last executing test programs: 6m30.434094285s ago: executing program 1 (id=385): r0 = socket$inet(0x2, 0x80000, 0xfffffffd) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) listen(r2, 0x6) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 6m28.451169549s ago: executing program 1 (id=387): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x2c020400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000001bff4)={0x10000000}) signalfd4(r1, &(0x7f0000000180), 0x8, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x400000000080803, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 6m26.522116209s ago: executing program 4 (id=390): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10a000, 0x11) faccessat2(r3, &(0x7f0000000180)='./file1\x00', 0x4, 0x1000) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 6m23.939764554s ago: executing program 3 (id=395): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xd6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='rxrpc_rx_ack\x00', r1, 0x0, 0x3}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$isdn_base(0x22, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r7, r8, 0x4, 0x0, 0xffffffff, 0x804, {0xac7a, 0x1, 0x803, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x0, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) socket$igmp6(0xa, 0x3, 0x2) socketpair(0x1f, 0x800, 0x4000003, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0xaa181, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) 6m23.822306109s ago: executing program 4 (id=396): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) open(0x0, 0x2002, 0x100) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x200040, 0x0, 0x0, 0x0, 0xc49, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x27}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x264a0f81f8e75c0a, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 6m22.809346934s ago: executing program 3 (id=397): r0 = syz_open_procfs(0x0, &(0x7f0000003180)='net/vlan/config\x00') r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85}, 0x50) semget(0x1, 0x1, 0x789) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="700000006800010003001000fdffff7f00000000000000000c000200010000001500000044000c800600010081000000080202000300000006000100ff7f0000080002001a00000006000100dc000000080002000e000000080003000400000008000200010000000600030001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000002f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r6, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x70}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x8004) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000003040)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="2800000003080101000000e4ffffff000a00000305000300010000000c0004800800034000007af4"], 0x28}, 0x1, 0x0, 0x0, 0x240208c1}, 0x4040000) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 6m21.777850023s ago: executing program 3 (id=399): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 6m21.214972364s ago: executing program 1 (id=400): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1001, 0x7], [0x9, 0xfff], 0x108}}) r1 = socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=no%e') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 6m19.718412107s ago: executing program 1 (id=401): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0xfffffffffffffffe, 0x545100) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(0x0, r4) 6m17.760241879s ago: executing program 3 (id=404): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2, 0x0, &(0x7f00000002c0)='\x00\x00', 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 6m17.710073185s ago: executing program 0 (id=405): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c80, 0x0) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 6m16.641152125s ago: executing program 3 (id=406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r4 = socket(0x10, 0x3, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000040)=0x40000001, 0x4) recvmmsg(r4, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01030000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000"], 0x60}, 0x1, 0x0, 0x0, 0x800c}, 0x20000000) 6m16.29299805s ago: executing program 4 (id=408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020839f1000034fffe00e1fc06900101010101ac1414aa00004e22774a2562daf2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000290780932080a000000020000000b0502"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r3 = socket(0x1, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x1000, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x19c, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x16c, 0x8, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x4}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 6m15.545502659s ago: executing program 3 (id=409): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x93d, &(0x7f0000000080)={0x0, 0x70e6, 0x2, 0x2, 0x119}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) mremap(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000845000/0x1000)=nil) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 6m15.489492563s ago: executing program 0 (id=410): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x2c020400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000001bff4)={0x10000000}) signalfd4(r1, &(0x7f0000000180), 0x8, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x400000000080803, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 6m15.425587607s ago: executing program 1 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e21, @loopback}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x604e00, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1}, 0x200080d0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)=""/130, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x64, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000600)={@multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8, @none, 0x0, 0x1}, 0xe) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x0, 0x0) 6m13.997986219s ago: executing program 0 (id=412): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c80, 0x0) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 6m12.43249709s ago: executing program 1 (id=413): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 6m12.182660567s ago: executing program 4 (id=415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01}, 0x44) 6m11.677702079s ago: executing program 0 (id=416): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xd6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='rxrpc_rx_ack\x00', r1, 0x0, 0x3}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$isdn_base(0x22, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r7, r8, 0x4, 0x0, 0xffffffff, 0x804, {0xac7a, 0x1, 0x803, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x0, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 6m11.525074699s ago: executing program 4 (id=417): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000031c0)=ANY=[@ANYRES32, @ANYBLOB="31f82661"], 0x1000f) 6m11.412809447s ago: executing program 0 (id=418): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 6m11.331105514s ago: executing program 4 (id=419): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 6m10.207711695s ago: executing program 0 (id=420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 5m59.929278076s ago: executing program 32 (id=409): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x93d, &(0x7f0000000080)={0x0, 0x70e6, 0x2, 0x2, 0x119}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) mremap(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000845000/0x1000)=nil) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 5m54.893713085s ago: executing program 33 (id=413): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 5m54.25838601s ago: executing program 34 (id=420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 5m53.571588912s ago: executing program 35 (id=419): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 3m59.051010156s ago: executing program 6 (id=509): socket$alg(0x26, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c80, 0x0) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 3m55.151137318s ago: executing program 6 (id=514): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 3m51.950424972s ago: executing program 6 (id=519): gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x18031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) munmap(&(0x7f0000498000/0x2000)=nil, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa01535cab80c20000000800490000380000000000059078acf900010a010100890bc6ac1e0001ac1414aa830200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000e0290780000"], 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 3m48.280417954s ago: executing program 6 (id=523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f000001b000)=ANY=[@ANYRES32], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) syz_emit_ethernet(0x26c, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{r2, 0x2000}, {0xffffffffffffffff, 0x4}], 0x2, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fedbdf2528fcff000a0001007770616e3000000005002e00c400000005002b0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000080), 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r8 = shmat(r7, &(0x7f0000001000/0x3000)=nil, 0x1000) shmctl$IPC_RMID(r7, 0x0) shmdt(r8) 3m45.102547743s ago: executing program 6 (id=527): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 3m44.543286195s ago: executing program 6 (id=530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r4, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 3m28.990121312s ago: executing program 36 (id=530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r4, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 33.156884256s ago: executing program 2 (id=852): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 31.011345998s ago: executing program 8 (id=855): socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0x7c80, 0x0) sendmsg$nl_generic(r6, 0x0, 0x4000) recvmmsg(r6, 0x0, 0x0, 0x2000, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r4) 29.344867995s ago: executing program 2 (id=859): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="208100"], 0x0, 0x0, 0x0, 0x0}) 29.222843129s ago: executing program 8 (id=860): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403"], 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) recvmsg(r2, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @broadcast}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 27.062389211s ago: executing program 8 (id=863): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xff7fffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 26.952731997s ago: executing program 7 (id=864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1, 0x35}}], 0x48}, 0x0) 26.680704633s ago: executing program 8 (id=865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/address_bits', 0xc0c00, 0x0) lseek(r3, 0x24, 0x0) getdents64(r3, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x22, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "c828adbc"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0xc, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x10, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xb, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xe, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x2, 0x9}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x8, 0x1, 0x10, 0xe6}, 0x3d, &(0x7f0000000dc0)={0x5, 0xf, 0x3d, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x9, 0x11f0f, 0x9, [0x30, 0xf0, 0x3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0xe, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x62, 0x7, 0x6, 0xfffe, 0x8}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x0, 0x84, 0x2, 0xa}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x406}}, {0xa7, &(0x7f0000000540)=@string={0xa7, 0x3, "4860145b1503b43a1d4cf5271fd4623471f8282a4449abf0e36751690bef302e68b2fd947fba5b1497afcf1b1056558662aa2f27765cb556e01735fa31d2adec7cae854d76acb091d0c64994dd24272ec3ea3d95556b29f00aba5fa72a407dddd8e422b8d924aed10982d6fe1a829318d852f647d2d8d2c8666667cd0b8faf5318effe3add2ac8254fbbc4f92ede51797e0e586e0fd20c77948b031d710739bb5cd23d6d02"}}, {0x0, 0x0}, {0x2b, &(0x7f0000000d40)=@string={0x2b, 0x3, "1ce4ff4693909c55825ce3232827a7d67657361af76d21de23b74c758f5581fe54584cddee729f12f0"}}, {0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}]}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d370887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x1006) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r6, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x8, 0xfffffffff30bda46, 0x0, 0xfffc, 0x6, 0x5d3186cd, 0x0, 0x0, 0x10, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r7}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x80000) dup2(r8, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 25.801114552s ago: executing program 7 (id=866): socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r5, 0x1, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r6, 0xffffffffffffffff, 0x4}, 0x10) 25.648814672s ago: executing program 2 (id=868): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f00000004c0), 0x0, 0x0, 0x1, 0x1}, 0x28) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0x80d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004c00)=""/102392, 0x18ff8) socket(0x23, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r2, 0x0, 0x4044004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x1, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x4, 0x400, 0x0, 0x9, 0x4, 0x0, @multicast1, @empty}}}}) 24.417059357s ago: executing program 7 (id=869): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 22.907158688s ago: executing program 7 (id=870): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)=ANY=[@ANYBLOB="68000000000000004b000000000000002000000000110000000000"], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) socket$netlink(0x10, 0x3, 0x5) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000380)="86f4ba15783ee01c498d427cb00cf4113d5f00c90cdd38a5a3962acb468c585752d97a7cc13b4e96dc44408bbbfff1863c7b71cfc7fbf0e0c4880690f14523bc3b7ee1603afdf1e04fb7044fc04e18695d2fe2c182bdbafee02b4b1b90c09430", 0x60}, {&(0x7f0000000440)="ccce0bccdeadc7767e19f9300b412f99b9d3090708d3d8856bd5a70be3d61687643b31bb2f86b3a4986911d30f5f4b7bc9b01e717baa5366b5a8c91785d44e7bc81af18e281b9fd0868afb0969667c58ef6f4d07927a7ac143ef4a08f3636b460330681409f2bee844e10f579c7e1eb1ec8d7f8b3e39e7d9b69400fe1d916f95fa9fdd29486f9a20bec25c6aba125373574918a4d9fe9f187cb78079199b92416b1721c8ea91f15379bac9bbf0a4c5ae53075bcbbc", 0xb5}, {&(0x7f0000000140)}, {&(0x7f0000000500)="d1709d727d312c74c3013b4694f77dc598ab1a123d40ee2d09c5b41fc9b5075ce6e1252f68b2074b63c8d5797cd3c24e8736897d1d5c547fadee58e74fc1e911f0feaa9f372e35f41ed5ab03292e5a8053eb7b347cf7ec146b98369466c047de818762e054a44dcef5b8d360e60d03bcf82e16cd7141dc419023ef29177670903d23af0f43bfe5d87bc5417463e54f561241fbf35a85c1bbe4b011d41f650f9685720fba851f5796e18c92464f491d280568758c0089c7", 