last executing test programs: 9m35.326426948s ago: executing program 0 (id=25): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xb, 0x5}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x4e}, 0x28) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecde", 0x8) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r7, 0x25, 0x0, @void}, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) 9m34.090480133s ago: executing program 0 (id=30): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT], 0x6c}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000c00)=""/21, 0x15}], 0x1, &(0x7f0000000200)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000740)}], 0x3}}], 0x2, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x20c, 0x2a8, 0x2a8, 0x20c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2fc) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x6) r5 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000100)=0x9) 9m30.556347024s ago: executing program 0 (id=35): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) fcntl$getown(0xffffffffffffffff, 0x5) r2 = syz_open_pts(0xffffffffffffffff, 0x0) r3 = socket$inet6(0x18, 0x5, 0x1) setsockopt$sock_int(r3, 0xffff, 0x800, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x44}], 0x37, 0x7) syz_usbip_server_init(0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/71, 0x0}) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) 9m23.14671456s ago: executing program 0 (id=44): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f35076e090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) recvmmsg(r1, 0x0, 0x0, 0x120, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000680)={0xf7, {{0xa, 0x4e23, 0x11c5, @remote, 0x8}}, {{0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, 0x108) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x80}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0xff, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010102}, {0x0, 0xfffd, 0x11, 0x0, @opaque="59b63aa45f55f9243b"}}}}}, 0x0) 9m19.391885876s ago: executing program 0 (id=46): socket(0x15, 0x5, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x107, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) close_range(r0, 0xffffffffffffffff, 0x0) 9m16.883013299s ago: executing program 0 (id=50): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$VT_SETMODE(r3, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x1) fchdir(r4) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$char_usb(0xc, 0xb4, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x63e9}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x109800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r7 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000002c0)=@keyring) 9m0.565230309s ago: executing program 32 (id=50): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$VT_SETMODE(r3, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x1) fchdir(r4) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$char_usb(0xc, 0xb4, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x63e9}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x109800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r7 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000002c0)=@keyring) 7m31.780040025s ago: executing program 4 (id=176): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x4, 0x101801) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') mlockall(0x5) pread64(r3, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat(r3, &(0x7f0000000100)='./file0\x00', 0xa8e41, 0x127) fcntl$setlease(r0, 0x400, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getrlimit(0x5, &(0x7f0000000040)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$nl_route(0x10, 0x3, 0x0) sched_rr_get_interval(r6, &(0x7f00000000c0)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x20, 0x70f, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10012}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r9, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7m27.495132486s ago: executing program 4 (id=182): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000340), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = msgget$private(0x0, 0x6b9) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYRES8], 0x401, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x9, 0x4281) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000300)=@usbdevfs_driver={0x8000, 0xc, &(0x7f0000000380)="ae59284c3a1f6669d6d5b5f14ffba9a4dc5d3bc0e016279bb091c95f14d004312dfb8e59b6307346438593794c0be0b901ea509240ed6a61edf551a694d789f6c8143ce513063ebf103c435727647007643f1676a030fca4483a4350a02e170a647475eb3b4781f82224aa651ab9975f29bdd2ed6b9794515f7c27e1768e"}) syz_open_dev$sg(0x0, 0x0, 0x68002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000080)=0x1) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0xc, 0x0, 0x0, 0x0, 0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setreuid(0x0, 0xee01) listen(0xffffffffffffffff, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) creat(&(0x7f0000000000)='./file0\x00', 0xc0) socket$inet_udp(0x2, 0x2, 0x0) 7m21.756602779s ago: executing program 4 (id=189): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = socket(0x23, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket(0x2b, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x10, {{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffff}, {0x1, 0x0, 0x80, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@local, 0x1, 0x3}, {{@in=@remote, 0x4d2, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3500, 0x3, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@private0, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x3ff}]}]}, 0x1bc}}, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xb, &(0x7f0000000f00)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020692500000000002020207b1af8ff00000000bf"], &(0x7f00000000c0)='GPL\x00'}, 0x94) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20) 7m20.167401003s ago: executing program 4 (id=192): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004ad80bfdc09d9979000000000000c77600"/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) times(&(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x7) prlimit64(r0, 0x5, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r4, &(0x7f0000000000)='1\x00', 0x2) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 7m19.095449085s ago: executing program 4 (id=193): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "9c304bad897e0216795983be31b98b78a3cddf"}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x400, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='qgroup_meta_free_all_pertrans\x00', r0, 0x0, 0x13b59609}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB="20f5e18fd8d17321fa3ebec2650800"/29], 0x3c}, 0x1, 0x0, 0x0, 0x845}, 0x20000000) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r6) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r7, 0x0, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040848) 7m14.816760977s ago: executing program 4 (id=198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0f85403, &(0x7f0000000180)={{0x3, 0x2, 0x1, 0x1, 0xffc00000}, 0x3, 0x19c, 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2a, &(0x7f0000000240)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) socket(0x1000000010, 0x80000, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, 0x0, &(0x7f0000000000)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xc}, 0x8) close(r4) unshare(0x42000000) 6m58.700111463s ago: executing program 33 (id=198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0f85403, &(0x7f0000000180)={{0x3, 0x2, 0x1, 0x1, 0xffc00000}, 0x3, 0x19c, 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2a, &(0x7f0000000240)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) socket(0x1000000010, 0x80000, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, 0x0, &(0x7f0000000000)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xc}, 0x8) close(r4) unshare(0x42000000) 1m1.00773598s ago: executing program 3 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000019c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRESDEC=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a40)=ANY=[@ANYBLOB="14000000100001000000000000fdbdfb781ed69000004a140000001100010000000000000d0000000000000000000000000000ffeb0000"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) io_uring_setup(0x5de1, &(0x7f0000000000)={0x0, 0x6cae, 0x1000, 0x1, 0x5e}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0xa0000000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000340)={0xa000001c}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000300)={'pcl812\x00', [0x2f00, 0x40005, 0xd09a, 0xffffffff, 0x3, 0x2, 0x20000004, 0x2, 0xffe, 0x9, 0xc, 0x3, 0x4, 0x4, 0xffff, 0x6, 0x5, 0x40000009, 0x82e, 0x30000, 0xffff, 0x9, 0x800, 0x6, 0x1000002, 0x8001, 0x5, 0x10000003, 0xaac7, 0x4, 0x712]}) fcntl$lock(r6, 0x7, &(0x7f00000031c0)={0x1, 0x0, 0x8002, 0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}) socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6d706f6c3d62696e643d62156c61746976"]) sendmmsg(r6, &(0x7f00000000c0), 0x0, 0x48840) 59.276944229s ago: executing program 3 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES64=r4], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010080000000000000000100000a44000000060a010400000000000000000a0000050900020073797a3200000000100004800c000be84abd3867c9680383018008000100647570000900010073797a31000000000800074023c77b3714000000110e00000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x48031, 0xffffffffffffffff, 0x7b8fd000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={0x0, 0x0, 0x5d9acdfb}) add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="95b2225912c6296807a0fa314dd2b375a800cae28c399ddc1672ae0780e5ae5a88035254b3dbe90fcfff7a2ccbddf585395982b9b381ff9525ffc6ef3c68d596a53249406ce85e2362fc0725dd83336265da324b55cbbb356df337981e990050136341b765d1f0f9ff101ce3c72e437f1e93b26b6212daebd0b0d05aae030d4f0f4a7adfb2cd066d0c7ba3cc4e4d8aab30aae89e47219837a2b86a924a603a8fcad3cf1c91c72c8721eac9dbebeb3746c79d9b41289f1494ef8960e10e77a640ff6709a2893e9050e71dc696d6af62bd0fbd149a8457ed08f24689f2bf0b5afcf433e631d9d691025928c8ecf13a581d40df1d4ddfe6154adc405cc96d74b2c17a6bf7d408108e6b7b91d2cfa2fcf92809b6ce616e4086ae4fe236de9ebc67dd0f6b976f6a0c703333388d699e5b676f60dfd57ad911c2e897b7445e000ce1f4c0feb7d523a40b67fade9b81852c43cafbf2e959ba9c6a00000000015e70131ca121957c7305a046efc8df5b7389b14164fe65371657aff27ca57dc7b5e0e03e55b8e33e844bfb0e0ed2", 0x18a, 0xfffffffffffffff8) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) r6 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x1, 0x0, &(0x7f0000002280)) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 53.887774989s ago: executing program 3 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x7, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x20) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x10) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r7, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0, 0x18}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000100)=@ringbuf, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x14, 0x0, 0x700, 0x10, &(0x7f0000000300), 0x10}, 0x90) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000)=r8, 0x8) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000180)=0x8) 51.763917721s ago: executing program 3 (id=668): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000e00)={@broadcast, @remote, @void, {@llc={0x4, {@llc={0x80, 0x0, "e0"}}}}}, 0x0) getgid() 50.124237608s ago: executing program 3 (id=670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000100)=""/13, &(0x7f0000000080)=0xd) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00", 0x35, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) 48.393395556s ago: executing program 3 (id=673): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001940)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000000)=""/17, &(0x7f0000000280)=0x11) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000c80)=[@wr_crn={0x46, 0x20, {0x4, 0xfffffffffffffff7}}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x14, 0x18, {0x6, 0xa}}, @rdmsr={0x32, 0x18, {0x354}}, @cpuid={0x14, 0x18, {0x6, 0x3800000}}, @rdmsr={0x32, 0x18, {0x40000a4a}}, @rdmsr={0x32, 0x18, {0x2f0}}, @rdmsr={0x32, 0x18, {0x33e}}, @wrmsr={0x1e, 0x20, {0x2d8, 0xa4}}, @rdmsr={0x32, 0x18, {0x79}}, @rdmsr={0x32, 0x18, {0xa2b}}, @cpuid={0x14, 0x18, {0xe}}, @code={0xa, 0x58, {"c441665e642300450f769708000000670f01cb66baf80cb82d1b658eef66bafc0cec420f216df20f5c48f4263e420fc7b8cc9a00000fc7a906000000260f789900000000477181"}}, @uexit={0x0, 0x18, 0x10000}, @rdmsr={0x32, 0x18, {0x8b0}}, @uexit={0x0, 0x18, 0x7ff}, @code={0xa, 0x72, {"0f20e035002000000f22e0430f0966460f38829e0a000000420f001f36420fc71fb9400101c00f320f09c4639d5cb95000000000b961030000b89c000000ba000000000f30c7442400f7000000c7442402bc000000c7442406000000000f011424"}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x7f}, @rdmsr={0x32, 0x18, {0xc0011035}}, @cpuid={0x14, 0x18, {0x7, 0x3}}, @code={0xa, 0x81, {"66baf80cb8cc09d388ef66bafc0cb89bcb0000ef66baf80cb89ce3e986ef66bafc0cec650fc77618b96e0a00000f320f51214486a906000000c4035502794b5566baf80cb867a5ad81ef66bafc0cb01fee0f221bc7442400d5ff0000c7442402407bb6b5c7442406000000000f011424"}}], 0x323}) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000440)=0x6) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(r10, &(0x7f0000000580)='./file0\x00', 0x100) ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, &(0x7f0000000480)={0xb6, 0x0, 0x200000}) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4c, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5008}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x75fa, 0xe475, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r0}) 31.272126418s ago: executing program 34 (id=673): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001940)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000000)=""/17, &(0x7f0000000280)=0x11) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000c80)=[@wr_crn={0x46, 0x20, {0x4, 0xfffffffffffffff7}}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x14, 0x18, {0x6, 0xa}}, @rdmsr={0x32, 0x18, {0x354}}, @cpuid={0x14, 0x18, {0x6, 0x3800000}}, @rdmsr={0x32, 0x18, {0x40000a4a}}, @rdmsr={0x32, 0x18, {0x2f0}}, @rdmsr={0x32, 0x18, {0x33e}}, @wrmsr={0x1e, 0x20, {0x2d8, 0xa4}}, @rdmsr={0x32, 0x18, {0x79}}, @rdmsr={0x32, 0x18, {0xa2b}}, @cpuid={0x14, 0x18, {0xe}}, @code={0xa, 0x58, {"c441665e642300450f769708000000670f01cb66baf80cb82d1b658eef66bafc0cec420f216df20f5c48f4263e420fc7b8cc9a00000fc7a906000000260f789900000000477181"}}, @uexit={0x0, 0x18, 0x10000}, @rdmsr={0x32, 0x18, {0x8b0}}, @uexit={0x0, 0x18, 0x7ff}, @code={0xa, 0x72, {"0f20e035002000000f22e0430f0966460f38829e0a000000420f001f36420fc71fb9400101c00f320f09c4639d5cb95000000000b961030000b89c000000ba000000000f30c7442400f7000000c7442402bc000000c7442406000000000f011424"}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x7f}, @rdmsr={0x32, 0x18, {0xc0011035}}, @cpuid={0x14, 0x18, {0x7, 0x3}}, @code={0xa, 0x81, {"66baf80cb8cc09d388ef66bafc0cb89bcb0000ef66baf80cb89ce3e986ef66bafc0cec650fc77618b96e0a00000f320f51214486a906000000c4035502794b5566baf80cb867a5ad81ef66bafc0cb01fee0f221bc7442400d5ff0000c7442402407bb6b5c7442406000000000f011424"}}], 0x323}) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000440)=0x6) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(r10, &(0x7f0000000580)='./file0\x00', 0x100) ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, &(0x7f0000000480)={0xb6, 0x0, 0x200000}) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4c, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5008}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x75fa, 0xe475, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r0}) 23.401800554s ago: executing program 1 (id=702): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) msgctl$MSG_STAT(0x0, 0xb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$unlink(0x9, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) unshare(0x2040400) r5 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\xee\x1084\xff)\x89\xd6\xb6!