699:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25168 comm="syz.9.6048" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc01c38e969 code=0x0 [ 1703.460607][T25088] hsr_slave_0: entered promiscuous mode [ 1703.710993][T25088] hsr_slave_1: entered promiscuous mode [ 1703.726343][T25088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1703.868393][T25088] Cannot create hsr debugfs directory [ 1704.078117][T24879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1704.165958][T24879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.176383][T24879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1704.207408][T24879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.238682][T24879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1704.430276][T24879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.517655][T24879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1704.669100][T18530] Bluetooth: hci3: command tx timeout [ 1704.669127][T24879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.669188][T24879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1704.798717][T24879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.809439][T24879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1704.825305][T24879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.913673][T24879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1704.926103][T24879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.948369][T25190] Lens B: ================= START STATUS ================= [ 1704.956043][T24879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.978781][T25190] Lens B: Focus, Absolute: 0 [ 1704.985795][T24879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.019079][T25190] Lens B: ================== END STATUS ================== [ 1705.106403][T24879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.116876][T24879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.127592][T24879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.138041][T24879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.149150][T24879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.159553][T24879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.170427][T24879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.185533][T24879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.197253][T24879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.211136][T24879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1705.356137][T24879] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.565308][T24879] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.582374][T24879] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.604156][T25194] netlink: 1624 bytes leftover after parsing attributes in process `syz.9.6055'. [ 1706.429520][T24879] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.580140][T10215] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1707.754630][T10215] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1707.776906][T10215] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1707.808803][T10215] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.836471][T10215] usb 10-1: config 0 descriptor?? [ 1707.880826][ T30] audit: type=1326 audit(2000000014.329:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.7.6063" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84b778e969 code=0x0 [ 1708.001166][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1708.014187][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1708.127953][ T6184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1708.138266][ T6184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1708.263388][T10215] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 1708.277056][T10215] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0023/input/input90 [ 1708.366212][T10215] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 1708.513528][T25088] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1708.614323][ T6185] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.675443][T25088] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1708.699556][ T5892] usb 10-1: USB disconnect, device number 30 [ 1708.737213][T25088] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1708.822572][ T6185] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.857915][T25088] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1708.983431][ T6185] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.067787][ T6185] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.101597][T25088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1709.129836][T25088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1709.158305][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.165497][ T6148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1709.189802][T23856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.196998][T23856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1709.294434][ T6185] bridge_slave_1: left allmulticast mode [ 1709.301364][ T6185] bridge_slave_1: left promiscuous mode [ 1709.307107][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.319365][ T6185] bridge_slave_0: left allmulticast mode [ 1709.325015][ T6185] bridge_slave_0: left promiscuous mode [ 1709.331936][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.709164][T25237] Lens B: ================= START STATUS ================= [ 1710.716571][T25237] Lens B: Focus, Absolute: 0 [ 1710.922469][T25237] Lens B: ================== END STATUS ================== [ 1711.355664][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1711.366199][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1711.374215][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1711.418113][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1711.433116][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1712.728748][ T5894] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1712.924453][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 1712.936387][ T5894] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1713.129819][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.176974][ T5894] usb 6-1: config 0 descriptor?? [ 1713.233202][ T5894] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1713.246986][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1713.409725][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1713.419736][ T6185] bond0 (unregistering): Released all slaves [ 1713.469029][ T5846] Bluetooth: hci0: command tx timeout [ 1713.748605][T25241] lo speed is unknown, defaulting to 