0xb7}, {&(0x7f0000000680)}, {&(0x7f0000000840)="7459295f9fb46518b124f1290cdb7efdf13cba829229d6fef7bfb6c655fcea2aa302f79fcedde6e1096af5a64850080c779e3ccbba770ab5383698762ed42ce49817a248c988333ccca6279522180eb8bdca028b709b2d50a28d66fcf181c786169fded4fb765848d7f36010bb6dd195ac773a81c07e7802037b331970b1893cbb051dec11968d077ddafba5037f808b5e7f7ef7fde23fa862bb307ead54d4d9969bf266f2922287", 0xa8}, {&(0x7f0000000900)="9f4ec0a1dbdc95b8cf6fd60801cc4b35535ef2b802369f6b3c005f66a52c267ea61a8bed6b86b76704068433bdadb227da5d02b1ca55822aecbb7ac72ab562eab587a53a8ac106bb9c75825f1abbe973facf0269f7a8ab3efc25d026de499917e0c603a7f54dc1281f1872144b25b5e1e95723a9f03fcd7d4ba68253ee75684ff3e9050b2eea88db72650f5149c759c008e743436291395a207ccc4b2a1b47cd1de83d8eb204f0ad83d45bce8285e9ce2dfe97a40f41842ea6aecafa82", 0xbd}], 0x7, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @multicast2}}}], 0x40}}], 0x1, 0x4000890) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 22.834023945s ago: executing program 2 (id=871): wait4(0x0, 0x0, 0x1000000, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r5 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}, 0x60044884) r7 = fanotify_init(0x40, 0x0) write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x001'], 0x20) 22.108822927s ago: executing program 2 (id=873): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x6a4, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) 21.113173664s ago: executing program 5 (id=875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020839f1000034fffe00e1fc06900101010101ac1414aa00004e22774a2562daf2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000290780932080a000000020000000b0502"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r3 = socket(0x1, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x1000, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x148, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x118, 0x8, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x70, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x4}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x4}]}]}, 0x148}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 21.0179289s ago: executing program 2 (id=876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1, 0x35}}], 0x48}, 0x0) 20.462943573s ago: executing program 8 (id=877): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x1c9602, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1, 0x35}}], 0x48}, 0x0) 19.425073782s ago: executing program 8 (id=878): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2564], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) r1 = io_uring_setup(0x93d, &(0x7f0000000080)={0x0, 0x70e6, 0x2, 0x2, 0x119}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) mremap(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000845000/0x1000)=nil) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) read$FUSE(r5, &(0x7f0000001080)={0x2020}, 0x2020) 18.509212719s ago: executing program 9 (id=880): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01}, 0x10}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0', [], 0xa, "9af0ceb6b2890a08e650b08abd84c40f303514852d4ee8ead0fd45"}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.232611991s ago: executing program 5 (id=881): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x2e34, &(0x7f0000000180)) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 17.813992904s ago: executing program 5 (id=882): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.559805866s ago: executing program 9 (id=883): wait4(0x0, 0x0, 0x1000000, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r5 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}, 0x60044884) r7 = fanotify_init(0x40, 0x0) write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x001'], 0x20) 16.73254896s ago: executing program 5 (id=884): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 16.26333186s ago: executing program 9 (id=885): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) 15.527160208s ago: executing program 5 (id=886): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x6a4, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r8, 0xffffffffffffffff, 0x600000000000000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 15.491912371s ago: executing program 7 (id=887): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 15.17410846s ago: executing program 9 (id=888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x1c9602, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1, 0x35}}], 0x48}, 0x0) 13.486280592s ago: executing program 5 (id=889): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xac4, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0xa8e, 0x3a, 0x0, @local, @private2, {[@srh={0x3c, 0x10, 0x4, 0x8, 0xae, 0x30, 0xb, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x16, "8335e7073e944cd6560b0e441c2147e92926694ecb3581a72202071849121cc7ce47424f4af5a8cb0601d35bbc9acd5e764f4b4a910fca336a69cb204ed3f617f9b38d63bd2f6a5333ed50bc314284702658f2f02d84c7ae846ddbc82e30ebb93e12566d204717f16ab96105cf7183419e2217730197edd3643bf4b5475296b1281bfecf061b8a7618c212771457df2a4aad61ae0db8abe773cf2674c78f4084167a9ca463e10d7500822eb54485ac976c05"}, {0x1f}, {0xe, 0x12, "f0749118229213f62d83ef54243e48e5b6fd3cae1ea3b5bac98682958392bbf8dd2458c0a58318e7880e4b4e62fc1871ca55c946056fb7c41ef634cc22cddec16e41bc37c3aea2f429fa687a70f6978dc6bf9ccaa6a0f9a09178921fe8aa89a037e506fc9dd6c17b676b8aaef9d91d6d89ce5d02c9b7a8a434ad9d01fd2e7547d4737a9a3b0622c1628075d49d9b439bf97b5c"}, {0x18, 0x18, "ea95ab0a03f93049172c0281c483125e5b0d01ec159c49c5a6924beddc8278e8168630508eada0f4e6d137abfdcdd034673c5bc0c0f922fcd822fe593240b2e66e2c656ac7bfced046cf5c3e03cd87fcd90bd1ca58eeecb40a8d8c16296394e1c09807c648fb5d0e0efdaeef82905fb1370796c5a1960836bf3cb007326010b88498fd095590d5bacf287d2ee767e9fda78cd1052492a684d63678082bc6099bd5f40237e9c2ef2a8151b729b8844077d57db6f20438fb44431a18f155c0c00c6cc5efb7"}, {0x14, 0xfc, "5410d5bc1e896fc2e59af62dc9c810b5bdb94f48e22ee57fe5a39a91aff47de7af78c97c5b5bbe9b6f683afcc4ffec043c7cadcd9c17ef5dcd068126bf0c69c95b98bb208fcb56124b2928cf80977b550d6f46d6d4a6942902311f9aa7153e9a893183603077bd41f20cee2027100120282a6429196ab4f8cbae49cd359a5a4dbc76d6786a518f7d2d9cac75c0b303ccc7c795a59c0977c57a98aca8c99ffee97f9409607d4a3b3ce45d3dae35a8a8e42cff3239107852383b45fc1ac92a03e27904c477dae73279afe7906a1acbe87f8b283b66a8246cb1e4bb8cf4f2b7932c0fcb18316fc3e075e3d3382222e3faaba9c60dc8e1b5c96af5084d47d2f3a165e3fe644aed54de4f10ea361e0c53a7bb7a0ee3b4650c7b0409b30716db4b7211aa49bd51b2ea9bb7dce5f58d81749c3be621d26407e995563a1923d2f73a66cda999af33522b0878bba0413370a44de8098b3ec959ee4d6d870746e3a2c0c59af6a427ba9eda1c06a5feb2c0014efc339ac60207f9ec05d86af785d8643cd8ebb6d335682249b4cb24ce2f0d5148f9b65bbe62ec14b3163610788989f7389c1a52f71823523dfe5d96b143a97599d46526da55ca5aa046135fe2b770efe78e16119169faf9df4998079883ffe85026ddee4bce1c66c79c3c063cfdbaceafada81892ef836106327aaf93aa0e855269cb34a691bac877faa0b294da6b83329c7f43a6d06359b76f9993723634afbbf149f2b40389dd93d9b58688f362e515ee7cb07d46cd775536fc56c1ddbf9b1bc3478e613bc18aae2fdfd1f5d64b4d42810801d6d9b3d21988e484a9429de24be9037042eef33ceef19fc7994f91713d56a1f8de485c52c8b033087d3410acb275835445ed09e9845902a93f9061b47f36acac63425d63b7877441a5f44ad75140156764a1d27f12a681d1a5f5ef1abb12544f17def2b76ac5625f39470a20738ea98a99cdeccae666018eb64cebbfb4345d96a93b854118e138204d03de81f008b74175bb8265add714475166b99a439ee253c5c3396ef545c9d9b3b1be6dd17b7470ad388b8dd9cbac135c3c74ae833ce85f3e070e0403b4defef0430f132b17c87e76e0e0dbabefabde8f8d005eb29e6a4eb62cde700f0d889c16f30e2dcd9579a5ebe3eef1e3071bb7e2b5d0762f48d212a692aa856b2312b20a17f92e48ed2acf0e9ebb689b847decd1f1149084b1cc02d48cdc471b3e018afdb85be418f9d1afdc93ae68cdcdbae60f94105c1ec420cc11979ff4853b35e79fcc12d650bb1cce7fc84a46f90ec18d6577ec843e1eeaaf1797f4fd888b612213d9669367a41be08de038e005d84d69a51ce9cae60e844eb2536cc6e7ed0b0040764e39bbe8ce2499b1357147f14b30a526671a5adcbf8b76dedecb1979fce3765eb70193faf9a1b5b1d7ed852c5542623da9f609ecce6b88d08ac88b36625e5706b20d82e862c3b50861ae4a1713c1b56032f7a242285ae871d9bf2444f744628f7650848f8cb51dd292a60d4c14c599d1c1bdda76ae0c956f45f5235eb6af62f13b22e0fa7c78a3605b227f0cd5a68d759a2ccac831d19f71f872d83517f02205a0d082cea380065d6a6f20d0c4897e609d71d295a94ff5a90b049fca237bc3ce302c1f65528107d2224d23640d2bbeea1a545759bcf2a7339a64cfdd926bd0025a376d418e2c9d0ad3e2ee2752fb72a54aa3ea089df928e933009138e0ca9eb6c99c406962ca3bbc3df11fe9974b90a22bcd7068953266f615edf9bc32f125effdb85b6f44232c495df1729a4ba2d866797313e8491080a86842b3e78b8e8a6d5d1c85b3766739749a712f8cc518aa42c56641e07f0bfe3a4a798f833761c494e2230059849e156ad68697398b48aa1c29b9ef67e25278564188ebd725c876573e93394fe65b4421fc1ec0d07213ebd6a0be5fc95aba7fb2655fd65e0ac6e99d88c6439246a8b17f4ca4628414a77d2363536eec1c5aace4ce797da96cdb7c8c8d6b074c3b9533e49bef0bbb82053193455f74f178f914b2578d7135161742b81963418228ca91629c36e84dca645de593dee83a4363b97952ee20efb250b3ce89639cbbb8798dd65101cd4c1fef5faf12e86060367361dbb0c22c55d13617a2787b898c3614fab03d0efbbb4a976811743cd7451e5bba2146e57cd4bc5f7b3ff9e0172ec8d6f1b8886e1a005131ab7337442a0a0129bba63b825f3a8c068ff87c814f100418bd34ac916adbb4dc872cae3cffbfe5fb7cf436f000931c02a7621dbcb4e80898035043c6b4411988051f4e487f08bb6e2ccfea8855232ec9199de423a7c18c10c3e160b076e91fbf271c952b096ced2f198a3f71e859c87636f373e8e2fba2392d3f8adcc6926e06ac3e4a68e1b558d00478d9bf4ec26ae5f76cb6255af16a1b5a6fd4d79a47dca48ddde4e32b7354c73c89d5756b003ded6afdb515ad8cba49c124e973bfe57831b0503f5cf8460aad2399daf1cbf1c7e2be8fdb314db3e23e468328d3263980902132f7d0d5457fdd4795150cec8e261a9ac249e27d6672bc668e03340dcfcf2e04c6e2e4e9b428f0c024b81aa6facbf0e7751077ae8cd43ce5f8975a6bf6851da8bac6ece9e4426b0fd221a64e9dccd9cc85e50aab44e21144dae5a88a4b35f56920d531a4fdf989406c92f6ad40cfa3f5633bd3fbf670f4e3c74019141a3cd80bde04260327cd8b4b0d5af034ae4be454093f95858d0b0399f011d6aa74a1729360ad6250c54d1a906ec876b3eb5ae45debd184b7c7119cf100979a8fc0d555bc972b15eeb5abe9cdbfcfab35a40dc54115a42876721b0647892d37f980a7ba10cd512302c9"}]}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80)=[{{&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x5, 0x48000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) sendto$inet(r0, &(0x7f00000001c0)="696d9fe62306edf82ff96b94000c8ca8702447ef2fe7f51ac97716", 0x1b, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x1003502, 0xa}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 13.2471892s ago: executing program 9 (id=890): r0 = inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) 7.24975441s ago: executing program 7 (id=891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020839f1000034fffe00e1fc06900101010101ac1414aa00004e22774a2562daf2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000290780932080a000000020000000b0502"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r3 = socket(0x1, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x1000, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x148, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x118, 0x8, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x70, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x4}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x4}]}]}, 0x148}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 0s ago: executing program 9 (id=892): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 6 bytes leftover after parsing attributes in process `syz.1.302'. [ 259.956762][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 259.963124][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 259.969507][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 259.975734][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 261.691498][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 262.025808][ T7221] usb usb8: usbfs: process 7221 (syz.2.308) did not claim interface 0 before use [ 262.035110][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 264.796286][ T7227] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 264.861894][ T7227] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.881212][ T7227] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 264.972200][ T7227] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.045646][ T7227] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 265.052190][ T7227] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.502461][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 266.952470][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.152665][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 267.158717][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 267.164917][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 267.591388][ T7249] netlink: 68 bytes leftover after parsing attributes in process `syz.4.317'. [ 267.929197][ T7254] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 268.710068][ T7253] No buffer was provided with the request [ 268.980910][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 271.968991][ T7269] No buffer was provided with the request [ 273.350826][ T7282] netlink: 56 bytes leftover after parsing attributes in process `syz.0.323'. [ 278.649568][ T7305] usb usb8: usbfs: process 7305 (syz.1.324) did not claim interface 0 before use [ 279.064402][ T7313] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 279.148000][ T7314] overlayfs: failed to clone upperpath [ 279.972933][ T7316] netlink: 44 bytes leftover after parsing attributes in process `syz.4.330'. [ 279.998826][ T7313] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 280.006973][ T7313] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 280.021119][ T7313] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 280.029745][ T7313] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 280.690938][ T7320] bad cache= option: no%e [ 280.690938][ T7320] [ 280.697567][ T7320] CIFS: VFS: bad cache= option: no%e [ 281.836333][ T7328] netlink: 44 bytes leftover after parsing attributes in process `syz.0.334'. [ 283.330271][ T7340] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 285.796972][ T7357] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 285.828579][ T7357] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 285.836720][ T7357] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 285.847267][ T7357] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 285.855766][ T7357] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 287.293768][ T5942] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 287.611071][ T5942] usb 3-1: Using ep0 maxpacket: 8 [ 287.638423][ T5942] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 287.656080][ T5942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.698395][ T5942] usb 3-1: config 0 has no interface number 0 [ 287.716184][ T5942] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 287.726197][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.742355][ T5942] usb 3-1: Product: syz [ 287.753221][ T5942] usb 3-1: Manufacturer: syz [ 287.769334][ T5942] usb 3-1: SerialNumber: syz [ 287.806563][ T5942] usb 3-1: config 0 descriptor?? [ 287.848143][ T5942] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 287.899026][ T5942] usb 3-1: No valid video chain found. [ 288.277024][ T7377] overlayfs: failed to clone upperpath [ 290.564459][ T5942] usb 3-1: USB disconnect, device number 9 [ 291.274135][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 291.431214][ T10] usb 3-1: device descriptor read/64, error -71 [ 291.713864][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 291.861241][ T10] usb 3-1: device descriptor read/64, error -71 [ 292.021259][ T10] usb usb3-port1: attempt power cycle [ 293.259016][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 293.621528][ T10] usb 3-1: device descriptor read/8, error -71 [ 293.748204][ T7408] 8021q: VLANs not supported on ipvlan1 [ 293.758338][ T7408] process 'syz.2.353' launched './file0' with NULL argv: empty string added [ 293.771347][ T7407] [U]  [ 295.104808][ T7426] netlink: 56 bytes leftover after parsing attributes in process `syz.3.356'. [ 296.307717][ T7432] netlink: 56 bytes leftover after parsing attributes in process `syz.3.358'. [ 297.905427][ T7441] No buffer was provided with the request [ 300.021864][ T7454] 8021q: VLANs not supported on ipvlan1 [ 302.713677][ T7472] netlink: 56 bytes leftover after parsing attributes in process `syz.2.369'. [ 302.843411][ T7477] netlink: 'syz.0.370': attribute type 4 has an invalid length. [ 302.851163][ T7477] netlink: 152 bytes leftover after parsing attributes in process `syz.0.370'. [ 302.864285][ T7477] : renamed from bond0 (while UP) [ 305.327082][ T7497] netlink: 44 bytes leftover after parsing attributes in process `syz.2.375'. [ 305.762731][ T7486] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 305.776917][ T7486] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 305.784783][ T7486] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 305.793236][ T7486] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 305.818971][ T7486] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 306.701029][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 306.764809][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.379'. [ 306.880961][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 307.172058][ T24] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 307.193974][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.206862][ T24] usb 3-1: config 0 has no interface number 0 [ 307.216228][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 307.361192][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.418162][ T24] usb 3-1: Product: syz [ 307.426725][ T24] usb 3-1: Manufacturer: syz [ 307.455730][ T24] usb 3-1: SerialNumber: syz [ 307.488872][ T24] usb 3-1: config 0 descriptor?? [ 307.509983][ T24] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 307.526560][ T24] usb 3-1: No valid video chain found. [ 309.984899][ T7528] No buffer was provided with the request [ 310.647872][ T5922] usb 3-1: USB disconnect, device number 14 [ 312.051932][ T7543] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 312.997134][ T7545] netlink: 56 bytes leftover after parsing attributes in process `syz.2.386'. [ 313.826322][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 315.475762][ T7554] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 315.584582][ T7554] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 315.602342][ T7554] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 316.108258][ T7554] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.155829][ T30] audit: type=1326 audit(1752573592.887:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7560 comm="syz.3.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb18e929 code=0x0 [ 316.190661][ T7554] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 316.202455][ T7554] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 316.810918][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 316.860677][ T7569] netlink: 'syz.3.393': attribute type 4 has an invalid length. [ 316.868750][ T7569] netlink: 152 bytes leftover after parsing attributes in process `syz.3.393'. [ 317.036516][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.045940][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.903625][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.909750][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 318.170872][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 318.261098][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 318.846652][ T7587] netlink: 56 bytes leftover after parsing attributes in process `syz.3.397'. [ 319.633026][ T7592] No buffer was provided with the request [ 320.196654][ T7596] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 320.231242][ T7596] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 320.256397][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 320.739058][ T7601] bad cache= option: no%e [ 320.739058][ T7601] [ 320.745992][ T7601] CIFS: VFS: bad cache= option: no%e [ 323.670337][ T7612] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 323.689420][ T7612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 323.763381][ T7612] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 323.789162][ T7612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 323.801079][ T7612] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 324.053303][ T7622] netlink: 44 bytes leftover after parsing attributes in process `syz.3.404'. [ 324.416224][ T7612] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 325.070956][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 325.693647][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 325.770933][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 325.984638][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 326.490860][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 328.290271][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 329.185106][ T7657] netlink: 96 bytes leftover after parsing attributes in process `syz.4.415'. [ 329.518832][ T7657] 8021q: VLANs not supported on gre0 [ 335.950770][ C1] sched: DL replenish lagged too much [ 349.646463][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.656886][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.665400][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.674497][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.682597][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.768836][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.777345][ T5848] Bluetooth: hci2: command tx timeout [ 351.827067][ T5159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.835432][ T5159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.843898][ T5159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.853576][ T5159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.939411][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 351.961863][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 351.971261][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 351.979406][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 351.987294][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.042809][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 352.052186][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 352.066500][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 352.074663][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 352.083073][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 352.313136][ T7706] netlink: 'syz.2.426': attribute type 4 has an invalid length. [ 352.320984][ T7706] netlink: 152 bytes leftover after parsing attributes in process `syz.2.426'. [ 352.337483][ T7706] : renamed from bond0 (while UP) [ 353.870834][ T5159] Bluetooth: hci2: command tx timeout [ 354.011228][ T5159] Bluetooth: hci1: command tx timeout [ 354.091010][ T5159] Bluetooth: hci0: command tx timeout [ 354.170916][ T5159] Bluetooth: hci4: command tx timeout [ 355.930862][ T5159] Bluetooth: hci2: command tx timeout [ 356.370905][ T5159] Bluetooth: hci1: command tx timeout [ 356.376465][ T5159] Bluetooth: hci0: command tx timeout [ 356.382067][ T51] Bluetooth: hci4: command tx timeout [ 357.341386][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.526033][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.773639][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.798141][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.010970][ T5159] Bluetooth: hci2: command tx timeout [ 358.151971][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.187298][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.411564][ T5159] Bluetooth: hci0: command tx timeout [ 358.417135][ T5159] Bluetooth: hci4: command tx timeout [ 358.422700][ T5848] Bluetooth: hci1: command tx timeout [ 359.256087][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.291106][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.795007][ T7693] chnl_net:caif_netlink_parms(): no params data found [ 360.648195][ T36] bridge_slave_1: left allmulticast mode [ 360.671276][ T36] bridge_slave_1: left promiscuous mode [ 360.678384][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.704272][ T51] Bluetooth: hci4: command tx timeout [ 360.710558][ T5159] Bluetooth: hci0: command tx timeout [ 360.717409][ T5848] Bluetooth: hci1: command tx timeout [ 360.743240][ T7730] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 360.809167][ T36] bridge_slave_0: left allmulticast mode [ 360.827162][ T36] bridge_slave_0: left promiscuous mode [ 360.844342][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.966080][ T36]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.989597][ T36]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.019405][ T36]  (unregistering): Released all slaves [ 363.239604][ T7699] chnl_net:caif_netlink_parms(): no params data found [ 363.268732][ T7697] chnl_net:caif_netlink_parms(): no params data found [ 364.085047][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.248460][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.261224][ T7693] bridge_slave_0: entered allmulticast mode [ 364.269202][ T7693] bridge_slave_0: entered promiscuous mode [ 364.782916][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.810076][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.835599][ T7693] bridge_slave_1: entered allmulticast mode [ 364.883561][ T7693] bridge_slave_1: entered promiscuous mode [ 365.430503][ T7693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.708134][ T7695] chnl_net:caif_netlink_parms(): no params data found [ 365.743455][ T7693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.930890][ T36] hsr_slave_0: left promiscuous mode [ 366.198064][ T36] hsr_slave_1: left promiscuous mode [ 366.878563][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.020950][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.516254][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.530957][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.650104][ T36] veth1_macvtap: left promiscuous mode [ 370.711045][ T36] veth0_macvtap: left promiscuous mode [ 370.730526][ T36] veth1_vlan: left promiscuous mode [ 370.862411][ T36] veth0_vlan: left promiscuous mode [ 377.734901][ T36] team0 (unregistering): Port device team_slave_1 removed [ 377.839080][ T36] team0 (unregistering): Port device team_slave_0 removed [ 378.425680][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.432913][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.200258][ T7697] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.210677][ T7697] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.220689][ T7697] bridge_slave_0: entered allmulticast mode [ 380.238863][ T7697] bridge_slave_0: entered promiscuous mode [ 380.408692][ T7693] team0: Port device team_slave_0 added [ 381.034746][ T7697] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.046986][ T7697] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.059446][ T7697] bridge_slave_1: entered allmulticast mode [ 381.085076][ T7697] bridge_slave_1: entered promiscuous mode [ 381.119336][ T7693] team0: Port device team_slave_1 added [ 381.180280][ T7699] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.251032][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.272496][ T7699] bridge_slave_0: entered allmulticast mode [ 381.293859][ T7699] bridge_slave_0: entered promiscuous mode [ 381.309876][ T7699] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.335246][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.371390][ T7699] bridge_slave_1: entered allmulticast mode [ 381.379384][ T7699] bridge_slave_1: entered promiscuous mode [ 381.840348][ T7697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.867279][ T7697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.912629][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.934070][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.972798][ T7693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.007804][ T7699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.084995][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.113318][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.217700][ T7693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.333751][ T7699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.928703][ T7697] team0: Port device team_slave_0 added [ 383.543391][ T7697] team0: Port device team_slave_1 added [ 383.660853][ T30] audit: type=1326 audit(1752573660.897:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7804 comm="syz.2.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba55b8e929 code=0x0 [ 383.737030][ T7699] team0: Port device team_slave_0 added [ 383.850568][ T7695] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.892265][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.899593][ T7695] bridge_slave_0: entered allmulticast mode [ 383.918439][ T7695] bridge_slave_0: entered promiscuous mode [ 383.937739][ T7699] team0: Port device team_slave_1 added [ 384.035887][ T7693] hsr_slave_0: entered promiscuous mode [ 384.050577][ T7693] hsr_slave_1: entered promiscuous mode [ 384.067208][ T7695] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.095124][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.115462][ T7695] bridge_slave_1: entered allmulticast mode [ 384.135363][ T7695] bridge_slave_1: entered promiscuous mode [ 384.248885][ T7697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.268936][ T7697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.305703][ T7697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.372126][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.379162][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.419898][ T7699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.483417][ T7697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.490454][ T7697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.607026][ T7697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.638143][ T7695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.717990][ T7695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.730696][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.747533][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.783993][ T7699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.729419][ T7697] hsr_slave_0: entered promiscuous mode [ 385.788915][ T7697] hsr_slave_1: entered promiscuous mode [ 385.803524][ T7697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.938353][ T7697] Cannot create hsr debugfs directory [ 385.962960][ T7695] team0: Port device team_slave_0 added [ 386.371533][ T7695] team0: Port device team_slave_1 added [ 386.429037][ T7699] hsr_slave_0: entered promiscuous mode [ 386.455698][ T7699] hsr_slave_1: entered promiscuous mode [ 386.481678][ T7699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.489413][ T7699] Cannot