\xae\xf79k\x90\x8d\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xd7\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac\x00AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1fOR\x86R\x97\xcf\xf9\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\x00\x00\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:h\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~%\xc2\f\xaebJ\xa8\xef\'\xcc<$\xdf\x15\f]\x15u#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\x06\x00\x00\x00\x00\x00\x00\x00\f\f\x957\xc9}\x00'/894, 0x40, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x2000, 0x6, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@multicast1, 0x0, 0xa}}]}, 0xcc}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') close_range(r7, 0xffffffffffffffff, 0x0) 23.263524193s ago: executing program 2 (id=703): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x8c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000480)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000600)={{}, {0x0, 0x3938700}}, &(0x7f0000000640)) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000100)={0x28, 0x2, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x1d, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x5f, &(0x7f0000000240)}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() read$msr(r1, &(0x7f00000000c0)=""/177, 0xb1) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0xfffffffffffffcdf, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000400)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00", @ANYRES16=r6, @ANYBLOB="08002bbd7030000000251c00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4000001) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000280)=""/169, 0xa9}, {&(0x7f0000001300)=""/4068, 0xfe4}], 0x3}, 0x10062) 18.319914265s ago: executing program 1 (id=705): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x81, 0x20000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000200)={0xfffe, 0x80, 0xe000, 0xb3, 0x17, "041000"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x4) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) close(r1) shutdown(0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)={0x0, 0x960, 0xf0, 0x360, 0x0, 0x7ff, 0x4, 0x0, {0x2, 0xffffff59, 0x1}, {0x73a8c463, 0x1, 0x1}, {0x4, 0x1465}, {}, 0x0, 0x1, 0x6, 0x8, 0x1, 0x723b, 0xb76f, 0x5, 0x1, 0x9, 0xffff, 0x40, 0x0, 0x2, 0x3, 0xb}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x5, 0x6, 0xfffffffffffffff5, 0x1, 0x280000, 0x800}, {0x2, 0xffffffff, 0xa, 0x101, 0x80, 0x6723}]}) 17.288995964s ago: executing program 2 (id=706): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}}, 0x4010) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = dup(r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"]) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x8000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 16.034416287s ago: executing program 5 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e0000"], 0x80}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001040)=ANY=[@ANYBLOB="bbbbbbbbbbbb58a4ab044a92080045f000b000000000fc11907800000000ffffffff04004e20009c907801000000000000004e0ec4d8ec1533548dfb72e1261d7aeb619d49e98f3f4cadcd53ff011dd8241880bdd625bd905ba90d0a2127c37cefe3c4b48ef7ded481883e35fd85afe3254b050000000000000015bf29ed4dcc166e7cdfd8ec14c7ce8bac951c90fcfaa4d6679b931ed70bb5b50f5b738dfdeca3693c5b2702a669b6ddaf8ff0acae2f2a3d0d0de9d22c2e3cf800000000"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000540)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000400), 0xb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000300)={0x2, @vbi={0xfffffffd, 0x6, 0x42474752, 0x3234564e, [0x800, 0x4], [0x527, 0x2]}}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETUID(r4, 0x89ed, 0xfffffffffffffffe) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0xe, 0x0, &(0x7f0000000900)) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0600000000000000", @ANYRES16=r5, @ANYRESHEX], 0x5c}, 0x1, 0x0, 0x0, 0x40d4}, 0x4) socket(0x20000000000000a, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 12.826571557s ago: executing program 5 (id=711): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0x9, 0x10, 0x0, 0xbf, 0x0, r1}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) 12.112732101s ago: executing program 1 (id=712): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = accept(r0, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000340)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1", 0x2f}], 0x1}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x20) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_off}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073115800000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x6}, 0x94) 10.774427234s ago: executing program 2 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x8243, 0x8c) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='`fd=', @ANYRES16=r5, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000e400)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x4, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x0, 0x0, 0x0, 0x96c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x240b42, 0x1cd) r9 = openat(r8, &(0x7f0000000400)='./file1\x00', 0xc0c0, 0x4) fchown(r9, 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r8, 0xffffffff80000901, 0xee00, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x4100, 0x0) 10.409377974s ago: executing program 5 (id=714): r0 = creat(0x0, 0xd931d3864d39ddd8) open$dir(0x0, 0x0, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x102) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2000, 0x8e) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_clone3(&(0x7f0000000600)={0x10010000, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000300), {0x33}, &(0x7f0000000400)=""/171, 0xab, &(0x7f00000004c0)=""/193, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x7, {r0}}, 0x58) sched_setparam(r2, &(0x7f0000000680)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffffffffffffa1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x15}, {0x45}, {0x6}]}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x81, 0x29, 0x100}, 0x9c) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e21, 0x0, @private0}}, 0x0, 0x0, 0x4c, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) 10.401729691s ago: executing program 6 (id=715): r0 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bde) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x20e) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x1, 0x7, 0x22, @private1, @remote, 0x40, 0x20, 0x4, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x53}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[], 0x302c}, 0x1, 0x0, 0x0, 0x40180}, 0x4048090) finit_module(r0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, 0x0, 0xff2e) 7.704470839s ago: executing program 2 (id=716): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, 0x0, 0xb8) syz_emit_ethernet(0x11, &(0x7f0000000e00)={@broadcast, @remote, @void, {@llc={0x4, {@llc={0x80, 0x0, "e0"}}}}}, 0x0) getgid() 7.61949889s ago: executing program 5 (id=717): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x64}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) capset(&(0x7f0000000000)={0xf1504}, &(0x7f0000000040)={0x80, 0x200002, 0x2, 0x0, 0x20, 0x3}) r3 = gettid() capget(&(0x7f0000000080)={0x20071026, r3}, &(0x7f0000000100)={0x0, 0x5, 0x369, 0x9db, 0x8, 0x1}) openat$kvm(0xffffffffffffff9c, 0x0, 0x75f380, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001100)=@abs, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(0xffffffffffffffff) 7.618950124s ago: executing program 1 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000019c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRESDEC=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a40)=ANY=[@ANYBLOB="14000000100001000000000000fdbdfb781ed69000004a140000001100010000000000000d0000000000000000000000000000ffeb0000"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) io_uring_setup(0x5de1, &(0x7f0000000000)={0x0, 0x6cae, 0x1000, 0x1, 0x5e}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0xa0000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000340)={0xa000001c}) 7.585967119s ago: executing program 6 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000"], 0x80}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001040)=ANY=[@ANYBLOB="bbbbbbbbbbbb58a4ab044a92080045f000b000000000fc11907800000000ffffffff04004e20009c907801000000000000004e0ec4d8ec1533548dfb72e1261d7aeb619d49e98f3f4cadcd53ff011dd8241880bdd625bd905ba90d0a2127c37cefe3c4b48ef7ded481883e35fd85afe3254b050000000000000015bf29ed4dcc166e7cdfd8ec14c7ce8bac951c90fcfaa4d6679b931ed70bb5b50f5b738dfdeca3693c5b2702a669b6ddaf8ff0acae2f2a3d0d0de9d22c2e3cf800000000"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001040)=ANY=[@ANYBLOB="bbbbbbbbbbbb58a4ab044a92080045f000b000000000fc11907800000000ffffffff04004e20009c907801000000000000004e0ec4d8ec1533548dfb72e1261d7aeb619d49e98f3f4cadcd53ff011dd8241880bdd625bd905ba90d0a2127c37cefe3c4b48ef7ded481883e35fd85afe3254b050000000000000015bf29ed4dcc166e7cdfd8ec14c7ce8bac951c90fcfaa4d6679b931ed70bb5b50f5b738dfdeca3693c5b2702a669b6ddaf8ff0acae2f2a3d0d0de9d22c2e3cf800000000"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000008c0)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x68}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000580)={0x1ff, 0x8, 0x2, {0x4, @sdr={0x30324c4a, 0x3}}, 0x8}) r6 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000019000100200000000000000080"], 0x30}}, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x1, 0xb, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x2036315a}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000010c0)=[{{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x10) 4.83880335s ago: executing program 2 (id=723): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r4, 0x154e, 0x0, 0x41, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x18}}, 0x20008050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_S_FREQUENCY(r9, 0x402c5639, &(0x7f0000000080)={0x8, 0x5, 0xf}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 4.28800803s ago: executing program 5 (id=724): write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) socket(0x28, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000b81400800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000240201802400028008000340000000000800034000000000080003400000000008000180000000003c00028008000340000000000800018000000000080003400000000008000340000000000900020073797a30000000000900020073797a310000000044000280080003400000000008000340000000010900020073797a32000000000800034000000000080003400000000108000340000000020900020073797a30000000003400028008000180000000000900020073797a310000000008000340000000000900020073797a320000000008000340000000000c0002800800034000000000400002800900020073797a310000000008000340000000000900020073797a32000000000900020073797a3200000000080001800000000008000180fffffffcfc000100789be1642f8430c460e8692a8f8c45aaf3118316539052ba181a60f03707ec8179fd143ed6c4db73977b77f68686d2ec94b25435ecec60f6ac23db96833cbf99779e33db32e62fe3a078933d3c1122022952988b9550db169ecb6e39fd8720a05d3eeb5d40a7ab91f9b5565dc2b48c9ac61eefd9d0aab86e58ea1940d2240a851dbeabcf0b6cefba164663ad87cbcdb6aa1468529d1206b1fa3aa39118b45ab882df7fb2c6e9c25a706f99002cc42ee9b894b4bbfe66ce8fa1038566ae3407d5c80e28dc3911476785933d1ef923697a44a9cd4271d539e2ecc14d37a5e2074116425f0766b49a6febf9f1b8405ee9de1363b262f1be2839a40101804c0002800900020073797a300000000008000340000000000900020073797a300000000008000180000000000900020073797a30000000000900020073797a3200000000080003400000000104000280380002800900020073797a300000000008000180000000000900020073797a320000000008000340000000000900020073797a32000000002400028008000180000000000900020073797a32000000000900020073797a3000000000f3000100a6117a78b9e48d6dd9ad86fc2c54547cbee98c24f4b972c82722771febf3e388f9b3907852ee4adbd95ca25deb487ac3d49d3716931979f6bbf2b8cdcc0bc37f27a54709a59c31c01c5544b11cb9c6ca800d7f23c3cc5237458188f26a04c78ad8dfd3b13e958558dc3b7f0f4cfc16c4fd23e11b25bd23b195b64166e0c3a8ab3ebbd2ead4abf745bcf4d4b0610521d7ec52023ed38c7f9fb1cbab6a9d87c96fd783ff63f9483766557291fcc41f17c423550c1e965a66e30631b271db96cccb68bf8c91656e894ef46a296974170da742b0d13d665f0f2e80d3590b3dc637851b6e7b0adc59ab874ce337a2"], 0x159c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xef) mkdir(0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000180)=""/62, 0x3e) 2.921086859s ago: executing program 5 (id=725): ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0e05403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000000)=0x2d265528) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000005000100070000002d1d1a5cc7a9e36886a8af781992c67d7d43740ddd8e41301cfa7513f1139d9cbce47dd6820da0b128d4be8aa95139eb0ef4f761d04d30aeebbbe932cf8fd3f0979c2331e42dc7202d365d5997169724340271cff0eb5c77b960502885486d578fc27ec6354e96de5db069a97800a5e255b3f2c2b8d2a81107dde0f7ae3f49026d1f2a862b78dce5529a151b9d0b355926ac55abc37c4934c4fc008b85cea7cd6c7d7e33297283f889a170e806773ea61042f200cfdc37df69bfce"], 0x1c}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000880)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4048941) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r9, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000080)={0x28, 0x3, r10, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) 2.748533351s ago: executing program 6 (id=726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x8243, 0x8c) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='`fd=', @ANYRES16=r5, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000e400)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x4, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x0, 0x0, 0x0, 0x96c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x240b42, 0x1cd) r9 = openat(r8, &(0x7f0000000400)='./file1\x00', 0xc0c0, 0x4) fchown(r9, 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r8, 0xffffffff80000901, 0xee00, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x4100, 0x0) 0s ago: executing program 6 (id=727): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_require}]}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = getpid() prlimit64(r2, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 612][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.778796][ T1831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.816750][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.901592][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.927569][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.963000][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.970247][ T1831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.994894][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.002104][ T1831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.038699][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.087483][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.094641][ T1831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.121697][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.128927][ T1831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.153069][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.190179][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.270328][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.282461][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.343672][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.350907][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.366595][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.373781][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.384244][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.391464][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.402201][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.409414][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.504096][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.582525][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.617829][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.734642][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.878169][ T5843] veth0_vlan: entered promiscuous mode [ 94.952175][ T5843] veth1_vlan: entered promiscuous mode [ 94.988332][ T5849] veth0_vlan: entered promiscuous mode [ 95.050861][ T5849] veth1_vlan: entered promiscuous mode [ 95.120171][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.159744][ T5843] veth0_macvtap: entered promiscuous mode [ 95.223247][ T5843] veth1_macvtap: entered promiscuous mode [ 95.264115][ T5849] veth0_macvtap: entered promiscuous mode [ 95.274831][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.302148][ T5837] veth0_vlan: entered promiscuous mode [ 95.311451][ T5849] veth1_macvtap: entered promiscuous mode [ 95.334994][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.352477][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.383150][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.394986][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.411755][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.422016][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.444754][ T5837] veth1_vlan: entered promiscuous mode [ 95.480663][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.554993][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.568783][ T5850] Bluetooth: hci3: command tx timeout [ 95.599577][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.642769][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.651754][ T5850] Bluetooth: hci0: command tx timeout [ 95.655981][ T5850] Bluetooth: hci1: command tx timeout [ 95.657572][ T5852] Bluetooth: hci2: command tx timeout [ 95.669471][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.678876][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.687898][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.702040][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.727079][ T5852] Bluetooth: hci4: command tx timeout [ 95.742587][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.759495][ T5837] veth0_macvtap: entered promiscuous mode [ 95.779836][ T5837] veth1_macvtap: entered promiscuous mode [ 95.816092][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.824928][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.871584][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.892736][ T5856] veth0_vlan: entered promiscuous mode [ 95.923531][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.939671][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.965072][ T5856] veth1_vlan: entered promiscuous mode [ 95.985804][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.994552][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.003663][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.013141][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.068456][ T5838] veth0_vlan: entered promiscuous mode [ 96.107016][ T1831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.128488][ T1831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.152104][ T5838] veth1_vlan: entered promiscuous mode [ 96.733450][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.742661][ T5856] veth0_macvtap: entered promiscuous mode [ 96.746792][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.770054][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.782364][ T5856] veth1_macvtap: entered promiscuous mode [ 