1000 [ 1714.062303][ T6185] hsr_slave_0: left promiscuous mode [ 1714.087837][ T6185] hsr_slave_1: left promiscuous mode [ 1714.106624][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1714.125807][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.158106][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.181322][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1714.278583][ T6185] veth1_macvtap: left promiscuous mode [ 1714.299555][ T6185] veth0_macvtap: left promiscuous mode [ 1714.316691][ T6185] veth1_vlan: left promiscuous mode [ 1714.332067][ T6185] veth0_vlan: left promiscuous mode [ 1714.512102][ T30] audit: type=1326 audit(2000000020.959:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25273 comm="syz.9.6077" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc01c38e969 code=0x0 [ 1714.825058][ T5894] gspca_sunplus: reg_w_riv err -71 [ 1714.839668][ T5894] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1714.872408][ T5894] usb 6-1: USB disconnect, device number 119 [ 1715.203794][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 1715.259865][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 1715.549895][ T5846] Bluetooth: hci0: command tx timeout [ 1717.637123][T25286] virtio-fs: tag not found [ 1717.658993][ T5846] Bluetooth: hci0: command tx timeout [ 1718.791789][T25303] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.6084'. [ 1718.892943][T25307] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.6086'. [ 1718.954604][T25309] No control pipe specified [ 1719.818683][ T5846] Bluetooth: hci0: command tx timeout [ 1719.825949][T25088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1722.973184][T25241] chnl_net:caif_netlink_parms(): no params data found [ 1724.863751][T25373] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.6101'. [ 1725.752884][T25367] virtio-fs: tag not found [ 1725.870138][T25380] No control pipe specified [ 1725.943562][T25241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.974140][T25241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.003519][T25241] bridge_slave_0: entered allmulticast mode [ 1726.020375][T25241] bridge_slave_0: entered promiscuous mode [ 1726.113063][T25088] veth0_vlan: entered promiscuous mode [ 1726.119763][T25241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.127005][T25241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.190587][T25241] bridge_slave_1: entered allmulticast mode [ 1726.223175][T25241] bridge_slave_1: entered promiscuous mode [ 1726.372529][T25241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1727.655735][T25088] veth1_vlan: entered promiscuous mode [ 1727.702843][T25241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1727.974245][T25241] team0: Port device team_slave_0 added [ 1727.995627][T25241] team0: Port device team_slave_1 added [ 1728.301794][T25241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1728.426345][T25406] befs: (nbd5): No write support. Marking filesystem read-only [ 1728.435447][T25406] syz.5.6109: attempt to access beyond end of device [ 1728.435447][T25406] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1728.448703][T25406] befs: (nbd5): unable to read superblock [ 1729.108793][T25241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.563682][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.577085][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.675303][T25241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1729.751475][T25241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1729.787845][T25241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.875263][T25241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1729.937202][T25088] veth0_macvtap: entered promiscuous mode [ 1731.267746][T25088] veth1_macvtap: entered promiscuous mode [ 1731.447375][T25241] hsr_slave_0: entered promiscuous mode [ 1731.491516][T25241] hsr_slave_1: entered promiscuous mode [ 1732.980655][T25088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.037658][T25088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.210606][T25088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.239374][T25088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.265143][T25088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.306233][T25088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.326897][T25088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.500720][T25088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.558714][T25088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.593192][T25088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.620127][T25088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.647872][T25088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.899043][T25088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1734.685409][T25088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.716865][T25088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.738975][T25088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.750242][T25088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.760139][T25088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.770737][T25088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.801695][T25088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.824220][T25088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.879399][T25088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.923512][T25088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.953713][T25088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.986173][T25088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.014670][T25088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1735.149983][T25088] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.197202][T25088] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.224026][T25088] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.264788][T25088] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.970200][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.978793][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.092734][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.148095][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.341071][T25241] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1737.389329][T25241] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1737.435650][T25241] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1737.538199][T25241] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1738.342746][T25241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1738.546876][T25241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1738.602687][T21479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.609939][T21479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1738.720314][T21479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.727595][T21479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1740.575043][T25495] input: syz1 as /devices/virtual/input/input91 [ 1741.841727][T25241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1742.968207][T25241] veth0_vlan: entered promiscuous mode [ 1743.049097][T25241] veth1_vlan: entered promiscuous mode [ 1743.212144][T25241] veth0_macvtap: entered promiscuous mode [ 1743.265217][T25241] veth1_macvtap: entered promiscuous mode [ 1743.354821][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1743.411321][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.447643][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1743.479348][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.498901][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1743.530772][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.561013][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1743.604503][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.662117][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1743.719804][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.769020][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1743.836343][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1743.891364][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1743.938363][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.012008][T25241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1744.078238][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1744.108081][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.161203][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1744.219945][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.305149][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1744.316268][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.328311][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1744.348449][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.359375][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1744.379841][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.407306][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1744.430721][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.455420][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1744.484402][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1744.524025][T25241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1744.587895][T25241] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.668051][T25241] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.707638][T25241] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.726788][T25241] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.659128][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1745.707127][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1745.827135][T23629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1745.853974][T23629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1746.080459][T25556] input: syz1 as /devices/virtual/input/input92 [ 1748.081997][ T6157] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.241566][ T6157] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.384922][ T6157] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.476276][ T6157] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.749302][ T6157] bridge_slave_1: left allmulticast mode [ 1748.755456][ T6157] bridge_slave_1: left promiscuous mode [ 1748.763582][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.782238][ T6157] bridge_slave_0: left allmulticast mode [ 1748.788089][ T6157] bridge_slave_0: left promiscuous mode [ 1748.795678][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.553263][T18958] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1750.725779][T18958] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.766173][T18958] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1750.799065][T18958] usb 10-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1750.867848][T18958] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.936553][T18958] usb 10-1: config 0 descriptor?? [ 1751.164646][T18958] usb 10-1: USB disconnect, device number 31 [ 1751.694378][T18530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1751.711503][T18530] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1751.719926][T18530] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1751.730527][T18530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1751.739152][T18530] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1751.785666][ T6157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1751.955148][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1752.020238][ T6157] bond0 (unregistering): Released all slaves [ 1752.227338][T25592] lo speed is unknown, defaulting to 1000 [ 1752.548637][T18958] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1752.738974][T18958] usb 5-1: Using ep0 maxpacket: 16 [ 1752.819043][T18958] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1752.829628][T18958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.837803][T18958] usb 5-1: Product: syz [ 1752.842898][T18958] usb 5-1: Manufacturer: syz [ 1752.847617][T18958] usb 5-1: SerialNumber: syz [ 1752.974884][T18958] usb 5-1: config 0 descriptor?? [ 1753.025847][T18958] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1753.037430][T18958] usb 5-1: Detected FT232H [ 1753.226055][T18958] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1753.790270][T18530] Bluetooth: hci0: command tx timeout [ 1754.307222][T18958] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5 [ 1754.879626][T18958] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1754.980025][ T5990] usb 5-1: USB disconnect, device number 12 [ 1755.033075][ T5990] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1755.062546][T25627] netlink: 'syz.7.6169': attribute type 7 has an invalid length. [ 1755.115751][ T5990] ftdi_sio 5-1:0.0: device disconnected [ 1755.272249][ T6157] hsr_slave_0: left promiscuous mode [ 1755.291590][ T6157] hsr_slave_1: left promiscuous mode [ 1755.337072][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1755.453464][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1755.487271][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1755.495448][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1755.869359][T18530] Bluetooth: hci0: command tx timeout [ 1756.742094][ T6157] veth1_macvtap: left promiscuous mode [ 1756.747673][ T6157] veth0_macvtap: left promiscuous mode [ 1756.868909][ T6157] veth1_vlan: left promiscuous mode [ 1756.884036][ T6157] veth0_vlan: left promiscuous mode [ 1757.951345][T18530] Bluetooth: hci0: command tx timeout [ 1759.010941][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 1759.090309][ T6157] team0 (unregistering): Port device team_slave_0 removed [ 1759.811129][T25592] chnl_net:caif_netlink_parms(): no params data found [ 1760.029156][T18530] Bluetooth: hci0: command tx timeout [ 1760.247066][T25673] input: syz1 as /devices/virtual/input/input93 [ 1760.664362][T25592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.680721][T25667] virtio-fs: tag not found [ 1760.719160][T25592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.767251][T25592] bridge_slave_0: entered allmulticast mode [ 1760.779110][T25592] bridge_slave_0: entered promiscuous mode [ 1760.787865][T25592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.795862][T25592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.803860][T25592] bridge_slave_1: entered allmulticast mode [ 1760.814591][T25592] bridge_slave_1: entered promiscuous mode [ 1761.024593][T25592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1761.062603][T25592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1761.114512][T25678] netlink: 'syz.7.6184': attribute type 7 has an invalid length. [ 1762.129214][T25592] team0: Port device team_slave_0 added [ 1762.231677][T25592] team0: Port device team_slave_1 added [ 1762.501123][T25592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1762.508141][T25592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1762.580894][T25592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1762.652010][T25592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1762.707025][T25592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1762.820007][T25592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1763.949447][T18530] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1763.955940][ T5846] Bluetooth: hci8: command 0x1003 tx timeout [ 1764.077292][T25715] IPVS: stopping master sync thread 25718 ... [ 1764.085818][T25718] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1764.089324][T25592] hsr_slave_0: entered promiscuous mode [ 1764.112556][T25592] hsr_slave_1: entered promiscuous mode [ 1764.358426][T25719] fuse: Unknown parameter 'grou00000000000000000000' [ 1765.165417][T25729] netlink: 'syz.4.6198': attribute type 7 has an invalid length. [ 1768.823549][T25773] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1769.390781][T10215] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1769.593505][T10215] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1769.634312][T10215] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1769.788748][T10215] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1769.828348][T10215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.045337][T25781] fuse: Unknown parameter 'group_i00000000000000000000' [ 1770.155371][T10215] usb 5-1: usb_control_msg returned -32 [ 1770.748688][T18530] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1770.748839][ T5846] Bluetooth: hci8: command 0x1003 tx timeout [ 1770.807792][T10215] usbtmc 5-1:16.0: can't read capabilities [ 1770.827546][T10215] usb 5-1: USB disconnect, device number 13 [ 1770.907968][T25592] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1770.945267][T25592] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1771.024858][T25592] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1771.110411][T25592] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1772.714677][T25592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1773.532367][T25592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1774.293618][T21479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.300836][T21479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1774.378078][T21479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.385271][T21479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1774.592915][T25826] fuse: Unknown parameter 'group_id00000000000000000000' [ 1774.689794][T25830] fuse: Unknown parameter 'group_i00000000000000000000' [ 1776.337226][T25592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1776.344434][T25841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6232'. [ 1776.353432][T25841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6232'. [ 1776.362566][T25841] netlink: 'syz.6.6232': attribute type 14 has an invalid length. [ 1778.349265][T25863] netlink: 'syz.4.6238': attribute type 7 has an invalid length. [ 1778.444140][T25866] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.6239'. [ 1778.789307][T25873] fuse: Bad value for 'user_id' [ 1778.794348][T25873] fuse: Bad value for 'user_id' [ 1779.504226][T25879] fuse: Unknown parameter 'group_i00000000000000000000' [ 1779.517008][T25592] veth0_vlan: entered promiscuous mode [ 1779.566188][T25592] veth1_vlan: entered promiscuous mode [ 1780.090909][ T30] audit: type=1804 audit(2000000086.519:97): pid=25888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.6246" name="/newroot/330/file0" dev="tmpfs" ino=1817 res=1 errno=0 [ 1780.199205][T25889] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6247'. [ 1780.208280][T25889] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6247'. [ 1780.217202][T25889] netlink: 'syz.9.6247': attribute type 14 has an invalid length. [ 1780.260911][T25888] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1780.262838][T25592] veth0_macvtap: entered promiscuous mode [ 1780.294661][T25592] veth1_macvtap: entered promiscuous mode [ 1780.365383][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1780.367829][T25888] ref_ctr increment failed for inode: 0x719 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888077868000 [ 