create hsr debugfs directory [ 386.576378][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.593516][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.803253][ T7695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.810376][ T7695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.856457][ T7695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.995493][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.012019][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.096851][ T7695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.120437][ T7695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.159598][ T7695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.256733][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.283953][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.532524][ T7849] netlink: 56 bytes leftover after parsing attributes in process `syz.2.437'. [ 388.027207][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.039359][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.263620][ T7693] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 388.280228][ T7693] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 388.637316][ T7695] hsr_slave_0: entered promiscuous mode [ 388.692861][ T7695] hsr_slave_1: entered promiscuous mode [ 388.739663][ T7695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.765496][ T7695] Cannot create hsr debugfs directory [ 388.945774][ T7693] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 388.963280][ T7853] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 388.973126][ T7853] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 388.983331][ T7853] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 389.364822][ T7864] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 389.969881][ T7693] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 390.358520][ T7697] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 390.395731][ T7697] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 390.407988][ T7697] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 390.427782][ T7697] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 390.556657][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.567271][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.651369][ T7887] bad cache= option: no%e [ 390.651369][ T7887] [ 390.658112][ T7887] CIFS: VFS: bad cache= option: no%e [ 391.302903][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.325599][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.502843][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.521630][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.626460][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.637059][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.829625][ T7693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.919793][ T7693] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.099719][ T7693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 392.117865][ T7693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 392.156883][ T7699] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.190829][ T7699] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.209846][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.217058][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.235834][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.243084][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.441820][ T7699] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.697279][ T7697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.706517][ T7699] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 393.668309][ T7695] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 393.701846][ T7697] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.741597][ T7693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.761861][ T7695] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 393.800076][ T7695] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 393.965471][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.982393][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.992894][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 394.009681][ T7695] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 394.026001][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.033232][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.049627][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.056935][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.177998][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.188772][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 394.212029][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.230016][ T24] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 394.239226][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.254548][ T24] usb 3-1: config 0 has no interface number 0 [ 394.263692][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 394.288141][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.310967][ T24] usb 3-1: Product: syz [ 394.315210][ T24] usb 3-1: Manufacturer: syz [ 394.319842][ T24] usb 3-1: SerialNumber: syz [ 394.350571][ T24] usb 3-1: config 0 descriptor?? [ 394.383796][ T24] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 394.410923][ T24] usb 3-1: No valid video chain found. [ 394.425740][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.448007][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.546995][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.558094][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.527533][ T7695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.615148][ T7699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.663759][ T7693] veth0_vlan: entered promiscuous mode [ 395.685186][ T7695] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.736453][ T7699] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.772553][ T7693] veth1_vlan: entered promiscuous mode [ 395.784677][ T7697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.809775][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.817033][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.872907][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.880113][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.951972][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.959174][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.972401][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.979668][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.008230][ T36] bridge_slave_1: left allmulticast mode [ 396.016340][ T36] bridge_slave_1: left promiscuous mode [ 396.024571][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.038269][ T36] bridge_slave_0: left allmulticast mode [ 396.047666][ T36] bridge_slave_0: left promiscuous mode [ 396.056472][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.082824][ T36] bridge_slave_1: left allmulticast mode [ 396.088549][ T36] bridge_slave_1: left promiscuous mode [ 396.100120][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.114708][ T36] bridge_slave_0: left allmulticast mode [ 396.120421][ T36] bridge_slave_0: left promiscuous mode [ 396.135385][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.156537][ T36] bridge_slave_1: left allmulticast mode [ 396.164312][ T36] bridge_slave_1: left promiscuous mode [ 396.170099][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.203820][ T36] bridge_slave_0: left allmulticast mode [ 396.209553][ T36] bridge_slave_0: left promiscuous mode [ 396.219315][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.785984][ T36]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.796823][ T36]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.811414][ T5845] usb 3-1: USB disconnect, device number 15 [ 396.835555][ T36]  (unregistering): Released all slaves [ 397.943584][ T36]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.953739][ T36]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.964529][ T36]  (unregistering): (slave team0): Releasing backup interface [ 397.979283][ T36]  (unregistering): Released all slaves [ 398.221652][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.233399][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.243656][ T36] bond0 (unregistering): Released all slaves [ 398.284999][ T7964] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 398.297128][ T7964] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 398.307715][ T7964] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 398.312869][ T7693] veth0_macvtap: entered promiscuous mode [ 398.340220][ T7693] veth1_macvtap: entered promiscuous mode [ 398.397068][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.410676][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.469482][ T7693] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.503551][ T7693] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.514336][ T7693] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.524864][ T7693] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.958043][ T7699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.489167][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.495958][ T7697] veth0_vlan: entered promiscuous mode [ 399.583836][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.880529][ T7697] veth1_vlan: entered promiscuous mode [ 399.961441][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.014359][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.117614][ T7699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.252169][ T36] hsr_slave_0: left promiscuous mode [ 400.281058][ T36] hsr_slave_1: left promiscuous mode [ 400.306778][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.321088][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.351924][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.359406][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.408632][ T36] hsr_slave_0: left promiscuous mode [ 400.420001][ T36] hsr_slave_1: left promiscuous mode [ 400.432276][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.454318][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.474171][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.483010][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.504240][ T36] hsr_slave_0: left promiscuous mode [ 400.510364][ T36] hsr_slave_1: left promiscuous mode [ 400.522151][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.543188][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.556770][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.577477][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.677432][ T36] veth1_macvtap: left promiscuous mode [ 400.683224][ T36] veth0_macvtap: left promiscuous mode [ 400.689291][ T36] veth1_vlan: left promiscuous mode [ 400.695540][ T36] veth0_vlan: left promiscuous mode [ 400.707160][ T36] veth1_macvtap: left promiscuous mode [ 400.714964][ T36] veth0_macvtap: left promiscuous mode [ 400.720584][ T36] veth1_vlan: left promiscuous mode [ 400.735357][ T36] veth0_vlan: left promiscuous mode [ 400.750534][ T36] veth1_macvtap: left promiscuous mode [ 400.758480][ T36] veth0_macvtap: left promiscuous mode [ 400.767932][ T36] veth1_vlan: left promiscuous mode [ 400.773728][ T36] veth0_vlan: left promiscuous mode [ 401.189995][ T8000] No buffer was provided with the request [ 402.199363][ T36] team0 (unregistering): Port device team_slave_1 removed [ 402.285570][ T36] team0 (unregistering): Port device team_slave_0 removed [ 402.451026][ T5159] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 402.460072][ T5159] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 402.471077][ T5159] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 402.479855][ T5159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 402.488020][ T5159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 404.059514][ T36] team0 (unregistering): Port device team_slave_1 removed [ 404.127945][ T36] team0 (unregistering): Port device team_slave_0 removed [ 404.405664][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 404.649271][ T51] Bluetooth: hci5: command tx timeout [ 405.257394][ T36] team0 (unregistering): Port device team_slave_1 removed [ 405.295311][ T36] team0 (unregistering): Port device team_slave_0 removed [ 405.819025][ T7697] veth0_macvtap: entered promiscuous mode [ 405.857795][ T7697] veth1_macvtap: entered promiscuous mode [ 405.926045][ T7695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.056012][ T7697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.139199][ T7697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.343588][ T7697] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.397108][ T7697] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.425448][ T7697] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.447093][ T7697] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.737798][ T51] Bluetooth: hci5: command tx timeout [ 407.574877][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.622378][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.686337][ T8008] chnl_net:caif_netlink_parms(): no params data found [ 407.889016][ T5159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.902579][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.910444][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.924847][ T5159] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.945101][ T5159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.979763][ T5159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.992202][ T5159] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 408.711815][ T8064] netlink: 'syz.2.452': attribute type 4 has an invalid length. [ 408.719517][ T8064] netlink: 152 bytes leftover after parsing attributes in process `syz.2.452'. [ 408.810987][ T51] Bluetooth: hci5: command tx timeout [ 409.192176][ T5159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 409.202167][ T5159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 409.211126][ T5159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 409.221854][ T5159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 409.230923][ T5159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 409.502336][ T8076] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 409.867400][ T8076] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.876901][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 409.886038][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 409.894652][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 409.904103][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 409.912904][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 409.927002][ T8076] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 409.947078][ T8076] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.955199][ T8076] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 410.091186][ T5159] Bluetooth: hci2: command tx timeout [ 410.101325][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.108687][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.131051][ T8008] bridge_slave_0: entered allmulticast mode [ 410.166972][ T8008] bridge_slave_0: entered promiscuous mode [ 410.201107][ T8008] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.208334][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.227917][ T8008] bridge_slave_1: entered allmulticast mode [ 410.246157][ T8008] bridge_slave_1: entered promiscuous mode [ 410.454017][ T8008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.493834][ T8008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.950868][ T5159] Bluetooth: hci5: command tx timeout [ 411.179719][ T8008] team0: Port device team_slave_0 added [ 411.386718][ T5159] Bluetooth: hci4: command tx timeout [ 411.459596][ T8008] team0: Port device team_slave_1 added [ 411.574435][ T8106] bad cache= option: no%e [ 411.574435][ T8106] [ 411.581228][ T8106] CIFS: VFS: bad cache= option: no%e [ 412.010906][ T5159] Bluetooth: hci6: command tx timeout [ 412.186232][ T5159] Bluetooth: hci2: command tx timeout [ 412.307730][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.315160][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.345367][ T8008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.457260][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.464493][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.490902][ T8008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.531695][ T8059] chnl_net:caif_netlink_parms(): no params data found [ 413.144074][ T8008] hsr_slave_0: entered promiscuous mode [ 413.154455][ T8008] hsr_slave_1: entered promiscuous mode [ 413.167669][ T8008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.188524][ T8008] Cannot create hsr debugfs directory [ 413.365878][ T8071] chnl_net:caif_netlink_parms(): no params data found [ 413.451500][ T5159] Bluetooth: hci4: command tx timeout [ 413.571935][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.579393][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.604195][ T8059] bridge_slave_0: entered allmulticast mode [ 413.617572][ T8059] bridge_slave_0: entered promiscuous mode [ 413.636997][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.660656][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.692095][ T8059] bridge_slave_1: entered allmulticast mode [ 413.713047][ T8059] bridge_slave_1: entered promiscuous mode [ 414.163490][ T8138] netlink: 96 bytes leftover after parsing attributes in process `syz.2.458'. [ 414.173846][ T5159] Bluetooth: hci6: command tx timeout [ 414.252502][ T51] Bluetooth: hci2: command tx timeout [ 414.668146][ T8138] vlan2: entered allmulticast mode [ 414.673567][ T8138] gretap0: entered allmulticast mode [ 414.714547][ T8059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.772080][ T8059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.837058][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.844468][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.854040][ T8071] bridge_slave_0: entered allmulticast mode [ 414.861817][ T8071] bridge_slave_0: entered promiscuous mode [ 415.683536][ T5159] Bluetooth: hci4: command tx timeout [ 415.704256][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.735035][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.760601][ T8071] bridge_slave_1: entered allmulticast mode [ 415.799452][ T8071] bridge_slave_1: entered promiscuous mode [ 416.307433][ T5159] Bluetooth: hci6: command tx timeout [ 416.538350][ T5159] Bluetooth: hci2: command tx timeout [ 417.153410][ T8059] team0: Port device team_slave_0 added [ 417.192802][ T8059] team0: Port device team_slave_1 added [ 417.257352][ T8077] chnl_net:caif_netlink_parms(): no params data found [ 417.401408][ T8008] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.600525][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.610284][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.782355][ T5159] Bluetooth: hci4: command tx timeout [ 418.287568][ T8059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.313770][ T8071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.334080][ T5159] Bluetooth: hci6: command tx timeout [ 418.345574][ T8071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.400213][ T8008] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.483020][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.506832][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.570210][ T8059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.736184][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.787821][ T8008] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.833709][ T8071] team0: Port device team_slave_0 added [ 419.464553][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.583154][ T8059] hsr_slave_0: entered promiscuous mode [ 419.589989][ T8059] hsr_slave_1: entered promiscuous mode [ 419.601494][ T8059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.609113][ T8059] Cannot create hsr debugfs directory [ 419.643189][ T8071] team0: Port device team_slave_1 added [ 419.764073][ T8008] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.246103][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.429992][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.439160][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.539671][ T8071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.600687][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.665710][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.674069][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.686879][ T8077] bridge_slave_0: entered allmulticast mode [ 420.718136][ T8077] bridge_slave_0: entered promiscuous mode [ 420.752421][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.784498][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.821191][ T8071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.914299][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.931066][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.939667][ T8077] bridge_slave_1: entered allmulticast mode [ 420.955760][ T8077] bridge_slave_1: entered promiscuous mode [ 421.400560][ T8077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.512860][ T8071] hsr_slave_0: entered promiscuous mode [ 421.532884][ T8071] hsr_slave_1: entered promiscuous mode [ 421.541655][ T8071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.549606][ T8071] Cannot create hsr debugfs directory [ 421.590330][ T8077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.835660][ T8077] team0: Port device team_slave_0 added [ 421.918872][ T8077] team0: Port device team_slave_1 added [ 421.958884][ T8008] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 422.026511][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.033693][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.059594][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.066364][ T8077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.101814][ T8008] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 422.118002][ T8008] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 422.130829][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 422.139354][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.155104][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.188907][ T8077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.280564][ T8008] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 422.293094][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 422.304707][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.330804][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.370266][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.383592][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.400126][ T10] usb 3-1: Product: syz [ 422.412878][ T10] usb 3-1: Manufacturer: syz [ 422.418517][ T10] usb 3-1: SerialNumber: syz [ 422.524012][ T8077] hsr_slave_0: entered promiscuous mode [ 422.539699][ T8077] hsr_slave_1: entered promiscuous mode [ 422.554670][ T8077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.568143][ T8077] Cannot create hsr debugfs directory [ 422.682138][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 422.689724][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 422.713711][ T10] usb 3-1: 0:2 : does not exist [ 422.764249][ T10] usb 3-1: USB disconnect, device number 16 [ 422.808068][ T7798] udevd[7798]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.002562][ T36] bridge_slave_1: left allmulticast mode [ 423.008380][ T36] bridge_slave_1: left promiscuous mode [ 423.015169][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.026798][ T36] bridge_slave_0: left allmulticast mode [ 423.033020][ T36] bridge_slave_0: left promiscuous mode [ 423.038734][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.050112][ T36] bridge_slave_1: left allmulticast mode [ 423.056285][ T36] bridge_slave_1: left promiscuous mode [ 423.065107][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.075193][ T36] bridge_slave_0: left allmulticast mode [ 423.081411][ T36] bridge_slave_0: left promiscuous mode [ 423.087191][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.098084][ T36] bridge_slave_1: left allmulticast mode [ 423.103972][ T36] bridge_slave_1: left promiscuous mode [ 423.109710][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.124611][ T36] bridge_slave_0: left allmulticast mode [ 423.130354][ T36] bridge_slave_0: left promiscuous mode [ 423.136392][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.147387][ T36] bridge_slave_1: left allmulticast mode [ 423.154911][ T36] bridge_slave_1: left promiscuous mode [ 423.160747][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.170459][ T36] bridge_slave_0: left allmulticast mode [ 423.176611][ T36] bridge_slave_0: left promiscuous mode [ 423.182439][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.114979][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.127418][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.137763][ T36] bond0 (unregistering): Released all slaves [ 424.403831][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.416844][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.427555][ T36] bond0 (unregistering): Released all slaves [ 424.658384][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.669948][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.685754][ T36] bond0 (unregistering): Released all slaves [ 424.941021][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.952192][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.966525][ T36] bond0 (unregistering): Released all slaves [ 425.847407][ T8008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.977483][ T8008] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.082340][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.089563][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.234798][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.242073][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.620417][ T36] hsr_slave_0: left promiscuous mode [ 427.626957][ T36] hsr_slave_1: left promiscuous mode [ 427.635475][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.643812][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.658222][ T36] hsr_slave_0: left promiscuous mode [ 427.664809][ T36] hsr_slave_1: left promiscuous mode [ 427.671540][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.679646][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.688232][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.696090][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.710617][ T36] hsr_slave_0: left promiscuous mode [ 427.716786][ T36] hsr_slave_1: left promiscuous mode [ 427.723212][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.731321][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.743587][ T36] hsr_slave_0: left promiscuous mode [ 427.749623][ T36] hsr_slave_1: left promiscuous mode [ 427.755778][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.763601][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.772982][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.780432][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.835211][ T36] veth1_macvtap: left promiscuous mode [ 427.840865][ T36] veth0_macvtap: left promiscuous mode [ 427.846560][ T36] veth1_vlan: left promiscuous mode [ 427.852130][ T36] veth0_vlan: left promiscuous mode [ 427.864571][ T36] veth1_macvtap: left promiscuous mode [ 427.870154][ T36] veth0_macvtap: left promiscuous mode [ 427.875964][ T36] veth1_vlan: left promiscuous mode [ 427.881676][ T36] veth0_vlan: left promiscuous mode [ 428.922086][ T5845] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 429.012290][ T36] team0 (unregistering): Port device team_slave_1 removed [ 429.053203][ T36] team0 (unregistering): Port device team_slave_0 removed [ 429.073177][ T5845] usb 3-1: device descriptor read/64, error -71 [ 429.324172][ T5845] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 429.462732][ T5845] usb 3-1: device descriptor read/64, error -71 [ 429.573774][ T5845] usb usb3-port1: attempt power cycle [ 429.726492][ T36] team0 (unregistering): Port device team_slave_1 removed [ 429.765190][ T36] team0 (unregistering): Port device team_slave_0 removed [ 429.922325][ T5845] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 429.954118][ T5845] usb 3-1: device descriptor read/8, error -71 [ 430.204882][ T5845] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 430.248706][ T5845] usb 3-1: device descriptor read/8, error -71 [ 430.357072][ T36] team0 (unregistering): Port device team_slave_1 removed [ 430.371843][ T5845] usb usb3-port1: unable to enumerate USB device [ 430.406116][ T36] team0 (unregistering): Port device team_slave_0 removed [ 431.039388][ T36] team0 (unregistering): Port device team_slave_1 removed [ 431.074584][ T36] team0 (unregistering): Port device team_slave_0 removed [ 431.525986][ T8059] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 431.546063][ T8059] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 431.584520][ T8059] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 431.626772][ T8059] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 431.847202][ T8259] overlayfs: failed to resolve './file0': -2 [ 432.766057][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.815137][ T8059] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.907176][ T8059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 432.947732][ T8059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.964592][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.971814][ T7888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.987867][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.995116][ T7888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.923290][ T8008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.003653][ T8071] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 434.016186][ T8071] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 434.068143][ T8071] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 434.171500][ T8071] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 434.420552][ T8077] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 434.543254][ T8077] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 434.561540][ T8077] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 434.612223][ T8077] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 434.794888][ T8059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.005781][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.097800][ T8071] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.129018][ T8008] veth0_vlan: entered promiscuous mode [ 435.174070][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.181272][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.244681][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.251967][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.284475][ T8008] veth1_vlan: entered promiscuous mode [ 435.504242][ T8077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.602594][ T8008] veth0_macvtap: entered promiscuous mode [ 435.614066][ T8008] veth1_macvtap: entered promiscuous mode [ 435.785676][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.818253][ T8077] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.888135][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.955076][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.962360][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.042682][ T8008] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.076911][ T8008] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.118080][ T8008] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.158901][ T8008] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.305382][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.312614][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.516700][ T8059] veth0_vlan: entered promiscuous mode [ 436.599548][ T8059] veth1_vlan: entered promiscuous mode [ 436.858899][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.906005][ T8071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.937520][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.007608][ T8341] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 437.042033][ T8059] veth0_macvtap: entered promiscuous mode [ 437.062695][ T8341] syz.2.474 uses obsolete (PF_INET,SOCK_PACKET) [ 437.089088][ T8341] dummy0: entered promiscuous mode [ 437.099377][ T8341] dummy0: entered allmulticast mode [ 437.303783][ T8059] veth1_macvtap: entered promiscuous mode [ 437.346786][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.365712][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.384779][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.439252][ T8349] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.715699][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.786719][ T8059] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.797855][ T8059] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.830903][ T8059] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.839765][ T8059] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.100472][ T8077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.219818][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.248232][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.528496][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.589194][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.797332][ T8071] veth0_vlan: entered promiscuous mode [ 439.111732][ T8071] veth1_vlan: entered promiscuous mode [ 439.431566][ T8071] veth0_macvtap: entered promiscuous mode [ 439.548144][ T8071] veth1_macvtap: entered promiscuous mode [ 439.705258][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.773814][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.825638][ T8071] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.838661][ T8071] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.850010][ T8071] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.868869][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.875316][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.885678][ T8071] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.955710][ T8077] veth0_vlan: entered promiscuous mode [ 440.687563][ T8077] veth1_vlan: entered promiscuous mode [ 440.740576][ T8077] veth0_macvtap: entered promiscuous mode [ 440.751668][ T8077] veth1_macvtap: entered promiscuous mode [ 440.777971][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.857532][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.023138][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.042818][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.064688][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.089705][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.178103][ T8077] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.707458][ T8077] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.839823][ T8077] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.865022][ T8077] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.390249][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.431271][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.470862][ T7926] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 442.743067][ T8410] bad cache= option: no%e [ 442.743067][ T8410] [ 442.749795][ T8410] CIFS: VFS: bad cache= option: no%e [ 443.482491][ T7926] usb 6-1: Using ep0 maxpacket: 16 [ 443.518733][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.561746][ T7926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.592644][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.634821][ T7926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.680069][ T7926] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.729849][ T7926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.769911][ T7926] usb 6-1: Product: syz [ 443.800341][ T7926] usb 6-1: Manufacturer: syz [ 443.811004][ T7926] usb 6-1: SerialNumber: syz [ 443.970858][ T5922] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 444.056628][ T7926] usb 6-1: 0:2 : does not exist [ 444.914379][ T7926] usb 6-1: USB disconnect, device number 2 [ 445.067462][ T5922] usb 9-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 445.085762][ T30] audit: type=1326 audit(1752573721.707:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8417 comm="syz.6.481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdef1b8e929 code=0x0 [ 445.091465][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.118531][ T5922] usb 9-1: Product: syz [ 445.123039][ T5922] usb 9-1: Manufacturer: syz [ 445.127677][ T5922] usb 9-1: SerialNumber: syz [ 445.151271][ T5922] usb 9-1: config 0 descriptor?? [ 445.160454][ T7798] udevd[7798]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.180496][ T5922] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 445.850802][ T30] audit: type=1326 audit(1752573723.087:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8430 comm="syz.6.482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdef1b8e929 code=0x0 [ 446.106110][ T5922] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 446.126531][ T5922] sq905c 9-1:0.0: Reading version command failed [ 446.140913][ T5922] sq905c 9-1:0.0: probe with driver sq905c failed with error -71 [ 446.756761][ T5922] usb 9-1: USB disconnect, device number 2 [ 447.213136][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 448.333845][ T5159] Bluetooth: hci3: command 0x0c1a tx timeout [ 449.131916][ T8458] No buffer was provided with the request [ 449.881552][ T8468] No buffer was provided with the request [ 450.190969][ T7926] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 450.530914][ T7926] usb 8-1: Using ep0 maxpacket: 8 [ 450.573700][ T7926] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 450.612147][ T7926] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.634118][ T7926] usb 8-1: config 0 has no interface number 0 [ 450.645702][ T7926] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 450.663193][ T7926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.682850][ T7926] usb 8-1: Product: syz [ 450.690559][ T7926] usb 8-1: Manufacturer: syz [ 450.715062][ T7926] usb 8-1: SerialNumber: syz [ 450.742713][ T7926] usb 8-1: config 0 descriptor?? [ 450.764693][ T7926] usb 8-1: Found UVC 0.04 device syz (046d:08c3) [ 450.978570][ T7926] usb 8-1: No valid video chain found. [ 451.256772][ T8480] netlink: 44 bytes leftover after parsing attributes in process `syz.6.492'. [ 452.710795][ T43] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 453.054840][ T10] usb 8-1: USB disconnect, device number 2 [ 453.172693][ T8491] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 453.860769][ T43] usb 9-1: Using ep0 maxpacket: 16 [ 454.940865][ T43] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 454.948991][ T43] usb 9-1: can't read configurations, error -71 [ 455.310376][ T8504] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.319406][ T8504] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.328506][ T8504] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.337434][ T8504] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.631798][ T8505] overlayfs: missing 'lowerdir' [ 456.757081][ T8502] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 456.766903][ T8502] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 456.774854][ T8502] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 456.783575][ T8502] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 456.791334][ T8502] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 457.407534][ T8518] netlink: 96 bytes leftover after parsing attributes in process `syz.8.501'. [ 457.888425][ T8518] vlan2: entered allmulticast mode [ 457.893796][ T8518] gretap0: entered allmulticast mode [ 458.910955][ T30] audit: type=1326 audit(1752573735.977:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8509 comm="syz.5.499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc16cd8e929 code=0x0 [ 460.254639][ T8534] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.263535][ T8534] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.272272][ T8534] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.281305][ T8534] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.308514][ T8538] overlayfs: missing 'lowerdir' [ 462.246459][ T8530] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 462.257560][ T8530] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 462.265398][ T8530] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 462.274414][ T8530] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 462.282181][ T8530] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 462.550801][ T6145] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 463.360896][ T6145] usb 6-1: Using ep0 maxpacket: 16 [ 463.400879][ T6145] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 463.581011][ T6145] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 463.626491][ T6145] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 463.708756][ T6145] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 463.734303][ T6145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.742916][ T6145] usb 6-1: Product: syz [ 463.747223][ T6145] usb 6-1: Manufacturer: syz [ 463.756123][ T6145] usb 6-1: SerialNumber: syz [ 465.004560][ T8565] netlink: 60 bytes leftover after parsing attributes in process `syz.7.508'. [ 465.313159][ T8581] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 465.342285][ T8581] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 465.350190][ T8581] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 465.359209][ T8581] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 465.367261][ T8581] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 465.796872][ T6145] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 465.904214][ T6145] usb 6-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 466.190556][ T6145] usb 6-1: USB disconnect, device number 3 [ 466.391287][ T7799] udevd[7799]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.056422][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.8.515'. [ 472.205365][ T8625] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 474.132179][ T8641] No buffer was provided with the request [ 474.578077][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 474.588102][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 474.588146][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.588157][ T51] Workqueue: hci4 hci_rx_work [ 474.588204][ T51] Call Trace: [ 474.588214][ T51] [ 474.588221][ T51] dump_stack_lvl+0x189/0x250 [ 474.588242][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 474.588260][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.588277][ T51] ? __pfx__printk+0x10/0x10 [ 474.588298][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 474.588312][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 474.588328][ T51] ? kernfs_path_from_node+0x22c/0x260 [ 474.588343][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 474.588360][ T51] sysfs_create_dir_ns+0x259/0x280 [ 474.588387][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 474.588414][ T51] ? do_raw_spin_unlock+0x122/0x240 [ 474.588438][ T51] kobject_add_internal+0x59f/0xb40 [ 474.588462][ T51] kobject_add+0x155/0x220 [ 474.588481][ T51] ? __pfx_kobject_add+0x10/0x10 [ 474.588497][ T51] ? _raw_spin_unlock+0x28/0x50 [ 474.588521][ T51] ? get_device_parent+0x366/0x3a0 [ 474.588544][ T51] device_add+0x408/0xb50 [ 474.588565][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 474.588590][ T51] le_conn_complete_evt+0xc3a/0x1220 [ 474.588618][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 474.588636][ T51] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 474.588649][ T51] ? __asan_memcpy+0x40/0x70 [ 474.588669][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 474.588685][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 474.588698][ T51] ? skb_pull_data+0xfb/0x200 [ 474.588725][ T51] hci_le_conn_complete_evt+0x187/0x450 [ 474.588747][ T51] hci_event_packet+0x78c/0x1200 [ 474.588774][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 474.588792][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 474.588823][ T51] ? hci_send_to_monitor+0xe2/0x570 [ 474.588844][ T51] hci_rx_work+0x46a/0xe80 [ 474.588873][ T51] ? process_scheduled_works+0x9ef/0x17b0 [ 474.588891][ T51] process_scheduled_works+0xade/0x17b0 [ 474.588935][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 474.588965][ T51] worker_thread+0x8a0/0xda0 [ 474.589001][ T51] kthread+0x711/0x8a0 [ 474.589025][ T51] ? __pfx_worker_thread+0x10/0x10 [ 474.589041][ T51] ? __pfx_kthread+0x10/0x10 [ 474.589063][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.589084][ T51] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.589106][ T51] ? __pfx_kthread+0x10/0x10 [ 474.589127][ T51] ret_from_fork+0x3fc/0x770 [ 474.589156][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 474.589175][ T51] ? __switch_to_asm+0x39/0x70 [ 474.589192][ T51] ? __switch_to_asm+0x33/0x70 [ 474.589209][ T51] ? __pfx_kthread+0x10/0x10 [ 474.589229][ T51] ret_from_fork_asm+0x1a/0x30 [ 474.589259][ T51] [ 474.589281][ T51] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 475.092295][ T51] Bluetooth: hci4: failed to register connection device [ 475.241141][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 475.551945][ T10] usb 8-1: device descriptor read/64, error -71 [ 475.559017][ T8640] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 475.568697][ T8640] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 475.577436][ T8640] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 475.627711][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 475.638583][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 475.638615][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 