96.801892][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.872446][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.883467][ T5838] veth0_macvtap: entered promiscuous mode [ 96.900764][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.910060][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.923822][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.971871][ T5838] veth1_macvtap: entered promiscuous mode [ 97.083252][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.103737][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.126304][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.135116][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.208602][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.233688][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.261400][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.271800][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.323459][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.369854][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.386016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.441480][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.645491][ T5852] Bluetooth: hci3: command tx timeout [ 97.662293][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.673298][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.684468][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.731052][ T5852] Bluetooth: hci1: command tx timeout [ 97.731068][ T5850] Bluetooth: hci0: command tx timeout [ 97.731120][ T5850] Bluetooth: hci2: command tx timeout [ 97.806290][ T5850] Bluetooth: hci4: command tx timeout [ 97.889568][ T5975] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.4'. [ 98.267276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.277423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.289545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.435745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.725857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.735818][ T5975] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.4'. [ 98.863388][ T5979] netlink: 'syz.0.7': attribute type 21 has an invalid length. [ 98.930261][ T5979] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7'. [ 98.997413][ T1831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.023205][ T1831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.205412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 100.099208][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.320324][ T5990] Bluetooth: MGMT ver 1.23 [ 100.846391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.868332][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.725581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.733826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.219612][ T6002] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.455747][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.535392][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.144039][ T6004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.230662][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.240696][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.480763][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 107.525413][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 108.410489][ T6029] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 108.417256][ T6029] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.426119][ T6029] vhci_hcd vhci_hcd.0: Device attached [ 108.501001][ T6033] vhci_hcd: connection closed [ 109.138188][ T3522] vhci_hcd: stop threads [ 109.428838][ T3522] vhci_hcd: release socket [ 109.438122][ T10] vhci_hcd: vhci_device speed not set [ 109.445999][ T3522] vhci_hcd: disconnect device [ 109.787528][ T6047] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.451002][ T5947] IPVS: starting estimator thread 0... [ 110.739817][ T6055] IPVS: using max 30 ests per chain, 72000 per kthread [ 111.382293][ T6051] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.390474][ T6051] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.665069][ T6051] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.206490][ T6064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24'. [ 112.476198][ T6051] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.482416][ T6051] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.489801][ T6051] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.497707][ T6051] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.503669][ T6051] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.525645][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.541664][ T6051] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.553527][ T6051] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.559529][ T6051] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.596479][ T6051] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.603991][ T6051] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.610327][ T6051] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.627035][ T6051] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 113.943793][ T6077] loop7: detected capacity change from 0 to 16384 [ 115.108048][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.114147][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.120732][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.127042][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.133238][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.396958][ T6089] loop7: detected capacity change from 16384 to 0 [ 115.408332][ C0] I/O error, dev loop7, sector 9216 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 115.543871][ T5917] IPVS: starting estimator thread 0... [ 115.825789][ T6100] IPVS: using max 24 ests per chain, 57600 per kthread [ 117.179531][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.186086][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.192768][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.199341][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.427868][ T6108] 9pnet_fd: Insufficient options for proto=fd [ 117.683269][ T6112] Zero length message leads to an empty skb [ 117.691135][ T6112] netlink: 440 bytes leftover after parsing attributes in process `syz.3.34'. [ 117.700245][ T6112] netlink: 52 bytes leftover after parsing attributes in process `syz.3.34'. [ 117.709819][ T6112] netlink: 48 bytes leftover after parsing attributes in process `syz.3.34'. [ 118.343184][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.475472][ T6099] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 118.482062][ T6099] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.620476][ T6099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.752727][ T6117] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 118.758732][ T6099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.759283][ T6117] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.779762][ T6117] vhci_hcd vhci_hcd.0: Device attached [ 118.836148][ T6099] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 120.535884][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.685651][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.740664][ T24] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 120.819350][ T6115] loop6: detected capacity change from 0 to 64 [ 120.896011][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.902102][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.076876][ T6118] vhci_hcd: connection reset by peer [ 121.083269][ T36] vhci_hcd: stop threads [ 121.102804][ T36] vhci_hcd: release socket [ 121.122565][ T36] vhci_hcd: disconnect device [ 121.330495][ T6136] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.473453][ T6140] tmpfs: Bad value for 'mpol' [ 125.384098][ T6162] netlink: 'syz.1.41': attribute type 1 has an invalid length. [ 125.384139][ T6162] netlink: 224 bytes leftover after parsing attributes in process `syz.1.41'. [ 126.729440][ T24] vhci_hcd: vhci_device speed not set [ 127.127108][ T6166] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 127.127138][ T6166] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 127.127796][ T6166] vhci_hcd vhci_hcd.0: Device attached [ 127.607343][ T6168] vhci_hcd: connection closed [ 127.628315][ T3484] vhci_hcd: stop threads [ 127.628402][ T3484] vhci_hcd: release socket [ 127.628419][ T3484] vhci_hcd: disconnect device [ 128.296449][ T6176] ceph: No mds server is up or the cluster is laggy [ 128.365603][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 128.376236][ T6159] input: syz1 as /devices/virtual/input/input5 [ 128.393755][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 128.402334][ T6165] lo speed is unknown, defaulting to 1000 [ 128.409142][ T6165] lo speed is unknown, defaulting to 1000 [ 128.417216][ T6165] lo speed is unknown, defaulting to 1000 [ 128.428927][ T6165] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 128.445809][ T6165] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 128.484072][ T6165] lo speed is unknown, defaulting to 1000 [ 128.493410][ T6165] lo speed is unknown, defaulting to 1000 [ 128.500997][ T6165] lo speed is unknown, defaulting to 1000 [ 128.509313][ T6165] lo speed is unknown, defaulting to 1000 [ 128.516859][ T6165] lo speed is unknown, defaulting to 1000 [ 128.870303][ T24] libceph: connect (1)[c::]:6789 error -101 [ 129.606393][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 130.821400][ T6197] sctp: failed to load transform for md5: -2 [ 131.037302][ T24] libceph: connect (1)[c::]:6789 error -101 [ 131.119365][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 131.210237][ T6201] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.862583][ T24] libceph: connect (1)[c::]:6789 error -101 [ 131.902527][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 132.586898][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 132.594257][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 132.926009][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.962284][ T6231] mkiss: ax0: crc mode is auto. [ 141.432322][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 147.845999][ T6283] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 150.055981][ T5158] Bluetooth: hci4: command 0x0c1a tx timeout [ 155.952902][ T5158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.961882][ T5158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.970181][ T5158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.978385][ T5158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.989605][ T5158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.945084][ T6336] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 157.178559][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'. [ 158.584283][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 159.552611][ T51] Bluetooth: hci5: command tx timeout [ 161.581891][ T51] Bluetooth: hci5: command tx timeout [ 161.635949][ T6326] lo speed is unknown, defaulting to 1000 [ 161.775729][ T6381] evm: overlay not supported [ 162.935757][ T6385] netlink: 40 bytes leftover after parsing attributes in process `syz.1.86'. [ 162.948205][ T6385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.86'. [ 162.970980][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.691068][ T51] Bluetooth: hci5: command tx timeout [ 163.764976][ T1223] IPVS: starting estimator thread 0... [ 163.865384][ T6398] IPVS: using max 37 ests per chain, 88800 per kthread [ 164.713385][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.725576][ T51] Bluetooth: hci5: command tx timeout [ 165.780521][ T6409] mkiss: ax0: crc mode is auto. [ 165.983708][ T6395] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 166.018071][ T6414] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 166.026008][ T6395] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 166.038617][ T6395] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 166.060313][ T6414] overlayfs: failed to set xattr on upper [ 166.066859][ T6414] overlayfs: ...falling back to index=off. [ 166.075025][ T6414] overlayfs: ...falling back to uuid=null. [ 166.090051][ T6395] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 166.121520][ T6395] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 166.156531][ T6395] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 166.180235][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.220879][ T6395] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 166.387310][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.527998][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.045499][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.195540][ T6428] tmpfs: Unknown parameter 'usrquota_block' [ 168.640848][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.647098][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 168.653162][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.130534][ T5942] IPVS: starting estimator thread 0... [ 169.315377][ T6431] IPVS: using max 34 ests per chain, 81600 per kthread [ 171.536846][ T5158] Bluetooth: hci5: command 0x0c1a tx timeout [ 172.534981][ T6326] chnl_net:caif_netlink_parms(): no params data found [ 173.702826][ T5158] Bluetooth: hci5: command 0x0c1a tx timeout [ 174.784833][ T49] bridge_slave_1: left allmulticast mode [ 174.827813][ T49] bridge_slave_1: left promiscuous mode [ 174.909946][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.242889][ T49] bridge_slave_0: left allmulticast mode [ 175.280238][ T49] bridge_slave_0: left promiscuous mode [ 176.008836][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.248213][ T6481] xt_NFQUEUE: number of total queues is 0 [ 179.973695][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.986123][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.998850][ T49] bond0 (unregistering): Released all slaves [ 180.108648][ T6480] tipc: Started in network mode [ 180.113629][ T6480] tipc: Node identity ac14140f, cluster identity 4711 [ 180.128716][ T6480] tipc: New replicast peer: 255.255.255.255 [ 180.135554][ T6480] tipc: Enabled bearer , priority 10 [ 180.298004][ T6524] ======================================================= [ 180.298004][ T6524] WARNING: The mand mount option has been deprecated and [ 180.298004][ T6524] and is ignored by this kernel. Remove the mand [ 180.298004][ T6524] option from the mount to silence this warning. [ 180.298004][ T6524] ======================================================= [ 180.373585][ T6524] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.475148][ T6524] process 'syz.4.105' launched '/dev/fd/9' with NULL argv: empty string added [ 180.973158][ T6516] netlink: 44 bytes leftover after parsing attributes in process `syz.1.104'. [ 181.226205][ T1223] tipc: Node number set to 2886997007 [ 181.858348][ T6532] ALSA: mixer_oss: invalid index 40000 [ 183.886130][ T6528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.108'. [ 183.895596][ T6528] netlink: 32 bytes leftover after parsing attributes in process `syz.3.108'. [ 183.904569][ T6528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.108'. [ 184.023949][ T6545] random: crng reseeded on system resumption [ 184.996905][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.004114][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.012267][ T6326] bridge_slave_0: entered allmulticast mode [ 185.023524][ T6326] bridge_slave_0: entered promiscuous mode [ 185.032539][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.868944][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.877003][ T6326] bridge_slave_1: entered allmulticast mode [ 185.884664][ T6326] bridge_slave_1: entered promiscuous mode [ 189.257869][ T6326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.447717][ T6326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.611098][ T6588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.117'. [ 191.116956][ T6587] bpq0: entered allmulticast mode [ 191.182708][ T49] hsr_slave_0: left promiscuous mode [ 191.209697][ T49] hsr_slave_1: left promiscuous mode [ 191.357562][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.375049][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.399653][ T49] veth1_macvtap: left promiscuous mode [ 191.413656][ T49] veth0_macvtap: left promiscuous mode [ 191.424356][ T49] veth1_vlan: left promiscuous mode [ 191.436659][ T49] veth0_vlan: left promiscuous mode [ 193.564120][ T6606] sctp: [Deprecated]: syz.1.120 (pid 6606) Use of int in max_burst socket option deprecated. [ 193.564120][ T6606] Use struct sctp_assoc_value instead [ 194.131793][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.613681][ T6617] 9pnet_fd: Insufficient options for proto=fd [ 195.935333][ T6625] loop6: detected capacity change from 0 to 64 [ 197.591697][ T6627] QAT: Device 244 not found [ 198.020357][ T5917] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 198.163853][ T6624] GUP no longer grows the stack in syz.4.125 (6624): 200000005000-200000008000 (200000004000) [ 198.174958][ T6624] CPU: 0 UID: 0 PID: 6624 Comm: syz.4.125 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 198.174988][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.175004][ T6624] Call Trace: [ 198.175014][ T6624] [ 198.175021][ T6624] dump_stack_lvl+0x189/0x250 [ 198.175052][ T6624] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.175069][ T6624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.175099][ T6624] fixup_user_fault+0x661/0x720 [ 198.175128][ T6624] fault_in_user_writeable+0x72/0xe0 [ 198.175147][ T6624] futex_lock_pi+0x283/0xa60 [ 198.175170][ T6624] ? preempt_schedule_irq+0xb5/0x150 [ 198.175192][ T6624] ? __pfx_futex_lock_pi+0x10/0x10 [ 198.175245][ T6624] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 198.175265][ T6624] ? preempt_schedule_irq+0xde/0x150 [ 198.175289][ T6624] ? __pfx_futex_wake_mark+0x10/0x10 [ 198.175340][ T6624] ? do_futex+0x273/0x420 [ 198.175365][ T6624] do_futex+0x292/0x420 [ 198.175389][ T6624] ? __pfx_do_futex+0x10/0x10 [ 198.175415][ T6624] __se_sys_futex+0x36f/0x400 [ 198.175435][ T6624] ? __pfx___schedule+0x10/0x10 [ 198.175451][ T6624] ? __pfx___se_sys_futex+0x10/0x10 [ 198.175469][ T6624] ? irqentry_exit+0x74/0x90 [ 198.175491][ T6624] ? __x64_sys_futex+0x21/0xf0 [ 198.175512][ T6624] do_syscall_64+0xfa/0x3b0 [ 198.175531][ T6624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.175545][ T6624] ? asm_sysvec_call_function_single+0x1a/0x20 [ 198.175560][ T6624] ? clear_bhb_loop+0x60/0xb0 [ 198.175578][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.175593][ T6624] RIP: 0033:0x7f7d3178ebe9 [ 198.175612][ T6624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.175625][ T6624] RSP: 002b:00007f7d3269b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 198.175647][ T6624] RAX: ffffffffffffffda RBX: 00007f7d319b6090 RCX: 00007f7d3178ebe9 [ 198.175658][ T6624] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 198.175668][ T6624] RBP: 00007f7d31811e19 R08: 0000000000000000 R09: 0000000000000000 [ 198.175677][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.175686][ T6624] R13: 00007f7d319b6128 R14: 00007f7d319b6090 R15: 00007ffc68bbc758 [ 198.175709][ T6624] [ 198.398473][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.735335][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 198.955379][ T5917] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 198.963704][ T5917] usb 3-1: config 0 has no interface number 0 [ 198.991780][ T5917] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 199.002775][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.011031][ T5917] usb 3-1: Product: syz [ 199.015206][ T5917] usb 3-1: Manufacturer: syz [ 199.019894][ T5917] usb 3-1: SerialNumber: syz [ 199.056428][ T5917] usb 3-1: config 0 descriptor?? [ 199.071765][ T5917] smsc95xx v2.0.0 [ 200.647269][ T5917] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 200.685972][ T5917] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 200.773539][ T5917] usb 3-1: USB disconnect, device number 2 [ 201.628258][ T6632] delete_channel: no stack [ 202.925389][ T49] team0 (unregistering): Port device team_slave_1 removed [ 203.285326][ T49] team0 (unregistering): Port device team_slave_0 removed [ 203.723294][ T6326] team0: Port device team_slave_0 added [ 203.810905][ T6326] team0: Port device team_slave_1 added [ 205.881983][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.889063][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.923585][ T6326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.012370][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.042716][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.545443][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 206.898575][ T6326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.153051][ T24] usb 4-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 207.176243][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.225011][ T24] usb 4-1: Product: syz [ 207.245996][ T24] usb 4-1: Manufacturer: syz [ 207.260904][ T24] usb 4-1: SerialNumber: syz [ 207.371059][ T6703] xt_connbytes: Forcing CT accounting to be enabled [ 207.378155][ T6703] Cannot find set identified by id 0 to match [ 207.400502][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 207.828292][ T6326] hsr_slave_0: entered promiscuous mode [ 207.917242][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.138'. [ 207.964938][ T6326] hsr_slave_1: entered promiscuous mode [ 207.982590][ T6326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.985603][ T6693] openvswitch: netlink: Flow key attr not present in new flow. [ 208.023713][ T6326] Cannot create hsr debugfs directory [ 208.137105][ T24] pwc: Visionite VCS-UC300 USB webcam detected. [ 208.313485][ T49] IPVS: stop unused estimator thread 0... [ 208.360978][ T24] pwc: Failed to set LED on/off time (-71) [ 209.071390][ T24] pwc: send_video_command error -71 [ 209.076841][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 209.137167][ T24] Philips webcam 4-1:5.0: probe with driver Philips webcam failed with error -71 [ 209.304958][ T6715] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 209.313635][ T6715] netlink: 224 bytes leftover after parsing attributes in process `syz.1.141'. [ 209.730444][ T24] usb 4-1: USB disconnect, device number 2 [ 210.399442][ T6723] veth1_macvtap: left promiscuous mode [ 210.430312][ T6723] macsec0: entered promiscuous mode [ 210.493358][ T6723] macsec0: entered allmulticast mode [ 211.180905][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.190059][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.204413][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.213833][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.227015][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.574330][ T6741] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 211.586445][ T6741] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 212.829529][ T6732] lo speed is unknown, defaulting to 1000 [ 213.406356][ T51] Bluetooth: hci3: command tx timeout [ 216.326819][ T51] Bluetooth: hci3: command tx timeout [ 216.370499][ T6038] IPVS: starting estimator thread 0... [ 216.379753][ T6758] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.685468][ T6769] netlink: 6 bytes leftover after parsing attributes in process `syz.1.147'. [ 216.775416][ T6770] IPVS: using max 25 ests per chain, 60000 per kthread [ 217.406470][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 217.516756][ T6779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.897389][ T9] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 218.037133][ T9] usb 2-1: config 0 has no interface number 0 [ 218.045991][ T9] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 218.168804][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.422219][ T51] Bluetooth: hci3: command tx timeout [ 218.485328][ T9] usb 2-1: config 0 descriptor?? [ 218.930915][ T9] usb 2-1: can't set config #0, error -71 [ 218.939371][ T9] usb 2-1: USB disconnect, device number 2 [ 219.878481][ T1831] bridge_slave_1: left allmulticast mode [ 219.884199][ T1831] bridge_slave_1: left promiscuous mode [ 219.905815][ T1831] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.446251][ T51] Bluetooth: hci3: command tx timeout [ 222.305245][ T1831] bridge_slave_0: left allmulticast mode [ 222.315346][ T1831] bridge_slave_0: left promiscuous mode [ 222.321210][ T1831] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.504216][ T6814] random: crng reseeded on system resumption [ 224.507029][ T1831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.724221][ T1831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.734971][ T1831] bond0 (unregistering): Released all slaves [ 225.428980][ T6820] vivid-000: kernel_thread() failed [ 226.027502][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.036125][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.071018][ T6801] bridge0: entered allmulticast mode [ 226.183305][ T6800] smc: net device bond0 applied user defined pnetid SYZ2 [ 226.268268][ T6834] netlink: 'syz.1.162': attribute type 20 has an invalid length. [ 226.650311][ T1831] hsr_slave_0: left promiscuous mode [ 226.675765][ T1831] hsr_slave_1: left promiscuous mode [ 226.716855][ T1831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.764211][ T1831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.266749][ T6847] netlink: 32 bytes leftover after parsing attributes in process `syz.2.163'. [ 229.396922][ T1831] team0 (unregistering): Port device team_slave_1 removed [ 229.474822][ T1831] team0 (unregistering): Port device team_slave_0 removed [ 231.335746][ T6868] sctp: failed to load transform for md5: -2 [ 231.937299][ T5851] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 232.358392][ T5851] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 232.366972][ T5851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.383981][ T5851] usb 2-1: config 0 has no interface number 0 [ 232.394559][ T5851] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 232.406128][ T5851] usb 2-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 232.420680][ T5851] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 232.475929][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.496023][ T5851] usb 2-1: config 0 descriptor?? [ 232.505854][ T5851] HFC-S_USB 2-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 232.726126][ T6732] chnl_net:caif_netlink_parms(): no params data found [ 233.071368][ T6896] Bluetooth: MGMT ver 1.23 [ 233.803641][ T6875] vivid-003: disconnect [ 233.823705][ T6894] netlink: 72 bytes leftover after parsing attributes in process `syz.4.173'. [ 233.826402][ T6898] /dev/sg0: Can't lookup blockdev [ 233.835761][ T6875] vivid-003: reconnect [ 233.849545][ T5851] usb 2-1: USB disconnect, device number 3 [ 234.388573][ T6899] input: syz0 as /devices/virtual/input/input7 [ 236.578602][ T6904] delete_channel: no stack [ 239.468306][ T6937] mmap: syz.2.177 (6937) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 240.038866][ T6936] netlink: 32 bytes leftover after parsing attributes in process `syz.1.178'. [ 240.236556][ T6933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 240.250961][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.259774][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.572217][ T6732] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.685571][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.692860][ T6732] bridge_slave_0: entered allmulticast mode [ 241.064712][ T6732] bridge_slave_0: entered promiscuous mode [ 241.614906][ T6732] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.643115][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.732814][ T6732] bridge_slave_1: entered allmulticast mode [ 241.894288][ T6955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.017854][ T6732] bridge_slave_1: entered promiscuous mode [ 242.742058][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 243.419833][ T6732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.565850][ T51] Bluetooth: hci4: unexpected cc 0x0809 length: 68 > 4 [ 244.573017][ T51] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 244.658695][ T6732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.728996][ T6970] trusted_key: syz.1.186 sent an empty control message without MSG_MORE. [ 247.106779][ T6732] team0: Port device team_slave_0 added [ 247.211849][ T6732] team0: Port device team_slave_1 added [ 248.202772][ T7000] Bluetooth: MGMT ver 1.23 [ 249.563471][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.995753][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.068832][ T6732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.886777][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.928905][ T7007] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 251.753989][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.820937][ T6732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.861182][ T7010] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 252.175390][ T7026] netlink: 80 bytes leftover after parsing attributes in process `syz.2.196'. [ 253.040730][ T7026] XFS (nullb0): Invalid superblock magic number [ 253.140725][ T6732] hsr_slave_0: entered promiscuous mode [ 253.152246][ T6732] hsr_slave_1: entered promiscuous mode [ 253.246359][ T6732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.272695][ T6732] Cannot create hsr debugfs directory [ 253.354618][ T7035] netlink: 'syz.3.197': attribute type 2 has an invalid length. [ 254.358074][ T7051] serio: Serial port ptm1 [ 255.570520][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.653490][ T5158] Bluetooth: hci3: command 0x0405 tx timeout [ 255.923926][ T7046] lo speed is unknown, defaulting to 1000 [ 256.543680][ T7064] ubi31: attaching mtd0 [ 256.551522][ T7064] ubi31: scanning is finished [ 256.556526][ T7064] ubi31: empty MTD device detected [ 258.279322][ T7064] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 258.287062][ T7064] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 258.294381][ T7064] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 258.301497][ T7064] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 258.309038][ T7064] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 258.315977][ T7064] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 258.324066][ T7064] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3185182381 [ 258.334635][ T7064] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 258.370429][ T7074] ubi31: background thread "ubi_bgt31d" started, PID 7074 [ 259.963171][ T51] Bluetooth: hci4: unexpected event for opcode 0x0062 [ 263.283652][ T51] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 264.125546][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 264.134291][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 264.149023][ T51] Bluetooth: hci4: hardware error 0x00 [ 264.898286][ T7102] capability: warning: `syz.3.209' uses 32-bit capabilities (legacy support in use) [ 266.445624][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 266.458623][ T6732] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 267.073788][ T6732] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.155707][ T6732] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.640860][ T6732] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.703533][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.212'. [ 269.094751][ T6732] kthread_run failed with err -4 [ 272.934313][ T7152] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 273.351513][ T7152] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 273.819538][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.830655][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.838667][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.847489][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.855381][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.122251][ T7166] Falling back ldisc for ptm0. [ 276.667116][ T51] Bluetooth: hci3: command tx timeout [ 276.673812][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.689789][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.709107][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.730065][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.737920][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.930626][ T7189] netlink: 'syz.3.222': attribute type 20 has an invalid length. [ 278.191971][ T7157] lo speed is unknown, defaulting to 1000 [ 278.678482][ T6038] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 278.687849][ T6038] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 278.692878][ T5158] Bluetooth: hci3: command tx timeout [ 278.775808][ T5158] Bluetooth: hci5: command tx timeout [ 279.725974][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 280.102507][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 280.234923][ T7190] dvmrp17: entered allmulticast mode [ 280.777076][ T5158] Bluetooth: hci3: command tx timeout [ 280.845708][ T5158] Bluetooth: hci5: command tx timeout [ 280.857768][ T9] usb 4-1: device descriptor read/all, error -71 [ 282.852528][ T5158] Bluetooth: hci3: command tx timeout [ 282.926263][ T5158] Bluetooth: hci5: command tx timeout [ 283.703163][ T7173] lo speed is unknown, defaulting to 1000 [ 283.747839][ T7215] delete_channel: no stack [ 285.347523][ T5158] Bluetooth: hci5: command tx timeout [ 288.652534][ T7157] chnl_net:caif_netlink_parms(): no params data found [ 289.050519][ T7272] netlink: 132 bytes leftover after parsing attributes in process `syz.1.238'. [ 292.563093][ T7226] Bluetooth: hci1: Frame reassembly failed (-84) [ 292.935618][ T78] bridge_slave_1: left allmulticast mode [ 292.941422][ T78] bridge_slave_1: left promiscuous mode [ 292.963793][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.993322][ T7296] tipc: Can't bind to reserved service type 1 [ 293.247090][ T78] bridge_slave_0: left allmulticast mode [ 293.254574][ T78] bridge_slave_0: left promiscuous mode [ 293.265644][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.093784][ T7286] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 294.606183][ T51] Bluetooth: hci1: command 0x1003 tx timeout [ 294.610077][ T5158] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 294.687206][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 294.784119][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.820418][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.835064][ T78] bond0 (unregistering): Released all slaves [ 295.205417][ T30] audit: type=1400 audit(1755185902.434:2): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=7312 comm="syz.3.244" path="socket:[12564]" dev="sockfs" ino=12564 [ 295.288654][ T30] audit: type=1400 audit(1755185902.464:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=7312 comm="syz.3.244" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo [ 296.605530][ T5158] Bluetooth: hci5: command 0x0405 tx timeout [ 297.038167][ T78] hsr_slave_0: left promiscuous mode [ 297.046623][ T78] hsr_slave_1: left promiscuous mode [ 297.052733][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.060817][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.185761][ T7327] syz.3.246 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 299.689193][ T78] team0 (unregistering): Port device team_slave_1 removed [ 300.015847][ T78] team0 (unregistering): Port device team_slave_0 removed [ 300.871900][ T7346] syz.3.250 uses obsolete (PF_INET,SOCK_PACKET) [ 303.302852][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.337731][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.372570][ T7157] bridge_slave_0: entered allmulticast mode [ 303.415421][ T7157] bridge_slave_0: entered promiscuous mode [ 304.063211][ T7368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.279767][ T7173] chnl_net:caif_netlink_parms(): no params data found [ 304.353070][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.386999][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.394323][ T7157] bridge_slave_1: entered allmulticast mode [ 304.527412][ T7157] bridge_slave_1: entered promiscuous mode [ 307.721338][ T7157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.442490][ T7157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.133147][ T7157] team0: Port device team_slave_0 added [ 309.184644][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.204012][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.235319][ T7173] bridge_slave_0: entered allmulticast mode [ 309.253154][ T7173] bridge_slave_0: entered promiscuous mode [ 309.289806][ T7157] team0: Port device team_slave_1 added [ 309.416389][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.434902][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.443580][ T7173] bridge_slave_1: entered allmulticast mode [ 309.457872][ T7173] bridge_slave_1: entered promiscuous mode [ 309.826933][ T7403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.270'. [ 310.725323][ T7407] xt_connbytes: Forcing CT accounting to be enabled [ 310.732554][ T7407] set match dimension is over the limit! [ 310.737614][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.813430][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.820503][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 310.979335][ T7157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.460789][ T7173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.490797][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.508455][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.566075][ T7157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.673663][ T7418] xt_l2tp: v2 doesn't support IP mode [ 312.690277][ T7173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.069520][ T78] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.012487][ T7173] team0: Port device team_slave_0 added [ 316.278987][ T7173] team0: Port device team_slave_1 added [ 316.293989][ T7157] hsr_slave_0: entered promiscuous mode [ 316.388782][ T7438] ubi: mtd0 is already attached to ubi31 [ 317.159175][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.321662][ T7157] hsr_slave_1: entered promiscuous mode [ 317.330701][ T7157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.339737][ T7157] Cannot create hsr debugfs directory [ 317.374148][ T78] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.485912][ T7441] delete_channel: no stack [ 318.121941][ T78] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.710229][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.728280][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.763200][ T7173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.789117][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.801404][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.909204][ T7173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.155886][ T7454] 9pnet_fd: Insufficient options for proto=fd [ 319.660510][ T78] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.331446][ T7173] hsr_slave_0: entered promiscuous mode [ 326.359145][ T7173] hsr_slave_1: entered promiscuous mode [ 326.396691][ T7173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.404347][ T7173] Cannot create hsr debugfs directory [ 327.588169][ T7501] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 327.600928][ T7501] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 328.617921][ T7509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.281'. [ 328.655478][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 329.178844][ T7512] set match dimension is over the limit! [ 334.090885][ T5158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.100996][ T5158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.117257][ T5158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.126168][ T5158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.136611][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.311828][ T7548] ubi: mtd0 is already attached to ubi31 [ 335.967161][ T7544] lo speed is unknown, defaulting to 1000 [ 335.978651][ T78] bridge_slave_1: left allmulticast mode [ 336.003375][ T78] bridge_slave_1: left promiscuous mode [ 336.022087][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.096393][ T78] bridge_slave_0: left allmulticast mode [ 336.102208][ T78] bridge_slave_0: left promiscuous mode [ 336.138416][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.156083][ T5158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.169353][ T5158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.178474][ T5158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.188320][ T5158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.196354][ T5158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.285354][ T5158] Bluetooth: hci1: command tx timeout [ 337.319516][ T7557] capability: warning: `syz.2.290' uses deprecated v2 capabilities in a way that may be insecure [ 338.293061][ T5158] Bluetooth: hci5: command tx timeout [ 338.371322][ T5158] Bluetooth: hci1: command tx timeout [ 340.409324][ T5158] Bluetooth: hci5: command tx timeout [ 340.445833][ T5158] Bluetooth: hci1: command tx timeout [ 340.916482][ T7572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.344332][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 342.445539][ T5158] Bluetooth: hci5: command tx timeout [ 342.929394][ T5158] Bluetooth: hci1: command tx timeout [ 343.067379][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.082469][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.099105][ T78] bond0 (unregistering): Released all slaves [ 344.102827][ T7554] lo speed is unknown, defaulting to 1000 [ 344.526712][ T5158] Bluetooth: hci5: command tx timeout [ 350.402407][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 350.412600][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 352.178397][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 352.567314][ T78] hsr_slave_0: left promiscuous mode [ 352.757159][ T78] hsr_slave_1: left promiscuous mode [ 352.763319][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.164183][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.603255][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.629971][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.729351][ T78] veth1_macvtap: left promiscuous mode [ 353.734973][ T78] veth0_macvtap: left promiscuous mode [ 353.741923][ T78] veth1_vlan: left promiscuous mode [ 353.747787][ T78] veth0_vlan: left promiscuous mode [ 354.029089][ T7652] netlink: 588 bytes leftover after parsing attributes in process `syz.1.305'. [ 360.475487][ T5917] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 360.483286][ T7621] sched: DL replenish lagged too much [ 361.974928][ T7664] input: syz0 as /devices/virtual/input/input8 [ 364.007079][ T7669] netlink: 148 bytes leftover after parsing attributes in process `syz.3.310'. [ 365.257812][ T78] team0 (unregistering): Port device team_slave_1 removed [ 365.303957][ T78] team0 (unregistering): Port device team_slave_0 removed [ 365.336409][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 365.526493][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 365.540674][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 365.561800][ T5917] usb 4-1: can't read configurations, error -61 [ 365.707934][ T5917] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 365.780198][ T7544] chnl_net:caif_netlink_parms(): no params data found [ 365.917518][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 366.030803][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 366.155204][ T7676] QAT: Device 7 not found [ 366.202081][ T5917] usb 4-1: can't read configurations, error -61 [ 366.314079][ T5917] usb usb4-port1: attempt power cycle [ 366.473430][ T7679] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 366.500819][ T7679] CIFS: Unable to determine destination address [ 366.792424][ T5917] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 366.986079][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 367.020079][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 367.048554][ T5917] usb 4-1: can't read configurations, error -61 [ 367.225534][ T5917] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 367.404059][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 367.424202][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 367.441651][ T5917] usb 4-1: can't read configurations, error -61 [ 367.471652][ T5917] usb usb4-port1: unable to enumerate USB device [ 368.237630][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.262416][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.281869][ T7544] bridge_slave_0: entered allmulticast mode [ 368.323619][ T7544] bridge_slave_0: entered promiscuous mode [ 368.349460][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.438771][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.292903][ T7544] bridge_slave_1: entered allmulticast mode [ 369.582455][ T7544] bridge_slave_1: entered promiscuous mode [ 369.602372][ T7554] chnl_net:caif_netlink_parms(): no params data found [ 369.960472][ T78] IPVS: stop unused estimator thread 0... [ 371.070337][ T7711] tty tty24: ldisc open failed (-12), clearing slot 23 [ 371.290163][ T7544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.582808][ T7544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.993082][ T7544] team0: Port device team_slave_0 added [ 378.054291][ T7544] team0: Port device team_slave_1 added [ 378.098525][ T78] bridge_slave_1: left allmulticast mode [ 378.124513][ T78] bridge_slave_1: left promiscuous mode [ 378.137907][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.788029][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.040147][ T78] bridge_slave_0: left allmulticast mode [ 379.051425][ T78] bridge_slave_0: left promiscuous mode [ 379.075695][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.307152][ T78] bridge_slave_1: left allmulticast mode [ 379.312876][ T78] bridge_slave_1: left promiscuous mode [ 379.336342][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.552338][ T7764] xt_l2tp: v2 sid > 0xffff: 262144 [ 380.880274][ T78] bridge_slave_0: left allmulticast mode [ 380.889276][ T78] bridge_slave_0: left promiscuous mode [ 380.895485][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.640380][ T7773] ALSA: mixer_oss: invalid OSS volume '' [ 382.764550][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.832171][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.851317][ T78] bond0 (unregistering): Released all slaves [ 383.512681][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.535064][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.555058][ T78] bond0 (unregistering): Released all slaves [ 384.569864][ T7554] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.598296][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.617127][ T7554] bridge_slave_0: entered allmulticast mode [ 384.629390][ T7554] bridge_slave_0: entered promiscuous mode [ 384.640265][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.653920][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.695938][ T7544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.855513][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.862536][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.926119][ T7544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.777225][ T78] hsr_slave_0: left promiscuous mode [ 385.793256][ T78] hsr_slave_1: left promiscuous mode [ 385.799527][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.909008][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.685270][ T78] hsr_slave_0: left promiscuous mode [ 386.849739][ T78] hsr_slave_1: left promiscuous mode [ 386.876833][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.906828][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.721518][ T78] team0 (unregistering): Port device team_slave_1 removed [ 390.602347][ T78] team0 (unregistering): Port device team_slave_0 removed [ 393.053924][ T7837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.566925][ T6038] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 393.732278][ T6038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.805828][ T6038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.885217][ T6038] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 393.899119][ T6038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.939556][ T6038] usb 2-1: config 0 descriptor?? [ 394.131107][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 394.142496][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 394.151014][ T7847] IPVS: set_ctl: invalid protocol: 44 172.20.20.36:0 [ 394.169547][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 394.185814][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 394.193692][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 394.276034][ T5158] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 394.279159][ T5158] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 394.280490][ T5158] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 394.282018][ T5158] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 394.282803][ T5158] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 394.377924][ T78] team0 (unregistering): Port device team_slave_1 removed [ 394.419927][ T78] team0 (unregistering): Port device team_slave_0 removed [ 394.754397][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.761878][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.769781][ T7554] bridge_slave_1: entered allmulticast mode [ 394.785109][ T7554] bridge_slave_1: entered promiscuous mode [ 395.119763][ T7849] lo speed is unknown, defaulting to 1000 [ 395.328464][ T6038] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 395.355351][ T6038] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 395.363511][ T6038] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 396.197658][ T6038] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 396.206861][ T7846] lo speed is unknown, defaulting to 1000 [ 396.300109][ T5158] Bluetooth: hci3: command tx timeout [ 396.398406][ T5158] Bluetooth: hci6: command tx timeout [ 396.832217][ T6038] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 396.934351][ T6038] usb 2-1: USB disconnect, device number 5 [ 398.001934][ T7882] fuse: Unknown parameter '`fd' [ 398.584301][ T5158] Bluetooth: hci3: command tx timeout [ 398.589897][ T5158] Bluetooth: hci6: command tx timeout [ 399.879644][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 400.042191][ T7896] befs: (nbd1): No write support. Marking filesystem read-only [ 400.053267][ T7896] syz.1.349: attempt to access beyond end of device [ 400.053267][ T7896] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 400.067291][ T7896] befs: (nbd1): unable to read superblock [ 400.605265][ T5852] Bluetooth: hci6: command tx timeout [ 400.610830][ T5852] Bluetooth: hci3: command tx timeout [ 402.432666][ T7849] chnl_net:caif_netlink_parms(): no params data found [ 402.726066][ T5158] Bluetooth: hci6: command tx timeout [ 402.731740][ T5852] Bluetooth: hci3: command tx timeout [ 403.035037][ T7846] chnl_net:caif_netlink_parms(): no params data found [ 405.890632][ T7849] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.955236][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.033189][ T7849] bridge_slave_0: entered allmulticast mode [ 406.897381][ T7849] bridge_slave_0: entered promiscuous mode [ 407.217419][ T7957] kvm: pic: non byte read [ 407.227934][ T7957] kvm: pic: level sensitive irq not supported [ 407.229870][ T7957] kvm: pic: non byte read [ 407.243409][ T7957] kvm: pic: level sensitive irq not supported [ 407.245184][ T7957] kvm: pic: non byte read [ 407.874738][ T7849] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.886112][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.904691][ T7849] bridge_slave_1: entered allmulticast mode [ 407.932458][ T7849] bridge_slave_1: entered promiscuous mode [ 409.572289][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.626701][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.792772][ T7846] bridge_slave_0: entered allmulticast mode [ 409.898019][ T7846] bridge_slave_0: entered promiscuous mode [ 410.131412][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.885404][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.919909][ T7846] bridge_slave_1: entered allmulticast mode [ 410.954609][ T7846] bridge_slave_1: entered promiscuous mode [ 410.966607][ T7849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.132609][ T7990] bridge0: port 3(team0) entered blocking state [ 411.139017][ T7990] bridge0: port 3(team0) entered disabled state [ 411.145414][ T7990] team0: entered allmulticast mode [ 411.150536][ T7990] team_slave_0: entered allmulticast mode [ 411.156295][ T7990] team_slave_1: entered allmulticast mode [ 411.163732][ T7990] team0: entered promiscuous mode [ 411.168920][ T7990] team_slave_0: entered promiscuous mode [ 411.803888][ T7990] team_slave_1: entered promiscuous mode [ 411.830647][ T7990] bridge0: port 3(team0) entered blocking state [ 411.837062][ T7990] bridge0: port 3(team0) entered listening state [ 411.934220][ T78] bridge_slave_1: left allmulticast mode [ 411.942175][ T78] bridge_slave_1: left promiscuous mode [ 411.966214][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.049000][ T78] bridge_slave_0: left allmulticast mode [ 412.169905][ T78] bridge_slave_0: left promiscuous mode [ 412.529602][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.913534][ T78] bridge_slave_1: left allmulticast mode [ 412.937797][ T5158] Bluetooth: hci6: command 0x0405 tx timeout [ 412.950486][ T78] bridge_slave_1: left promiscuous mode [ 412.981184][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.038806][ T78] bridge_slave_0: left allmulticast mode [ 413.050159][ T78] bridge_slave_0: left promiscuous mode [ 413.066831][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.448089][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.459708][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.472183][ T78] bond0 (unregistering): Released all slaves [ 413.817590][ T78] bond0 (unregistering): Released all slaves [ 414.360269][ T7849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.725440][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 414.734677][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 414.743749][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 414.752820][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 414.761938][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 414.771030][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 414.780216][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 414.789318][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 414.798638][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 414.807752][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 415.601840][ T7846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.756903][ T7846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.800169][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.041633][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.212100][ T8033] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 416.219420][ T8033] overlayfs: failed to set xattr on upper [ 416.225350][ T8033] overlayfs: ...falling back to redirect_dir=nofollow. [ 416.232415][ T8033] overlayfs: ...falling back to index=off. [ 416.238412][ T8033] overlayfs: ...falling back to uuid=null. [ 417.766271][ T30] audit: type=1326 audit(1755186025.054:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8020 comm="syz.2.367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x0 [ 417.768111][ T78] team0 (unregistering): Port device team_slave_1 removed [ 418.294905][ T78] team0 (unregistering): Port device team_slave_0 removed [ 420.000267][ T8032] lo speed is unknown, defaulting to 1000 [ 420.006858][ T8032] lo speed is unknown, defaulting to 1000 [ 420.014365][ T8032] lo speed is unknown, defaulting to 1000 [ 420.033006][ T8032] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 420.059796][ T8032] lo speed is unknown, defaulting to 1000 [ 420.067372][ T8032] lo speed is unknown, defaulting to 1000 [ 420.074903][ T8032] lo speed is unknown, defaulting to 1000 [ 420.082643][ T8032] lo speed is unknown, defaulting to 1000 [ 420.090575][ T8032] lo speed is unknown, defaulting to 1000 [ 420.194117][ T7849] team0: Port device team_slave_0 added [ 420.203401][ T7849] team0: Port device team_slave_1 added [ 420.351244][ T7846] team0: Port device team_slave_0 added [ 420.361961][ T7846] team0: Port device team_slave_1 added [ 420.516575][ T7849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.524662][ T7849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.554429][ T7849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.572127][ T7849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.098965][ T7849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.126233][ T7849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.598371][ T8063] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 421.747936][ T8063] overlayfs: missing 'lowerdir' [ 422.396242][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.403301][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.519819][ T7846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.430187][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.437487][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.943637][ T7846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.334179][ T8077] __nla_validate_parse: 44 callbacks suppressed [ 425.334229][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 426.117297][ T8081] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 426.366936][ T8077] lo speed is unknown, defaulting to 1000 [ 427.086662][ C1] bridge0: port 3(team0) entered learning state [ 427.604275][ T7846] hsr_slave_0: entered promiscuous mode [ 427.618690][ T7846] hsr_slave_1: entered promiscuous mode [ 427.624789][ T7846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.635287][ T7846] Cannot create hsr debugfs directory [ 427.781213][ T7849] hsr_slave_0: entered promiscuous mode [ 427.812068][ T7849] hsr_slave_1: entered promiscuous mode [ 427.842111][ T7849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.858968][ T7849] Cannot create hsr debugfs directory [ 428.904257][ T8104] vivid-000: disconnect [ 429.089705][ T8094] vivid-000: reconnect [ 430.811998][ T30] audit: type=1326 audit(1755186038.094:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8122 comm="syz.2.384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x0 [ 432.233014][ T8136] delete_channel: no stack [ 433.856841][ T8134] delete_channel: no stack [ 434.156132][ T8125] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 434.416332][ T8147] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 435.177529][ T8147] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.450810][ T8147] netlink: 'syz.1.388': attribute type 83 has an invalid length. [ 436.017761][ T7846] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 436.063751][ T7846] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 436.089985][ T7846] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 436.580049][ T7846] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 436.819101][ T7849] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 438.166189][ T7849] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 438.205413][ T7849] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 438.233107][ T7849] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 439.466287][ T8193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.647126][ T8189] netlink: 72 bytes leftover after parsing attributes in process `syz.3.394'. [ 439.988921][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.220056][ T7846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.308576][ T7846] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.350121][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.358029][ T8133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.589835][ T7226] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.597073][ T7226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.777231][ T30] audit: type=1326 audit(1755186049.044:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8207 comm="syz.1.405" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe73558ebe9 code=0x0 [ 442.445237][ C1] bridge0: port 3(team0) entered forwarding state [ 442.451721][ C1] bridge0: topology change detected, propagating [ 442.811803][ T7849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.687240][ T8226] rdma_op ffff8880343299f0 conn xmit_rdma 0000000000000000 [ 443.695709][ T8226] Bluetooth: MGMT ver 1.23 [ 444.701974][ T7849] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.786029][ T8233] hugetlbfs: syz.1.399 (8233): Using mlock ulimits for SHM_HUGETLB is obsolete [ 445.300979][ T8234] binfmt_misc: register: failed to install interpreter file ./file0 [ 445.302171][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.316681][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.765319][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.772608][ T6208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.980223][ T8243] netlink: 'syz.3.401': attribute type 2 has an invalid length. [ 446.002892][ T8243] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 446.053076][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 446.167696][ T7846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.158427][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 453.025662][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 453.042117][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.073335][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.113569][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 453.163550][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.193841][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.218722][ T10] usb 2-1: Product: syz [ 453.229303][ T10] usb 2-1: Manufacturer: syz [ 453.231280][ T7846] veth0_vlan: entered promiscuous mode [ 453.237550][ T10] usb 2-1: SerialNumber: syz [ 453.282251][ T7846] veth1_vlan: entered promiscuous mode [ 453.370804][ T7846] veth0_macvtap: entered promiscuous mode [ 453.392143][ T7846] veth1_macvtap: entered promiscuous mode [ 453.448847][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.504061][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.738760][ T10] usb 2-1: 0:2 : does not exist [ 453.925404][ T10] usb 2-1: USB disconnect, device number 6 [ 454.699270][ T8291] udevd[8291]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.930485][ T8324] macsec1: entered allmulticast mode [ 458.942119][ T8324] macvlan1: entered allmulticast mode [ 458.947876][ T8324] veth1_vlan: entered allmulticast mode [ 459.946206][ T8324] macvlan1: left allmulticast mode [ 459.953135][ T8324] veth1_vlan: left allmulticast mode [ 460.455606][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.468602][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.480812][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.561084][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.593159][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.814279][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 461.834655][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 461.863305][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 461.919949][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 461.953583][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.088920][ T8347] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.523202][ T8354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 462.530844][ T8354] IPv6: NLM_F_CREATE should be set when creating new route [ 462.538595][ T8354] IPv6: NLM_F_CREATE should be set when creating new route [ 462.546041][ T8354] IPv6: NLM_F_CREATE should be set when creating new route [ 462.686435][ T5158] Bluetooth: hci1: command tx timeout [ 462.819938][ T8355] syz_tun: entered allmulticast mode [ 462.832270][ T8354] netlink: 80 bytes leftover after parsing attributes in process `syz.2.419'. [ 462.919118][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'. [ 463.763805][ T8349] syz_tun: left allmulticast mode [ 463.786191][ T8342] lo speed is unknown, defaulting to 1000 [ 463.804542][ T8342] lo speed is unknown, defaulting to 1000 [ 463.816229][ T9] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 464.047580][ T5158] Bluetooth: hci3: command tx timeout [ 464.223047][ T8365] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 464.345654][ T1223] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 464.511938][ T8335] lo speed is unknown, defaulting to 1000 [ 464.547980][ T36] bridge_slave_1: left allmulticast mode [ 464.553751][ T36] bridge_slave_1: left promiscuous mode [ 464.588904][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.278250][ T5158] Bluetooth: hci1: command tx timeout [ 465.433693][ T8380] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 465.550225][ T36] bridge_slave_0: left allmulticast mode [ 465.579851][ T36] bridge_slave_0: left promiscuous mode [ 465.588362][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.130089][ T5158] Bluetooth: hci3: command tx timeout [ 466.179313][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.207060][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.237716][ T36] bond0 (unregistering): Released all slaves [ 466.275396][ T8335] lo speed is unknown, defaulting to 1000 [ 467.205620][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 467.325370][ T5158] Bluetooth: hci1: command tx timeout [ 468.201223][ T36] hsr_slave_0: left promiscuous mode [ 468.269619][ T5158] Bluetooth: hci3: command tx timeout [ 469.195377][ T36] hsr_slave_1: left promiscuous mode [ 469.359145][ T8403] ALSA: mixer_oss: invalid OSS volume '' [ 469.360567][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.412524][ T5158] Bluetooth: hci1: command tx timeout [ 469.450241][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.313619][ T5158] Bluetooth: hci3: command tx timeout [ 471.030662][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 471.039681][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 471.494423][ T36] team0 (unregistering): Port device team_slave_1 removed [ 471.543649][ T36] team0 (unregistering): Port device team_slave_0 removed [ 474.331690][ T8457] netlink: 'syz.2.436': attribute type 39 has an invalid length. [ 476.658296][ T8476] Bluetooth: hci5: Frame reassembly failed (-84) [ 477.407831][ T8342] chnl_net:caif_netlink_parms(): no params data found [ 478.680485][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.706798][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.767146][ T8342] bridge_slave_0: entered allmulticast mode [ 478.775470][ T5158] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 478.996202][ T8504] input: syz0 as /devices/virtual/input/input10 [ 479.650248][ T8342] bridge_slave_0: entered promiscuous mode [ 479.776264][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.877323][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.974437][ T8342] bridge_slave_1: entered allmulticast mode [ 480.239240][ T8342] bridge_slave_1: entered promiscuous mode [ 480.730845][ T8335] chnl_net:caif_netlink_parms(): no params data found [ 481.077372][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'. [ 481.926613][ T8532] netlink: 76 bytes leftover after parsing attributes in process `syz.3.444'. [ 482.658981][ T8342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.767829][ T8543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.445'. [ 483.246051][ T8342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.277156][ T8342] team0: Port device team_slave_0 added [ 487.176979][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.331190][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.674776][ T8335] bridge_slave_0: entered allmulticast mode [ 487.710389][ T8335] bridge_slave_0: entered promiscuous mode [ 488.139428][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.195418][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.215659][ T8335] bridge_slave_1: entered allmulticast mode [ 488.229491][ T8335] bridge_slave_1: entered promiscuous mode [ 488.247318][ T8342] team0: Port device team_slave_1 added [ 489.372049][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.381376][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.505297][ T8342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.518071][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.537458][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.547033][ T8596] i2c i2c-0: Invalid block write size 34 [ 490.145081][ T8342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.163408][ T8335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.184929][ T8596] netlink: 'syz.3.455': attribute type 1 has an invalid length. [ 490.191104][ T8335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.699746][ T8596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.167824][ T8608] xt_CT: No such helper "netbios-ns" [ 492.402561][ T8335] team0: Port device team_slave_0 added [ 492.545685][ T8335] team0: Port device team_slave_1 added [ 494.384202][ T8342] hsr_slave_0: entered promiscuous mode [ 494.543031][ T8342] hsr_slave_1: entered promiscuous mode [ 495.082309][ T8342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.095227][ T8342] Cannot create hsr debugfs directory [ 495.183102][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.222595][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.299888][ T8335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.436659][ T36] bridge_slave_1: left allmulticast mode [ 495.469759][ T36] bridge_slave_1: left promiscuous mode [ 495.512976][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.896110][ T36] bridge_slave_0: left allmulticast mode [ 495.901842][ T36] bridge_slave_0: left promiscuous mode [ 495.950582][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.770566][ T8641] delete_channel: no stack [ 498.500338][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.512145][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.522734][ T36] bond0 (unregistering): Released all slaves [ 498.537167][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.544148][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.571775][ T8335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.713111][ T36] hsr_slave_0: left promiscuous mode [ 498.719437][ T36] hsr_slave_1: left promiscuous mode [ 498.728563][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.736786][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.744995][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.753111][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.914778][ T36] veth1_macvtap: left promiscuous mode [ 498.926808][ T36] veth0_macvtap: left promiscuous mode [ 498.949580][ T36] veth1_vlan: left promiscuous mode [ 498.982405][ T36] veth0_vlan: left promiscuous mode [ 499.358927][ T8663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.366219][ T8663] IPv6: NLM_F_CREATE should be set when creating new route [ 499.373434][ T8663] IPv6: NLM_F_CREATE should be set when creating new route [ 499.381992][ T8663] IPv6: NLM_F_CREATE