1780.376001][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.405441][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1780.433202][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.462918][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1781.304953][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.318626][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1781.352307][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.376019][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1781.409890][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.433366][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1781.447329][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.457338][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1781.468785][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.482231][T25592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.861053][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.106202][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.119194][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.130950][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.146503][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.183670][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.204417][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.217221][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.409884][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.423782][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.437231][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.630970][T25917] befs: (nbd4): No write support. Marking filesystem read-only [ 1782.640575][T25917] syz.4.6253: attempt to access beyond end of device [ 1782.640575][T25917] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1782.654173][T25917] befs: (nbd4): unable to read superblock [ 1783.120976][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.202536][T25592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1783.214158][T25592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.668061][T25592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1783.912507][T25592] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.957110][T25592] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.016266][T25592] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.017291][T25923] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.6255'. [ 1784.081990][T25592] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.756936][T25931] fuse: Bad value for 'user_id' [ 1784.900894][T25931] fuse: Bad value for 'user_id' [ 1785.326567][T25939] fuse: Unknown parameter 'group_id00000000000000000000' [ 1785.386159][T18861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1785.414422][T18861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1785.441925][T25941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6263'. [ 1785.451174][T25941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6263'. [ 1785.460081][T25941] netlink: 'syz.5.6263': attribute type 14 has an invalid length. [ 1785.577265][T23856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1785.633985][T23531] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1786.332072][T23856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1786.858491][T23531] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1787.020728][T23531] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1787.205235][T23531] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1787.214390][T23531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.445952][T23531] usb 5-1: usb_control_msg returned -32 [ 1787.466513][T23531] usbtmc 5-1:16.0: can't read capabilities [ 1787.518364][T23531] usb 5-1: USB disconnect, device number 14 [ 1787.723423][T21479] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.121125][T21479] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.288052][T21479] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.564901][T21479] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.772619][T21479] bridge_slave_1: left allmulticast mode [ 1788.778308][T21479] bridge_slave_1: left promiscuous mode [ 1788.798448][T21479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.826767][T21479] bridge_slave_0: left allmulticast mode [ 1788.832524][T21479] bridge_slave_0: left promiscuous mode [ 1788.858608][T21479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1790.101414][T25979] netlink: 1688 bytes leftover after parsing attributes in process `syz.9.6274'. [ 1790.183078][T25981] fuse: Bad value for 'user_id' [ 1790.188109][T25981] fuse: Bad value for 'user_id' [ 1790.329682][T25985] fuse: Unknown parameter 'group_id00000000000000000000' [ 1791.599404][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.606152][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.713496][T25999] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1791.724376][T25999] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1791.733279][T25999] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1791.742414][T25999] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1791.753256][T25999] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1793.709944][T25999] Bluetooth: hci8: command 0xfc11 tx timeout [ 1793.727857][ T5846] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 1794.152745][T21479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1794.188433][T21479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1794.211268][T21479] bond0 (unregistering): Released all slaves [ 1794.340345][ T10] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1794.363006][T25991] lo speed is unknown, defaulting to 1000 [ 1794.528945][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1794.557726][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1794.629725][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.647216][ T10] usb 6-1: config 0 descriptor?? [ 1794.673828][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1794.749133][ T5846] Bluetooth: hci0: command tx timeout [ 1795.148149][T21479] hsr_slave_0: left promiscuous mode [ 1795.798901][ T10] gspca_sunplus: reg_w_riv err -110 [ 1795.851629][T21479] hsr_slave_1: left promiscuous mode [ 1795.867903][ T10] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1795.889658][T21479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1795.958058][T21479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.459993][T21479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1796.486946][T26033] fuse: Bad value for 'fd' [ 1796.569966][T21479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.343090][ T5846] Bluetooth: hci0: command tx timeout [ 1798.448149][T21479] veth1_macvtap: left promiscuous mode [ 1798.462299][T21479] veth0_macvtap: left promiscuous mode [ 1798.467907][T21479] veth1_vlan: left promiscuous mode [ 1798.473599][T21479] veth0_vlan: left promiscuous mode [ 1798.648649][T23296] usb 6-1: USB disconnect, device number 120 [ 1800.424282][T26058] netlink: 'syz.5.6298': attribute type 72 has an invalid length. [ 1800.429759][T25999] Bluetooth: hci0: command tx timeout [ 1801.084747][T26064] vivid-000: disconnect [ 1801.196411][T26065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6300'. [ 1801.290513][T26066] vivid-000: reconnect [ 1801.908432][T21479] team0 (unregistering): Port device team_slave_1 removed [ 1801.936978][T26068] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.6301'. [ 1801.985448][T21479] team0 (unregistering): Port device team_slave_0 removed [ 1802.430165][T25999] Bluetooth: hci8: command 0xfc11 tx timeout [ 1802.437757][ T5846] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 1802.510951][ T5846] Bluetooth: hci0: command tx timeout [ 1802.656604][T26074] fuse: Bad value for 'fd' [ 1802.956287][T26065] vcan0: entered promiscuous mode [ 1802.961574][T26065] vcan0: entered allmulticast mode [ 1803.497995][ T10] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1804.063803][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1804.077652][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1804.122413][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.188413][ T10] usb 6-1: config 0 descriptor?? [ 1804.242213][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1804.351609][T25991] chnl_net:caif_netlink_parms(): no params data found [ 1805.233657][T25991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.266248][T25991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.297285][T25991] bridge_slave_0: entered allmulticast mode [ 1805.517017][T25991] bridge_slave_0: entered promiscuous mode [ 1806.304162][T25991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.311748][T25991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.319980][T25991] bridge_slave_1: entered allmulticast mode [ 1806.328029][T25991] bridge_slave_1: entered promiscuous mode [ 1806.380240][ T10] gspca_sunplus: reg_w_riv err -71 [ 1806.385497][ T10] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1806.448310][ T10] usb 6-1: USB disconnect, device number 121 [ 1806.567986][T26108] netlink: 'syz.6.6312': attribute type 72 has an invalid length. [ 1806.597789][T25991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1806.646042][T25991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1807.492064][T25991] team0: Port device team_slave_0 added [ 1808.203379][T25991] team0: Port device team_slave_1 added [ 1808.277246][T26121] fuse: Bad value for 'fd' [ 1808.471098][T25991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1808.520153][T25991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1808.627180][T25991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1808.659568][T25991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1808.666517][T25991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1808.744965][T25991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1808.981024][T25991] hsr_slave_0: entered promiscuous mode [ 1809.008370][T25991] hsr_slave_1: entered promiscuous mode [ 1809.039040][T18958] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 1809.244071][T18958] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.272906][T18958] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1809.309145][T18958] usb 10-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1809.353779][T18958] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.380694][T18958] usb 10-1: config 0 descriptor?? [ 1809.413296][T18958] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1809.610662][T18958] usb 10-1: USB disconnect, device number 32 [ 1809.708937][ T5846] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 1809.740160][T26118] sp0: Synchronizing with TNC [ 1810.998483][T25991] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1811.063013][T25991] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1811.113216][T25991] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1811.184074][T25991] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1811.468789][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1812.055706][T25991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1812.144738][T25991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1812.192587][ T6157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.199763][ T6157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1812.250365][T23856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.255125][T26148] netlink: 'syz.4.6327': attribute type 72 has an invalid length. [ 1812.257506][T23856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1813.469488][T26157] fuse: Bad value for 'fd' [ 1814.158669][T26174] befs: (nbd4): No write support. Marking filesystem read-only [ 1814.167732][T26174] syz.4.6333: attempt to access beyond end of device [ 1814.167732][T26174] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1814.181378][T26174] befs: (nbd4): unable to read superblock [ 1816.440286][T25991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1816.992290][T26199] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.6341'. [ 1818.025534][T26210] Lens B: ================= START STATUS ================= [ 1818.033118][T26210] Lens B: Focus, Absolute: 0 [ 1818.037753][T26210] Lens B: ================== END STATUS ================== [ 1818.749662][T18530] Bluetooth: hci3: command 0x0406 tx timeout [ 1818.836563][T25999] block nbd5: Receive control failed (result -32) [ 1818.839069][T26211] block nbd5: shutting down sockets [ 1819.856623][T25991] veth0_vlan: entered promiscuous mode [ 1819.885264][T25991] veth1_vlan: entered promiscuous mode [ 1819.984318][T25991] veth0_macvtap: entered promiscuous mode [ 1820.017079][T25991] veth1_macvtap: entered promiscuous mode [ 1820.076089][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1820.570955][T26237] befs: (nbd6): No write support. Marking filesystem read-only [ 1820.580254][T26237] syz.6.6349: attempt to access beyond end of device [ 1820.580254][T26237] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1820.593895][T26237] befs: (nbd6): unable to read superblock [ 1821.045968][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.056214][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1821.066831][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.086430][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1821.189678][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.266227][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1821.361047][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.426365][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1821.511950][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.608396][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1823.363649][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1823.484770][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1823.878634][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1823.939911][T25991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1823.986904][T26250] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.6355'. [ 