475.638628][ T51] Workqueue: hci5 hci_rx_work [ 475.638677][ T51] Call Trace: [ 475.638686][ T51] [ 475.638696][ T51] dump_stack_lvl+0x189/0x250 [ 475.638721][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 475.638742][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.638765][ T51] ? __pfx__printk+0x10/0x10 [ 475.638793][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 475.638812][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 475.638833][ T51] ? kernfs_path_from_node+0x22c/0x260 [ 475.638851][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 475.638873][ T51] sysfs_create_dir_ns+0x259/0x280 [ 475.638904][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 475.638936][ T51] ? do_raw_spin_unlock+0x122/0x240 [ 475.638968][ T51] kobject_add_internal+0x59f/0xb40 [ 475.638997][ T51] kobject_add+0x155/0x220 [ 475.639023][ T51] ? __pfx_kobject_add+0x10/0x10 [ 475.639044][ T51] ? _raw_spin_unlock+0x28/0x50 [ 475.639076][ T51] ? get_device_parent+0x366/0x3a0 [ 475.639107][ T51] device_add+0x408/0xb50 [ 475.639135][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 475.639166][ T51] le_conn_complete_evt+0xc3a/0x1220 [ 475.639204][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 475.639228][ T51] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 475.639246][ T51] ? __asan_memcpy+0x40/0x70 [ 475.639271][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 475.639290][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 475.639307][ T51] ? skb_pull_data+0xfb/0x200 [ 475.639342][ T51] hci_le_conn_complete_evt+0x187/0x450 [ 475.639373][ T51] hci_event_packet+0x78c/0x1200 [ 475.639416][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 475.639438][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 475.639468][ T51] ? kcov_remote_start+0x4d3/0x7f0 [ 475.639495][ T51] ? lockdep_hardirqs_on+0x90/0x150 [ 475.639525][ T51] ? hci_send_to_monitor+0xe2/0x570 [ 475.639552][ T51] hci_rx_work+0x46a/0xe80 [ 475.639587][ T51] ? process_scheduled_works+0x9ef/0x17b0 [ 475.639608][ T51] process_scheduled_works+0xade/0x17b0 [ 475.639663][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 475.639697][ T51] worker_thread+0x8a0/0xda0 [ 475.639740][ T51] kthread+0x711/0x8a0 [ 475.639769][ T51] ? __pfx_worker_thread+0x10/0x10 [ 475.639790][ T51] ? __pfx_kthread+0x10/0x10 [ 475.639817][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.639844][ T51] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.639872][ T51] ? __pfx_kthread+0x10/0x10 [ 475.639899][ T51] ret_from_fork+0x3fc/0x770 [ 475.639921][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 475.639945][ T51] ? __switch_to_asm+0x39/0x70 [ 475.639968][ T51] ? __switch_to_asm+0x33/0x70 [ 475.639991][ T51] ? __pfx_kthread+0x10/0x10 [ 475.640017][ T51] ret_from_fork_asm+0x1a/0x30 [ 475.640057][ T51] [ 475.640085][ T51] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 475.672436][ T8640] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 475.675405][ T51] Bluetooth: hci5: failed to register connection device [ 475.981552][ T8640] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 475.989226][ T8640] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 475.999738][ T8640] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 476.019857][ T8640] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 476.048791][ T8640] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 476.066284][ T8640] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 476.080827][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 476.093584][ T8640] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 476.119054][ T8640] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 476.156633][ T8640] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 476.185589][ T8640] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 476.194424][ T8640] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 476.219310][ T10] usb 8-1: device descriptor read/64, error -71 [ 476.343280][ T10] usb usb8-port1: attempt power cycle [ 477.411793][ T5159] Bluetooth: hci3: command 0x0c1a tx timeout [ 477.524424][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 477.611098][ T5159] Bluetooth: hci5: command 0x0c1a tx timeout [ 478.067586][ T5159] Bluetooth: hci2: command 0x0c1a tx timeout [ 478.090949][ T5159] Bluetooth: hci4: command 0x0c1a tx timeout [ 478.166650][ T10] usb 8-1: device descriptor read/8, error -71 [ 478.172987][ T5159] Bluetooth: hci6: command 0x0c1a tx timeout [ 479.407017][ T8676] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 479.510260][ T8676] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 479.518343][ T8676] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 479.528967][ T8676] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 479.537137][ T8676] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 479.690938][ T5159] Bluetooth: hci5: command 0x0c1a tx timeout [ 480.304548][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 480.311196][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 480.319184][ T5159] Bluetooth: hci4: command 0x0c1a tx timeout [ 480.325541][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 480.931278][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 480.966241][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.997141][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 481.036095][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 481.316757][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.358181][ T10] usb 6-1: Product: syz [ 481.391030][ T10] usb 6-1: Manufacturer: syz [ 481.430069][ T10] usb 6-1: SerialNumber: syz [ 481.771214][ T8683] Bluetooth: hci5: command 0x0c1a tx timeout [ 481.841605][ T10] usb 6-1: 0:2 : does not exist [ 481.896511][ T10] usb 6-1: USB disconnect, device number 4 [ 482.330845][ T8683] Bluetooth: hci6: command 0x0c1a tx timeout [ 482.338226][ T8683] Bluetooth: hci2: command 0x0c1a tx timeout [ 482.382273][ T8698] No buffer was provided with the request [ 482.817610][ T8683] Bluetooth: hci4: command 0x0c1a tx timeout [ 484.429558][ T8683] Bluetooth: hci5: command 0x0c1a tx timeout [ 484.890922][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 486.024032][ T8729] tipc: Started in network mode [ 486.029040][ T8729] tipc: Node identity ca127eabe2ef, cluster identity 4711 [ 486.166058][ T8729] tipc: Enabled bearer , priority 0 [ 486.235575][ T8728] tipc: Resetting bearer [ 486.361729][ T8727] tipc: Disabling bearer [ 488.762679][ T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 489.071004][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 489.079711][ T8758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.549'. [ 489.312865][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.330917][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 489.377562][ T24] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 489.400515][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.429148][ T24] usb 8-1: Product: syz [ 489.468324][ T24] usb 8-1: Manufacturer: syz [ 489.488949][ T24] usb 8-1: SerialNumber: syz [ 489.822850][ T24] usb 8-1: 0:2 : does not exist [ 490.510520][ T24] usb 8-1: USB disconnect, device number 7 [ 490.995119][ T7798] udevd[7798]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.133046][ T8765] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.141909][ T8765] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.150643][ T8765] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.159442][ T8765] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.458859][ T8765] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 491.845372][ T8765] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 491.853207][ T8765] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 491.861590][ T8765] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 491.869336][ T8765] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 492.727837][ T8782] netlink: 56 bytes leftover after parsing attributes in process `syz.7.557'. [ 495.799420][ T8802] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 495.831494][ T8802] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 495.848012][ T8802] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 495.856415][ T3484] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.874210][ T8802] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 495.877910][ T3484] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.884436][ T8802] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 495.959493][ T3484] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.028205][ T3484] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.078431][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 496.088140][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 496.104894][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 496.126449][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 496.134146][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 496.623477][ T3484] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.687302][ T3484] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.117799][ T3484] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.140820][ T7926] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 498.220976][ T3484] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.221896][ T8829] netlink: 56 bytes leftover after parsing attributes in process `syz.5.565'. [ 498.246455][ T8683] Bluetooth: hci4: command 0x0c1a tx timeout [ 498.252637][ T8683] Bluetooth: hci5: command 0x0c1a tx timeout [ 498.258785][ T8683] Bluetooth: hci3: command 0x0c1a tx timeout [ 498.264921][ T8683] Bluetooth: hci6: command 0x0c1a tx timeout [ 498.277372][ T8683] Bluetooth: hci0: command tx timeout [ 498.470563][ T7926] usb 9-1: Using ep0 maxpacket: 16 [ 498.531059][ T8830] netlink: 60 bytes leftover after parsing attributes in process `syz.7.563'. [ 498.557843][ T7926] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.631214][ T7926] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.673329][ T7926] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.696467][ T7926] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.720891][ T7926] usb 9-1: Product: syz [ 498.725497][ T7926] usb 9-1: Manufacturer: syz [ 498.745793][ T7926] usb 9-1: SerialNumber: syz [ 499.344433][ T7926] usb 9-1: 0:2 : does not exist [ 500.102160][ T7926] usb 9-1: USB disconnect, device number 5 [ 500.187025][ T8806] chnl_net:caif_netlink_parms(): no params data found [ 500.331941][ T5848] Bluetooth: hci0: command tx timeout [ 500.337509][ T5848] Bluetooth: hci6: command 0x0c1a tx timeout [ 500.920923][ T3484] bridge_slave_1: left allmulticast mode [ 500.950785][ T3484] bridge_slave_1: left promiscuous mode [ 500.961064][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.202243][ T3484] bridge_slave_0: left allmulticast mode [ 501.220870][ T3484] bridge_slave_0: left promiscuous mode [ 501.226738][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.312808][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.320814][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.413177][ T5848] Bluetooth: hci0: command tx timeout [ 502.861402][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.5.575'. [ 504.229796][ T8893] netlink: 72 bytes leftover after parsing attributes in process `syz.2.578'. [ 504.495666][ T5848] Bluetooth: hci0: command tx timeout [ 504.651721][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.664098][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.675103][ T3484] bond0 (unregistering): Released all slaves [ 505.951396][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.958630][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.974947][ T8806] bridge_slave_0: entered allmulticast mode [ 505.982792][ T8806] bridge_slave_0: entered promiscuous mode [ 506.167728][ T8908] overlayfs: overlapping lowerdir path [ 508.406498][ T8871] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 508.416014][ T8871] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 508.425708][ T8871] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 508.546791][ T8806] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.649835][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.657609][ T8806] bridge_slave_1: entered allmulticast mode [ 508.665558][ T8806] bridge_slave_1: entered promiscuous mode [ 508.872044][ T8917] netlink: 60 bytes leftover after parsing attributes in process `syz.5.583'. [ 509.904822][ T8927] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 509.976062][ T8927] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 509.984114][ T8927] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 509.993208][ T8927] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 510.001292][ T8927] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 510.430478][ T8926] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.440041][ T8926] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.449442][ T8926] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.460277][ T8926] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.574046][ T8806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.745110][ T6145] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 510.907238][ T8937] netlink: 56 bytes leftover after parsing attributes in process `syz.2.588'. [ 511.600838][ T6145] usb 6-1: Using ep0 maxpacket: 8 [ 511.669790][ T6145] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 511.711783][ T8806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.732881][ T6145] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.750588][ T6145] usb 6-1: config 0 has no interface number 0 [ 511.777588][ T6145] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 511.793073][ T6145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.874793][ T8806] team0: Port device team_slave_0 added [ 511.887805][ T8806] team0: Port device team_slave_1 added [ 512.027414][ T6145] usb 6-1: Product: syz [ 512.031785][ T6145] usb 6-1: Manufacturer: syz [ 512.036512][ T6145] usb 6-1: SerialNumber: syz [ 512.131932][ T8947] fuse: Bad value for 'fd' [ 512.142341][ T8947] netlink: 96 bytes leftover after parsing attributes in process `syz.2.590'. [ 512.784058][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.799030][ T6145] usb 6-1: config 0 descriptor?? [ 512.818931][ T6145] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 512.826012][ T6145] usb 6-1: No valid video chain found. [ 512.832284][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.081272][ T8806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.174791][ T3484] hsr_slave_0: left promiscuous mode [ 513.377431][ T3484] hsr_slave_1: left promiscuous mode [ 514.001140][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.008653][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.099286][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.120181][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.528818][ T3484] veth1_macvtap: left promiscuous mode [ 514.558597][ T3484] veth0_macvtap: left promiscuous mode [ 515.320780][ T3484] veth1_vlan: left promiscuous mode [ 515.326200][ T3484] veth0_vlan: left promiscuous mode [ 515.356389][ T6145] usb 6-1: USB disconnect, device number 5 [ 515.656386][ T8969] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 