should be set when creating new route [ 499.804510][ T36] team0 (unregistering): Port device team_slave_1 removed [ 499.847593][ T36] team0 (unregistering): Port device team_slave_0 removed [ 500.270298][ T8663] netlink: 80 bytes leftover after parsing attributes in process `syz.3.467'. [ 501.566310][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.583012][ T8335] hsr_slave_0: entered promiscuous mode [ 501.634257][ T8335] hsr_slave_1: entered promiscuous mode [ 501.689681][ T8335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.781122][ T8335] Cannot create hsr debugfs directory [ 504.987857][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 507.353899][ T8734] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 508.499677][ T8342] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 508.647649][ T8342] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 508.689233][ T8342] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 508.734178][ T8342] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 511.442631][ T8342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.552799][ T8335] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 511.599076][ T8335] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 511.850210][ T8335] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 512.166063][ T30] audit: type=1326 audit(1755186119.324:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 512.197897][ T8342] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.206679][ T8335] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 512.208593][ T30] audit: type=1326 audit(1755186119.324:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 512.241177][ T8772] syz.2.490: attempt to access beyond end of device [ 512.241177][ T8772] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 512.254331][ T8772] syz.2.490: attempt to access beyond end of device [ 512.254331][ T8772] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 512.267430][ T8772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 512.277196][ T8772] syz.2.490: attempt to access beyond end of device [ 512.277196][ T8772] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 512.290086][ T8772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 512.300693][ T8772] syz.2.490: attempt to access beyond end of device [ 512.300693][ T8772] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 512.313859][ T8772] syz.2.490: attempt to access beyond end of device [ 512.313859][ T8772] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 512.326701][ T8772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 512.336312][ T8772] syz.2.490: attempt to access beyond end of device [ 512.336312][ T8772] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 512.349235][ T8772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 512.360693][ T8772] syz.2.490: attempt to access beyond end of device [ 512.360693][ T8772] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 512.373598][ T8772] syz.2.490: attempt to access beyond end of device [ 512.373598][ T8772] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 512.386577][ T8772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 512.396214][ T8772] syz.2.490: attempt to access beyond end of device [ 512.396214][ T8772] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 512.409148][ T8772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 512.419081][ T8772] syz.2.490: attempt to access beyond end of device [ 512.419081][ T8772] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 512.432010][ T8772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 512.441745][ T8772] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 512.451272][ T8772] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 512.460140][ T30] audit: type=1326 audit(1755186119.344:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 512.758256][ T30] audit: type=1326 audit(1755186119.344:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 513.070423][ T30] audit: type=1326 audit(1755186119.344:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 513.095077][ T30] audit: type=1326 audit(1755186119.344:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 513.120611][ T30] audit: type=1326 audit(1755186119.354:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 513.127624][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.145313][ T30] audit: type=1326 audit(1755186119.354:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 513.149085][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.170701][ T30] audit: type=1326 audit(1755186119.354:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 513.250250][ T30] audit: type=1326 audit(1755186119.364:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 513.309951][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.317178][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.213225][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 514.493219][ T8335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.582449][ T8335] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.335330][ T8805] delete_channel: no stack [ 518.732204][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 519.587289][ T8827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 519.624622][ T5852] Bluetooth: hci2: ISO packet too small [ 519.695542][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 519.710942][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 519.749948][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 519.758614][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 520.383298][ T5158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 520.396738][ T5158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 520.406047][ T5158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 520.418468][ T5158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 520.428716][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 521.568365][ T8850] block device autoloading is deprecated and will be removed. [ 522.125252][ T51] Bluetooth: hci3: command tx timeout [ 522.606461][ T51] Bluetooth: hci1: command tx timeout [ 523.505239][ T8828] lo speed is unknown, defaulting to 1000 [ 523.517585][ T8837] lo speed is unknown, defaulting to 1000 [ 524.428332][ T51] Bluetooth: hci3: command tx timeout [ 524.702076][ T5158] Bluetooth: hci1: command tx timeout [ 524.921085][ T5947] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 525.273793][ T8876] ubi: mtd0 is already attached to ubi31 [ 525.913025][ T5947] usb 2-1: unable to get BOS descriptor or descriptor too short [ 525.958749][ T5947] usb 2-1: not running at top speed; connect to a high speed hub [ 526.052959][ T5947] usb 2-1: config 2 has an invalid interface number: 8 but max is 0 [ 526.107050][ T5947] usb 2-1: config 2 has no interface number 0 [ 526.229711][ T5947] usb 2-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=5f.aa [ 526.309338][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.360282][ T5947] usb 2-1: Product: syz [ 526.390923][ T5947] usb 2-1: Manufacturer: syz [ 526.446431][ T51] Bluetooth: hci3: command tx timeout [ 526.468485][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 526.468536][ T30] audit: type=1326 audit(1755186133.724:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8882 comm="syz.2.512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fca20385ba7 code=0x0 [ 526.496314][ T5947] usb 2-1: SerialNumber: syz [ 526.573747][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 526.583157][ T5947] usb 2-1: can't set config #2, error -32 [ 526.592993][ T5947] usb 2-1: USB disconnect, device number 7 [ 526.766140][ T51] Bluetooth: hci1: command tx timeout [ 526.961634][ T8828] chnl_net:caif_netlink_parms(): no params data found [ 527.297910][ T36] bridge_slave_1: left allmulticast mode [ 527.303613][ T36] bridge_slave_1: left promiscuous mode [ 527.308192][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b40c00: rx timeout, send abort [ 527.324310][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.338832][ T36] bridge_slave_0: left allmulticast mode [ 527.344843][ T36] bridge_slave_0: left promiscuous mode [ 527.350692][ T8893] affs: No valid root block on device nullb0 [ 527.355041][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.662061][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.673183][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.684237][ T36] bond0 (unregistering): Released all slaves [ 527.824799][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b40c00: abort rx timeout. Force session deactivation [ 528.128310][ T8837] chnl_net:caif_netlink_parms(): no params data found [ 529.084630][ T51] Bluetooth: hci3: command tx timeout [ 529.084993][ T5158] Bluetooth: hci1: command tx timeout [ 530.303692][ T36] hsr_slave_0: left promiscuous mode [ 530.374275][ T36] hsr_slave_1: left promiscuous mode [ 530.395007][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.414245][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.680506][ T30] audit: type=1326 audit(1755186137.964:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 531.806985][ T30] audit: type=1326 audit(1755186137.964:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 531.945315][ T30] audit: type=1326 audit(1755186137.964:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 532.006509][ T30] audit: type=1326 audit(1755186137.964:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 532.099136][ T30] audit: type=1326 audit(1755186137.964:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 532.171409][ T30] audit: type=1326 audit(1755186137.964:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 532.376517][ T30] audit: type=1326 audit(1755186137.964:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 532.440106][ T30] audit: type=1326 audit(1755186137.964:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 532.478083][ T30] audit: type=1326 audit(1755186137.964:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 532.620222][ T30] audit: type=1326 audit(1755186137.964:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 532.642551][ T30] audit: type=1326 audit(1755186137.964:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2038ebe9 code=0x7ffc0000 [ 533.555610][ T36] team0 (unregistering): Port device team_slave_1 removed [ 533.615051][ T36] team0 (unregistering): Port device team_slave_0 removed [ 535.542404][ T8922] pim6reg: entered allmulticast mode [ 535.569152][ T8935] : entered promiscuous mode [ 535.990109][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.046739][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.952820][ T8958] ALSA: mixer_oss: invalid OSS volume '' [ 536.958923][ T8828] bridge_slave_0: entered allmulticast mode [ 536.967400][ T8828] bridge_slave_0: entered promiscuous mode [ 536.979254][ T8922] pim6reg: left allmulticast mode [ 537.618976][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.657451][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.283205][ T8828] bridge_slave_1: entered allmulticast mode [ 540.362132][ T8828] bridge_slave_1: entered promiscuous mode [ 541.092929][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.115350][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.122642][ T8837] bridge_slave_0: entered allmulticast mode [ 541.138171][ T8837] bridge_slave_0: entered promiscuous mode [ 541.169184][ T8828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.180928][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.190474][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.198099][ T8837] bridge_slave_1: entered allmulticast mode [ 541.205948][ T8837] bridge_slave_1: entered promiscuous mode [ 541.656229][ T8828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.724267][ T8837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.901699][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 543.424832][ T8998] ALSA: mixer_oss: invalid OSS volume '' [ 544.371655][ T8837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.384490][ T9002] bridge0: left allmulticast mode [ 544.404553][ T8828] team0: Port device team_slave_0 added [ 545.327832][ T8828] team0: Port device team_slave_1 added [ 545.819177][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 546.441514][ T8837] team0: Port device team_slave_0 added [ 546.572634][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.583270][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.648843][ T5947] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 546.693117][ T8828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.764570][ T8837] team0: Port device team_slave_1 added [ 546.932315][ T5947] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 546.932943][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.954184][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.997956][ T5947] usb 4-1: Product: syz [ 547.016431][ T5947] usb 4-1: Manufacturer: syz [ 547.021330][ T5947] usb 4-1: SerialNumber: syz [ 547.021353][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.036003][ T5947] usb 4-1: config 0 descriptor?? [ 547.207847][ T5947] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 547.235225][ T8828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.410566][ T8949] usb 4-1: USB disconnect, device number 9 [ 547.522362][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.529930][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.556341][ T8837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.616682][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.623699][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.661695][ T8837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.688861][ T8828] hsr_slave_0: entered promiscuous mode [ 547.700994][ T8828] hsr_slave_1: entered promiscuous mode [ 547.707759][ T8828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.717610][ T8828] Cannot create hsr debugfs directory [ 547.851296][ T8837] hsr_slave_0: entered promiscuous mode [ 547.857954][ T8837] hsr_slave_1: entered promiscuous mode [ 547.864135][ T8837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.872535][ T8837] Cannot create hsr debugfs directory [ 548.280651][ T36] bridge_slave_1: left allmulticast mode [ 548.286637][ T36] bridge_slave_1: left promiscuous mode [ 548.292369][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.303670][ T36] bridge_slave_0: left allmulticast mode [ 548.309705][ T36] bridge_slave_0: left promiscuous mode [ 548.316379][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.724149][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.743190][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.754221][ T36] bond0 (unregistering): Released all slaves [ 548.883945][ T36] hsr_slave_0: left promiscuous mode [ 548.894660][ T36] hsr_slave_1: left promiscuous mode [ 548.900939][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.911361][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.093836][ T36] team0 (unregistering): Port device team_slave_1 removed [ 549.133679][ T36] team0 (unregistering): Port device team_slave_0 removed [ 550.084806][ T8828] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 550.112873][ T8828] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 550.150030][ T8828] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 550.183954][ T8828] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 550.259342][ T8837] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 550.280058][ T8837] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 550.297046][ T8837] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 550.312886][ T8837] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 550.511849][ T8828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.543675][ T8837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.567857][ T8828] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.591079][ T8837] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.617006][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.624222][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.676749][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.683952][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.713909][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.721352][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.738499][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.745740][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.253918][ T8837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.289618][ T8828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.760419][ T8837] veth0_vlan: entered promiscuous mode [ 551.773733][ T8837] veth1_vlan: entered promiscuous mode [ 551.813381][ T8837] veth0_macvtap: entered promiscuous mode [ 551.837560][ T8837] veth1_macvtap: entered promiscuous mode [ 551.909297][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.942342][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.971885][ T8837] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.982101][ T8837] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.991632][ T8837] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.000789][ T8837] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.014794][ T8828] veth0_vlan: entered promiscuous mode [ 552.030800][ T8828] veth1_vlan: entered promiscuous mode [ 552.139654][ T8828] veth0_macvtap: entered promiscuous mode [ 552.165035][ T8828] veth1_macvtap: entered promiscuous mode [ 552.238193][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.250493][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.260787][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.288823][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.324511][ T8828] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.339022][ T8828] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.350323][ T8828] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.362567][ T8828] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.417676][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.433645][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.559065][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.582674][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.273521][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.981675][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.644801][ T8238] IPVS: starting estimator thread 0... [ 556.005228][ T9157] IPVS: using max 25 ests per chain, 60000 per kthread [ 556.857038][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 556.857232][ T30] audit: type=1326 audit(1755186164.134:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9160 comm="syz.1.543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe73558ebe9 code=0x0 [ 560.623583][ T9198] netlink: 80 bytes leftover after parsing attributes in process `syz.1.549'. [ 562.416357][ T9211] bpq0: left allmulticast mode [ 562.769918][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.905361][ T9211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.971214][ T9227] i2c i2c-0: Invalid block write size 34 [ 563.985820][ T9211] bond0: (slave rose0): Enslaving as an active interface with an up link [ 564.013665][ T9227] netlink: 'syz.5.562': attribute type 1 has an invalid length. [ 565.073271][ T9227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.300709][ T9243] xt_CT: No such helper "netbios-ns" [ 569.326724][ T30] audit: type=1800 audit(1755186176.004:52): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.566" name="file1" dev="tmpfs" ino=35 res=0 errno=0 [ 571.661187][ T8943] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 572.052928][ T9291] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 573.515215][ T8943] usb 3-1: device not accepting address 3, error -71 [ 575.803619][ T9320] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 577.405493][ T5158] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 578.322358][ T9329] rdma_rxe: rxe_newlink: failed to add lo [ 578.694310][ T43] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 578.715294][ T9329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.485545][ T8238] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 579.955227][ T9337] xt_CT: No such helper "netbios-ns" [ 583.569262][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 583.578149][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 583.586990][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 583.656627][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 583.668076][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 583.677353][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 583.687374][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 583.697335][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 583.707764][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 583.718759][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 589.641535][ T8238] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 589.645619][ T5903] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 589.806788][ T8238] usb 2-1: Using ep0 maxpacket: 16 [ 589.818727][ T8238] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 589.842793][ T8238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.893277][ T8238] usb 2-1: config 0 descriptor?? [ 590.410899][ T9415] block device autoloading is deprecated and will be removed. [ 591.466728][ T9413] __nla_validate_parse: 43 callbacks suppressed [ 591.466826][ T9413] netlink: 76 bytes leftover after parsing attributes in process `syz.3.598'. [ 594.219242][ T9418] ALSA: mixer_oss: invalid OSS volume '' [ 594.421921][ T8238] usbhid 2-1:0.0: can't add hid device: -71 [ 594.456010][ T8238] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 594.499090][ T8238] usb 2-1: USB disconnect, device number 8 [ 595.915191][ T5903] usb 7-1: device descriptor read/64, error -110 [ 596.685214][ T5903] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 597.005668][ T5903] usb 7-1: device descriptor read/64, error -32 [ 597.894507][ T5903] usb usb7-port1: attempt power cycle [ 598.090841][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.606'. [ 598.576006][ T5903] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 598.947053][ T5903] usb 7-1: device descriptor read/8, error -32 [ 599.721466][ T9455] team0: Port device team_slave_0 removed [ 603.285545][ T9487] ALSA: mixer_oss: invalid OSS volume '' [ 603.397245][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 604.334168][ T9507] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 606.366441][ T51] Bluetooth: hci0: command tx timeout [ 607.451476][ T9540] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.621'. [ 607.501172][ T9541] netlink: 'syz.3.622': attribute type 10 has an invalid length. [ 609.433801][ T9541] team0: Port device wlan1 added [ 609.584108][ T9551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'. [ 610.672776][ T9560] afs: Unknown parameter '01777777777777777777777' [ 610.978614][ T9564] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 612.905743][ T9580] lo speed is unknown, defaulting to 1000 [ 612.912176][ T9580] lo speed is unknown, defaulting to 1000 [ 612.924684][ T9580] lo speed is unknown, defaulting to 1000 [ 613.032431][ T9580] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 613.215823][ T9581] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 613.222994][ T9581] overlayfs: failed to set xattr on upper [ 613.228869][ T9581] overlayfs: ...falling back to redirect_dir=nofollow. [ 613.235855][ T9581] overlayfs: ...falling back to index=off. [ 613.241736][ T9581] overlayfs: ...falling back to uuid=null. [ 613.322977][ T9580] lo speed is unknown, defaulting to 1000 [ 613.339311][ T9580] lo speed is unknown, defaulting to 1000 [ 613.358849][ T9580] lo speed is unknown, defaulting to 1000 [ 613.378713][ T9580] lo speed is unknown, defaulting to 1000 [ 613.398790][ T9580] lo speed is unknown, defaulting to 1000 [ 613.925598][ T30] audit: type=1804 audit(1755186221.184:53): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.631" name="/newroot/172/file0" dev="tmpfs" ino=950 res=1 errno=0 [ 616.033912][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.636'. [ 617.501441][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 619.344933][ T9625] ALSA: mixer_oss: invalid OSS volume '' [ 619.615936][ T9635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 620.576338][ T9650] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 620.633245][ T9650] cramfs: wrong magic [ 621.477452][ T9658] ubi: mtd0 is already attached to ubi31 [ 622.951094][ T9668] netlink: 104 bytes leftover after parsing attributes in process `syz.1.646'. [ 624.494343][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.478770][ T9699] ALSA: mixer_oss: invalid OSS volume '' [ 628.577392][ T9707] syz.2.655(9707): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 629.244737][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 629.369046][ T9719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.658'. [ 629.460428][ T9709] ALSA: mixer_oss: invalid OSS volume '' [ 634.355675][ T5947] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 634.886506][ T9761] sctp: [Deprecated]: syz.3.665 (pid 9761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.886506][ T9761] Use struct sctp_sack_info instead [ 635.293391][ T5947] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 635.306769][ T5947] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 635.317038][ T5947] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 635.329873][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.442357][ T9748] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 635.610130][ T5947] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 637.764972][ T5947] usb 2-1: USB disconnect, device number 9 [ 642.449735][ T9814] xt_connbytes: Forcing CT accounting to be enabled [ 642.456754][ T9814] Cannot find set identified by id 0 to match [ 643.091495][ T9818] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 644.687768][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 644.885429][ T9820] ALSA: mixer_oss: invalid OSS volume '' [ 645.037520][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 645.048057][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 645.064536][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 646.783132][ T5158] Bluetooth: hci3: command 0x0406 tx timeout [ 648.930855][ T9865] binder: 9845:9865 unknown command 0 [ 648.931143][ T9865] binder: 9845:9865 ioctl c0306201 2000000003c0 returned -22 [ 649.797407][ T9866] : entered promiscuous mode [ 651.290960][ T9883] No control pipe specified [ 651.626610][ T51] Bluetooth: hci2: ISO packet too small [ 652.015928][ T9879] ucma_write: process 134 (syz.5.688) changed security contexts after opening file descriptor, this is not allowed. [ 653.155851][ T9903] ubi: mtd0 is already attached to ubi31 [ 662.432829][ T9991] netlink: 20 bytes leftover after parsing attributes in process `syz.5.700'. [ 670.703808][ T5158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 670.714581][ T5158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 670.723647][ T5158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 670.731965][ T5158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 670.742670][ T5158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 671.152729][T10012] lo speed is unknown, defaulting to 1000 [ 671.891413][T10012] lo speed is unknown, defaulting to 1000 [ 673.920345][ T5158] Bluetooth: hci5: command tx timeout [ 676.110119][ T5158] Bluetooth: hci5: command tx timeout [ 676.250326][T10048] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 678.126622][ T5158] Bluetooth: hci5: command tx timeout [ 678.502848][T10043] overlayfs: failed to resolve './file1': -2 [ 678.923581][T10061] fuse: Unknown parameter '`fd' [ 680.211574][ T1831] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.215163][ T5158] Bluetooth: hci5: command tx timeout [ 680.717006][ T30] audit: type=1326 audit(1755186287.994:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10066 comm="syz.5.717" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d34b8ebe9 code=0x0 [ 681.268298][T10065] ALSA: mixer_oss: invalid OSS volume '' [ 681.697364][T10081] netlink: 56 bytes leftover after parsing attributes in process `syz.6.719'. [ 683.360258][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 683.460964][ T1831] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.237259][T10106] netlink: 4276 bytes leftover after parsing attributes in process `syz.5.724'. [ 684.247242][T10106] netlink: 4276 bytes leftover after parsing attributes in process `syz.5.724'. [ 685.070909][T10091] netlink: 20 bytes leftover after parsing attributes in process `syz.6.722'. [ 685.753375][T10116] fuse: Unknown parameter '`fd' [ 687.139339][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.800726][T10118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 687.811406][T10118] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 688.372519][ T1831] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.480748][T10012] chnl_net:caif_netlink_parms(): no params data found [ 688.557623][T10122] overlayfs: missing 'workdir' [ 689.636061][ T1831] bond0: (slave netdevsim0): Releasing backup interface [ 689.719004][ T9966] ================================================================== [ 689.727110][ T9966] BUG: KASAN: wild-memory-access in percpu_ref_get_many+0x12f/0x140 [ 689.735113][ T9966] Write of size 8 at addr 4754627e9d293834 by task kworker/u8:16/9966 [ 689.743273][ T9966] [ 689.745624][ T9966] CPU: 1 UID: 0 PID: 9966 Comm: kworker/u8:16 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 689.745644][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 689.745655][ T9966] Workqueue: iou_exit io_ring_exit_work [ 689.745681][ T9966] Call Trace: [ 689.745690][ T9966] [ 689.745697][ T9966] dump_stack_lvl+0x189/0x250 [ 689.745718][ T9966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.745735][ T9966] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 689.745765][ T9966] ? percpu_ref_get_many+0x12f/0x140 [ 689.745783][ T9966] kasan_report+0x118/0x150 [ 689.745799][ T9966] ? percpu_ref_get_many+0x12f/0x140 [ 689.745818][ T9966] ? percpu_ref_get_many+0x19/0x140 [ 689.745836][ T9966] kasan_check_range+0x2b0/0x2c0 [ 689.745856][ T9966] ? percpu_ref_get_many+0x19/0x140 [ 689.745874][ T9966] percpu_ref_get_many+0x12f/0x140 [ 689.745892][ T9966] refill_obj_stock+0x254/0x850 [ 689.745920][ T9966] ? refill_obj_stock+0x116/0x850 [ 689.745945][ T9966] __memcg_slab_free_hook+0x127/0x3d0 [ 689.745984][ T9966] ? io_remove_buffers_legacy+0x232/0x310 [ 689.746005][ T9966] kfree+0x255/0x440 [ 689.746033][ T9966] io_remove_buffers_legacy+0x232/0x310 [ 689.746057][ T9966] io_destroy_buffers+0x13c/0x230 [ 689.746077][ T9966] ? __pfx_io_destroy_buffers+0x10/0x10 [ 689.746102][ T9966] ? io_alloc_cache_free+0x254/0x2a0 [ 689.746124][ T9966] ? __pfx_kfree+0x10/0x10 [ 689.746146][ T9966] ? __pfx_kfree+0x10/0x10 [ 689.746170][ T9966] io_ring_ctx_free+0xa5/0x500 [ 689.746192][ T9966] io_ring_exit_work+0x8c4/0x930 [ 689.746216][ T9966] ? __pfx_io_ring_exit_work+0x10/0x10 [ 689.746234][ T9966] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 689.746258][ T9966] ? _raw_spin_unlock_irq+0x23/0x50 [ 689.746272][ T9966] ? process_scheduled_works+0x9ef/0x17b0 [ 689.746288][ T9966] ? process_scheduled_works+0x9ef/0x17b0 [ 689.746304][ T9966] process_scheduled_works+0xade/0x17b0 [ 689.746332][ T9966] ? __pfx_process_scheduled_works+0x10/0x10 [ 689.746356][ T9966] worker_thread+0x8a0/0xda0 [ 689.746383][ T9966] kthread+0x70e/0x8a0 [ 689.746404][ T9966] ? __pfx_worker_thread+0x10/0x10 [ 689.746420][ T9966] ? __pfx_kthread+0x10/0x10 [ 689.746441][ T9966] ? _raw_spin_unlock_irq+0x23/0x50 [ 689.746454][ T9966] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.746469][ T9966] ? __pfx_kthread+0x10/0x10 [ 689.746489][ T9966] ret_from_fork+0x3fc/0x770 [ 689.746504][ T9966] ? __pfx_ret_from_fork+0x10/0x10 [ 689.746521][ T9966] ? __switch_to_asm+0x39/0x70 [ 689.746539][ T9966] ? __switch_to_asm+0x33/0x70 [ 689.746557][ T9966] ? __pfx_kthread+0x10/0x10 [ 689.746578][ T9966] ret_from_fork_asm+0x1a/0x30 [ 689.746603][ T9966] [ 689.746608][ T9966] ================================================================== [ 690.006015][ T9966] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 690.013225][ T9966] CPU: 1 UID: 0 PID: 9966 Comm: kworker/u8:16 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 690.023424][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.033490][ T9966] Workqueue: iou_exit io_ring_exit_work [ 690.039052][ T9966] Call Trace: [ 690.042334][ T9966] [ 690.045278][ T9966] dump_stack_lvl+0x99/0x250 [ 690.049890][ T9966] ? __asan_memcpy+0x40/0x70 [ 690.054492][ T9966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.059709][ T9966] ? __pfx__printk+0x10/0x10 [ 690.064340][ T9966] panic+0x2db/0x790 [ 690.068265][ T9966] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.073492][ T9966] ? __pfx_panic+0x10/0x10 [ 690.077923][ T9966] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 690.083833][ T9966] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 690.089748][ T9966] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 690.096099][ T9966] ? percpu_ref_get_many+0x12f/0x140 [ 690.101402][ T9966] check_panic_on_warn+0x89/0xb0 [ 690.106373][ T9966] ? percpu_ref_get_many+0x12f/0x140 [ 690.111674][ T9966] end_report+0x78/0x160 [ 690.115934][ T9966] kasan_report+0x129/0x150 [ 690.120445][ T9966] ? percpu_ref_get_many+0x12f/0x140 [ 690.125764][ T9966] ? percpu_ref_get_many+0x19/0x140 [ 690.130973][ T9966] kasan_check_range+0x2b0/0x2c0 [ 690.135923][ T9966] ? percpu_ref_get_many+0x19/0x140 [ 690.141130][ T9966] percpu_ref_get_many+0x12f/0x140 [ 690.146261][ T9966] refill_obj_stock+0x254/0x850 [ 690.151143][ T9966] ? refill_obj_stock+0x116/0x850 [ 690.156226][ T9966] __memcg_slab_free_hook+0x127/0x3d0 [ 690.161624][ T9966] ? io_remove_buffers_legacy+0x232/0x310 [ 690.168029][ T9966] kfree+0x255/0x440 [ 690.172321][ T9966] io_remove_buffers_legacy+0x232/0x310 [ 690.177888][ T9966] io_destroy_buffers+0x13c/0x230 [ 690.182940][ T9966] ? __pfx_io_destroy_buffers+0x10/0x10 [ 690.188499][ T9966] ? io_alloc_cache_free+0x254/0x2a0 [ 690.193798][ T9966] ? __pfx_kfree+0x10/0x10 [ 690.198234][ T9966] ? __pfx_kfree+0x10/0x10 [ 690.202668][ T9966] io_ring_ctx_free+0xa5/0x500 [ 690.207461][ T9966] io_ring_exit_work+0x8c4/0x930 [ 690.212417][ T9966] ? __pfx_io_ring_exit_work+0x10/0x10 [ 690.217896][ T9966] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 690.223207][ T9966] ? _raw_spin_unlock_irq+0x23/0x50 [ 690.228410][ T9966] ? process_scheduled_works+0x9ef/0x17b0 [ 690.234219][ T9966] ? process_scheduled_works+0x9ef/0x17b0 [ 690.239957][ T9966] process_scheduled_works+0xade/0x17b0 [ 690.245524][ T9966] ? __pfx_process_scheduled_works+0x10/0x10 [ 690.251528][ T9966] worker_thread+0x8a0/0xda0 [ 690.256163][ T9966] kthread+0x70e/0x8a0 [ 690.260266][ T9966] ? __pfx_worker_thread+0x10/0x10 [ 690.265397][ T9966] ? __pfx_kthread+0x10/0x10 [ 690.270005][ T9966] ? _raw_spin_unlock_irq+0x23/0x50 [ 690.275219][ T9966] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.280424][ T9966] ? __pfx_kthread+0x10/0x10 [ 690.285048][ T9966] ret_from_fork+0x3fc/0x770 [ 690.289651][ T9966] ? __pfx_ret_from_fork+0x10/0x10 [ 690.294855][ T9966] ? __switch_to_asm+0x39/0x70 [ 690.299626][ T9966] ? __switch_to_asm+0x33/0x70 [ 690.304398][ T9966] ? __pfx_kthread+0x10/0x10 [ 690.308999][ T9966] ret_from_fork_asm+0x1a/0x30 [ 690.313789][ T9966] [ 690.317188][ T9966] Kernel Offset: disabled [ 690.321521][ T9966] Rebooting in 86400 seconds..