1824.069199][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1824.267301][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.291521][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1824.302313][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.318905][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1824.333613][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.148719][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1825.188479][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.205672][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1825.248627][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.268623][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1825.461583][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.472392][T25991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1825.487394][T25991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.499636][T25991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1826.202853][T25991] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.231498][T25991] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.241856][T25991] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.251222][T25991] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.278142][T12268] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1826.499475][T18958] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1826.919158][ T30] audit: type=1800 audit(2000000133.359:98): pid=26277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6361" name="bus" dev="overlay" ino=1790 res=0 errno=0 [ 1826.939788][ C0] vkms_vblank_simulate: vblank timer overrun [ 1829.271169][T23856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1829.296565][T23856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1829.379389][T26293] befs: (nbd6): No write support. Marking filesystem read-only [ 1829.389212][T26293] syz.6.6366: attempt to access beyond end of device [ 1829.389212][T26293] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1829.402525][T26293] befs: (nbd6): unable to read superblock [ 1829.445620][ T31] INFO: task syz.2.5977:24929 blocked for more than 143 seconds. [ 1830.259007][ T31] Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 [ 1830.270988][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1830.475449][T18861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.475711][ T31] task:syz.2.5977 state:D stack:25400 pid:24929 tgid:24929 ppid:17098 task_flags:0x400040 flags:0x00000004 [ 1830.498857][ T31] Call Trace: [ 1830.502227][ T31] [ 1830.505246][ T31] __schedule+0x16e2/0x4cd0 [ 1830.510169][ T31] ? schedule+0x165/0x360 [ 1830.514610][ T31] ? __pfx___schedule+0x10/0x10 [ 1830.518635][T18861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.528644][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1830.534395][ T31] ? schedule+0x91/0x360 [ 1830.538890][ T31] schedule+0x165/0x360 [ 1830.545358][ T31] schedule_preempt_disabled+0x13/0x30 [ 1830.572339][ T31] __mutex_lock+0x724/0xe80 [ 1830.582620][ T31] ? __mutex_lock+0x51b/0xe80 [ 1830.598773][ T31] ? nfsd_shutdown_threads+0x4e/0xd0 [ 1830.604133][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1830.618610][ T31] ? net_generic+0x1e/0x240 [ 1830.623157][ T31] ? net_generic+0x1e/0x240 [ 1830.627690][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1830.648591][ T31] nfsd_shutdown_threads+0x4e/0xd0 [ 1830.653749][ T31] nfsd_umount+0x42/0xd0 [ 1830.658016][ T31] deactivate_locked_super+0xbc/0x130 [ 1830.664750][ T31] put_fs_context+0x93/0x790 [ 1830.670198][ T31] ? __pfx_fscontext_release+0x10/0x10 [ 1830.675793][ T31] fscontext_release+0x62/0x80 [ 1830.681258][ T31] __fput+0x44c/0xa70 [ 1830.688793][ T31] task_work_run+0x1d4/0x260 [ 1830.693738][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1830.708625][ T31] resume_user_mode_work+0x5e/0x80 [ 1830.713987][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 1830.719727][ T31] do_syscall_64+0x103/0x210 [ 1830.724470][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1830.730906][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1830.736896][ T31] RIP: 0033:0x7f4514f8e969 [ 1830.741596][ T31] RSP: 002b:00007ffce4bb81c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1830.750236][ T31] RAX: 0000000000000000 RBX: 00007f45151b7ba0 RCX: 00007f4514f8e969 [ 1830.758272][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1830.767312][ T31] RBP: 00007f45151b7ba0 R08: 0000000000000198 R09: 00000016e4bb84bf [ 1830.775475][ T31] R10: 00007f45151b7ac0 R11: 0000000000000246 R12: 0000000000199e3b [ 1830.783634][ T31] R13: 00007f45151b6160 R14: ffffffffffffffff R15: 00007ffce4bb82e0 [ 1830.792102][ T31] [ 1830.795151][ T31] [ 1830.795151][ T31] Showing all locks held in the system: [ 1830.807313][ T31] 1 lock held by khungtaskd/31: [ 1830.817559][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1830.827599][ T31] 2 locks held by getty/5584: [ 1830.832536][ T31] #0: ffff8880309ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1830.842680][ T31] #1: ffffc900036d32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1830.853018][ T31] 2 locks held by syz.0.5250/22317: [ 1830.858237][ T31] #0: ffffffff8f35b970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1830.867466][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 1830.883092][ T31] 2 locks held by syz.2.5977/24929: [ 1830.889740][ T31] #0: ffff88804384c0e0 (&type->s_umount_key#88){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1830.904742][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1830.915506][ T31] 1 lock held by syz-executor/25991: [ 1830.921151][ T31] #0: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 1830.932287][ T31] [ 1830.934629][ T31] ============================================= [ 1830.934629][ T31] [ 1830.948307][ T31] NMI backtrace for cpu 1 [ 1830.948326][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 1830.948356][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1830.948373][ T31] Call Trace: [ 1830.948382][ T31] [ 1830.948393][ T31] dump_stack_lvl+0x189/0x250 [ 1830.948432][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1830.948463][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1830.948496][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1830.948537][ T31] ? __pfx__printk+0x10/0x10 [ 1830.948579][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1830.948618][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1830.948641][ T31] ? _printk+0xcf/0x120 [ 1830.948671][ T31] ? __pfx__printk+0x10/0x10 [ 1830.948699][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1830.948729][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1830.948760][ T31] watchdog+0xfee/0x1030 [ 1830.948796][ T31] ? watchdog+0x1de/0x1030 [ 1830.948839][ T31] kthread+0x711/0x8a0 [ 1830.948874][ T31] ? __pfx_watchdog+0x10/0x10 [ 1830.948906][ T31] ? __pfx_kthread+0x10/0x10 [ 1830.948936][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1830.948967][ T31] ? __pfx_kthread+0x10/0x10 [ 1830.948998][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1830.949026][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1830.949055][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1830.949086][ T31] ? __pfx_kthread+0x10/0x10 [ 1830.949116][ T31] ret_from_fork+0x4e/0x80 [ 1830.949142][ T31] ? __pfx_kthread+0x10/0x10 [ 1830.949173][ T31] ret_from_fork_asm+0x1a/0x30 [ 1830.949215][ T31] [ 1831.108323][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1831.113985][ C0] NMI backtrace for cpu 0 [ 1831.114004][ C0] CPU: 0 UID: 0 PID: 5812 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 1831.114031][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1831.114045][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 1831.114071][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 7c d1 7a 00 48 c7 c3 58 bb 76 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d 49 76 ce 10 74 11 83 e0 04 c1 e8 02 5b [ 1831.114091][ C0] RSP: 0018:ffffc90003e67a60 EFLAGS: 00000212 [ 1831.114111][ C0] RAX: 0000000000000000 RBX: ffff8880b8832b58 RCX: 4804e4350086f900 [ 1831.114128][ C0] RDX: ffff88807735bc00 RSI: ffffffff8bc1d980 RDI: ffffffff8bc1d940 [ 1831.114146][ C0] RBP: ffffc90003e67bf8 R08: 0000000000000000 R09: 0000000000000000 [ 1831.114160][ C0] R10: 0000000000000000 R11: ffffffff84760fbf R12: 0000000000000000 [ 1831.114176][ C0] R13: ffffffff84760fbf R14: ffffffff8d96fc20 R15: dffffc0000000000 [ 1831.114195][ C0] FS: 000055557220e500(0000) GS:ffff8881260c7000(0000) knlGS:0000000000000000 [ 1831.114215][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1831.114231][ C0] CR2: 00007ffeca77bbc8 CR3: 0000000076d01000 CR4: 0000000000350ef0 [ 1831.114249][ C0] Call Trace: [ 1831.114258][ C0] [ 1831.114269][ C0] aa_file_perm+0x313/0xed0 [ 1831.114298][ C0] ? schedule+0x165/0x360 [ 1831.114328][ C0] ? __lock_acquire+0xaac/0xd20 [ 1831.114368][ C0] ? __pfx_aa_file_perm+0x10/0x10 [ 1831.114394][ C0] ? __free_object+0x4d4/0x6c0 [ 1831.114415][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.114442][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1831.114471][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.114499][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1831.114529][ C0] common_file_perm+0x18f/0x200 [ 1831.114558][ C0] security_file_permission+0x91/0x290 [ 1831.114610][ C0] rw_verify_area+0xba/0x650 [ 1831.114640][ C0] vfs_read+0x154/0x980 [ 1831.114671][ C0] ? __pfx_vfs_read+0x10/0x10 [ 1831.114695][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.114725][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.114751][ C0] ? rcu_is_watching+0x15/0xb0 [ 1831.114771][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.114797][ C0] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 1831.114827][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.114856][ C0] ksys_read+0x145/0x250 [ 1831.114881][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.114907][ C0] ? rcu_is_watching+0x15/0xb0 [ 1831.114928][ C0] ? __pfx_ksys_read+0x10/0x10 [ 1831.114956][ C0] ? do_syscall_64+0xba/0x210 [ 1831.114989][ C0] do_syscall_64+0xf6/0x210 [ 1831.115019][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.115045][ C0] ? exc_page_fault+0x91/0x110 [ 1831.115073][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.115095][ C0] RIP: 0033:0x7f1df038d33d [ 1831.115114][ C0] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d 01 72 1f 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 1831.115132][ C0] RSP: 002b:00007fff543604e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1831.115154][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1df038d33d [ 1831.115170][ C0] RDX: 0000000000000004 RSI: 00007fff543604fc RDI: 0000000000000003 [ 1831.115185][ C0] RBP: 0000000000000000 R08: 0000000037bde6f3 R09: 7fffffffffffffff [ 1831.115201][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff54360910 [ 1831.115216][ C0] R13: 0000000000000004 R14: 00007fff543604fc R15: 00007fff54360590 [ 1831.115244][ C0] [ 1831.468817][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1831.475689][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 1831.487501][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1831.497561][ T31] Call Trace: [ 1831.500840][ T31] [ 1831.503772][ T31] dump_stack_lvl+0x99/0x250 [ 1831.508377][ T31] ? __asan_memcpy+0x40/0x70 [ 1831.512969][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1831.518186][ T31] ? __pfx__printk+0x10/0x10 [ 1831.522792][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.528441][ T31] panic+0x2db/0x790 [ 1831.532350][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.538004][ T31] ? __pfx_panic+0x10/0x10 [ 1831.542435][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 1831.547817][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.553460][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1831.558840][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1831.565000][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.570910][ T31] watchdog+0x102d/0x1030 [ 1831.575252][ T31] ? watchdog+0x1de/0x1030 [ 1831.579690][ T31] kthread+0x711/0x8a0 [ 1831.583776][ T31] ? __pfx_watchdog+0x10/0x10 [ 1831.588464][ T31] ? __pfx_kthread+0x10/0x10 [ 1831.593062][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.598791][ T31] ? __pfx_kthread+0x10/0x10 [ 1831.603477][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1831.608680][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1831.614315][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1831.619524][ T31] ? __pfx_kthread+0x10/0x10 [ 1831.624118][ T31] ret_from_fork+0x4e/0x80 [ 1831.628537][ T31] ? __pfx_kthread+0x10/0x10 [ 1831.633142][ T31] ret_from_fork_asm+0x1a/0x30 [ 1831.637921][ T31] [ 1831.641168][ T31] Kernel Offset: disabled [ 1831.645510][ T31] Rebooting in 86400 seconds..