517.811144][ T30] audit: type=1326 audit(1752573794.567:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8976 comm="syz.5.600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc16cd8e929 code=0x0 [ 519.825116][ T3484] team0 (unregistering): Port device team_slave_1 removed [ 519.868996][ T3484] team0 (unregistering): Port device team_slave_0 removed [ 520.623906][ T9001] No buffer was provided with the request [ 521.052891][ T9007] overlayfs: overlapping lowerdir path [ 523.022726][ T9020] fuse: Bad value for 'fd' [ 523.933318][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.940372][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.973721][ T8806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.017178][ T5848] Bluetooth: hci6: command 0x0c1a tx timeout [ 524.031414][ T8979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 524.037589][ T8979] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 524.077179][ T8979] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 524.089461][ T8979] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 524.112658][ T8806] hsr_slave_0: entered promiscuous mode [ 524.129550][ T8979] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 524.141165][ T8806] hsr_slave_1: entered promiscuous mode [ 524.154764][ T8979] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 524.242194][ T8979] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 526.120917][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 526.127508][ T5848] Bluetooth: hci5: command 0x0c1a tx timeout [ 526.133877][ T8683] Bluetooth: hci6: command 0x0c1a tx timeout [ 526.140350][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 526.170934][ T5159] Bluetooth: hci0: command 0x0c1a tx timeout [ 526.553696][ T9044] netlink: 72 bytes leftover after parsing attributes in process `syz.7.612'. [ 527.535402][ T9055] No buffer was provided with the request [ 528.097014][ T8806] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 528.156369][ T8806] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 528.200099][ T8806] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 528.251111][ T5159] Bluetooth: hci0: command 0x0c1a tx timeout [ 528.286325][ T8806] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 528.634679][ T9071] fuse: Bad value for 'fd' [ 528.710852][ T30] audit: type=1326 audit(1752573805.897:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9064 comm="syz.2.616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba55b8e929 code=0x0 [ 530.340962][ T5159] Bluetooth: hci0: command 0x0c1a tx timeout [ 530.891530][ T8806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.417602][ T8806] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.565970][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.573217][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.627261][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.634489][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.413748][ T8806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.614263][ T30] audit: type=1326 audit(1752573812.847:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9132 comm="syz.2.625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba55b8e929 code=0x0 [ 536.135850][ T8806] veth0_vlan: entered promiscuous mode [ 536.148045][ T8806] veth1_vlan: entered promiscuous mode [ 536.376669][ T8806] veth0_macvtap: entered promiscuous mode [ 536.409443][ T8806] veth1_macvtap: entered promiscuous mode [ 536.442563][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.622640][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.651374][ T8806] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.301771][ T8806] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.310552][ T8806] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.319514][ T8806] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.540896][ T9153] netlink: 'syz.5.628': attribute type 4 has an invalid length. [ 537.548753][ T9153] netlink: 152 bytes leftover after parsing attributes in process `syz.5.628'. [ 537.626805][ T9151] netlink: 60 bytes leftover after parsing attributes in process `syz.2.627'. [ 538.133473][ T9153] : renamed from bond0 (while UP) [ 538.453688][ T9158] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 538.471271][ T9158] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 538.557855][ T9158] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 538.591057][ T9158] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 538.607714][ T9158] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 538.642875][ T9158] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 539.409595][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.422577][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.052145][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.060051][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.347447][ T9183] overlayfs: missing 'lowerdir' [ 540.496300][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 540.571111][ T5848] Bluetooth: hci5: command 0x0c1a tx timeout [ 540.651195][ T8683] Bluetooth: hci4: command 0x0c1a tx timeout [ 540.658662][ T5159] Bluetooth: hci6: command 0x0c1a tx timeout [ 540.665151][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 542.150644][ T9202] No buffer was provided with the request [ 542.469848][ T9206] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 542.549516][ T9206] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 542.557776][ T9206] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 542.567832][ T9206] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 542.579165][ T9206] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 542.636198][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 544.222260][ T9221] netlink: 'syz.8.639': attribute type 4 has an invalid length. [ 544.230120][ T9221] netlink: 152 bytes leftover after parsing attributes in process `syz.8.639'. [ 544.288228][ T9221] : renamed from bond0 (while UP) [ 544.862639][ T9232] overlayfs: missing 'lowerdir' [ 551.530041][ T9279] fuse: Bad value for 'fd' [ 551.853651][ T9286] fuse: Bad value for 'fd' [ 551.881835][ T30] audit: type=1326 audit(1752573829.117:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9280 comm="syz.7.651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fb0d8e929 code=0x0 [ 554.538786][ T9309] No buffer was provided with the request [ 555.713422][ T9325] No buffer was provided with the request [ 557.658901][ T978] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 557.890960][ T978] usb 10-1: Using ep0 maxpacket: 16 [ 557.934213][ T978] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.984260][ T978] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.125669][ T978] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.139253][ T978] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.159414][ T978] usb 10-1: Product: syz [ 558.437412][ T9355] fuse: Bad value for 'fd' [ 558.449210][ T9355] netlink: 96 bytes leftover after parsing attributes in process `syz.7.665'. [ 558.504860][ T9355] vlan2: entered allmulticast mode [ 558.510097][ T9355] gretap0: entered allmulticast mode [ 558.989740][ T978] usb 10-1: Manufacturer: syz [ 558.994629][ T978] usb 10-1: SerialNumber: syz [ 559.417742][ T978] usb 10-1: 0:2 : does not exist [ 560.239437][ T978] usb 10-1: USB disconnect, device number 2 [ 561.504779][ T5845] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 561.720890][ T5845] usb 10-1: Using ep0 maxpacket: 16 [ 562.055929][ T5845] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 562.300571][ T5845] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 562.771646][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.975801][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.986156][ T5845] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 563.000630][ T5845] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 563.009872][ T5845] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.021915][ T5845] usb 10-1: Product: syz [ 563.026261][ T5845] usb 10-1: Manufacturer: syz [ 563.031621][ T5845] usb 10-1: SerialNumber: syz [ 563.426640][ T9384] No buffer was provided with the request [ 563.554540][ T5845] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 564.690824][ T5922] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 564.786352][ T5845] usb 10-1: 2:1: cannot get freq at ep 0x82 [ 564.866921][ T5845] usb 10-1: USB disconnect, device number 3 [ 565.452852][ T5922] usb 8-1: device descriptor read/64, error -71 [ 565.612294][ T9400] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 565.661645][ T9400] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 565.669482][ T9400] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 565.679657][ T9400] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 565.687642][ T9400] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 566.104552][ T8420] udevd[8420]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.161031][ T5922] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 566.338904][ T9408] netlink: 'syz.5.676': attribute type 4 has an invalid length. [ 566.346991][ T9408] netlink: 152 bytes leftover after parsing attributes in process `syz.5.676'. [ 566.449351][ T5922] usb 8-1: device descriptor read/64, error -71 [ 566.742942][ T5922] usb usb8-port1: attempt power cycle [ 567.169968][ T9417] overlayfs: failed to resolve './file1/file0': -2 [ 567.666988][ T5922] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 568.566401][ T5922] usb 8-1: device not accepting address 10, error -71 [ 569.264902][ T9429] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 569.274004][ T9429] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 574.066412][ T9470] No buffer was provided with the request [ 575.353066][ T9483] netlink: 60 bytes leftover after parsing attributes in process `syz.5.691'. [ 576.230562][ T9480] netlink: 'syz.7.692': attribute type 4 has an invalid length. [ 576.238495][ T9480] netlink: 152 bytes leftover after parsing attributes in process `syz.7.692'. [ 576.272216][ T9480] : renamed from bond0 (while UP) [ 576.314180][ T9485] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 576.323126][ T9485] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 578.867927][ T9512] No buffer was provided with the request [ 579.457751][ T9519] No buffer was provided with the request [ 581.528681][ T9531] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 581.577111][ T9531] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 581.585171][ T9531] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 581.594852][ T9531] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 581.602822][ T9531] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 582.131036][ T6145] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 582.183906][ T9544] xt_hashlimit: max too large, truncated to 1048576 [ 582.203241][ T9544] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 583.090949][ T6145] usb 9-1: device descriptor read/64, error -71 [ 583.824483][ T9554] No buffer was provided with the request [ 583.931873][ T5159] Bluetooth: hci0: command 0x0c1a tx timeout [ 585.170888][ T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 585.330746][ T10] usb 9-1: device descriptor read/64, error -71 [ 585.740950][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 586.187329][ T10] usb 9-1: device descriptor read/64, error -71 [ 586.377968][ T10] usb usb9-port1: attempt power cycle [ 587.532378][ T9601] No buffer was provided with the request [ 588.208401][ T9611] No buffer was provided with the request [ 588.560155][ T9620] fuse: Bad value for 'fd' [ 588.574593][ T9620] netlink: 96 bytes leftover after parsing attributes in process `syz.9.719'. [ 588.644403][ T9620] vlan2: entered allmulticast mode [ 588.649645][ T9620] gretap0: entered allmulticast mode [ 589.263525][ T9613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 589.281061][ T9613] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 589.365340][ T9613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 589.388492][ T9613] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 589.904589][ T9613] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 589.962533][ T9613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 591.168201][ T9647] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 591.894193][ T5159] Bluetooth: hci3: command 0x0c1a tx timeout [ 591.900422][ T5848] Bluetooth: hci5: command 0x0c1a tx timeout [ 591.900480][ T8683] Bluetooth: hci4: command 0x0c1a tx timeout [ 591.930757][ T8683] Bluetooth: hci6: command 0x0c1a tx timeout [ 592.280816][ T8683] Bluetooth: hci0: command 0x0c1a tx timeout [ 593.044952][ T9666] overlayfs: failed to resolve './file1/file0': -2 [ 593.950850][ T8683] Bluetooth: hci4: command 0x0c1a tx timeout [ 595.864985][ T9686] No buffer was provided with the request [ 596.743271][ T9713] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 596.781517][ T9713] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 596.844778][ T9713] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 596.879809][ T9713] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 596.924876][ T9713] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 596.994264][ T9713] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 598.850811][ T5159] Bluetooth: hci5: command 0x0c1a tx timeout [ 598.856919][ T5159] Bluetooth: hci3: command 0x0c1a tx timeout [ 598.891201][ T8683] Bluetooth: hci4: command 0x0c1a tx timeout [ 598.897337][ T5159] Bluetooth: hci6: command 0x0c1a tx timeout [ 599.051104][ T5159] Bluetooth: hci0: command 0x0c1a tx timeout [ 600.970820][ T5159] Bluetooth: hci6: command 0x0c1a tx timeout [ 601.465289][ T9770] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 602.197123][ T9768] No buffer was provided with the request [ 602.619333][ T9774] netlink: 'syz.9.747': attribute type 10 has an invalid length. [ 602.627490][ T9774] netlink: 40 bytes leftover after parsing attributes in process `syz.9.747'. [ 602.637034][ T9774] dummy0: entered promiscuous mode [ 602.651886][ T9774] bridge0: port 3(dummy0) entered blocking state [ 602.658692][ T9774] bridge0: port 3(dummy0) entered disabled state [ 602.666845][ T9774] dummy0: entered allmulticast mode [ 602.692653][ T9774] bridge0: port 3(dummy0) entered blocking state [ 602.699614][ T9774] bridge0: port 3(dummy0) entered forwarding state [ 603.636890][ T9786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.748'. [ 605.924692][ T30] audit: type=1326 audit(1752573883.167:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.5.753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc16cd8e929 code=0x0 [ 609.247242][ T9844] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 612.410973][ T9868] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 612.541108][ T9868] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 612.547275][ T9868] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 612.558870][ T9868] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 613.169560][ T9868] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 613.198308][ T9868] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 613.340480][ T9868] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 614.490738][ T5159] Bluetooth: hci3: command 0x0c1a tx timeout [ 614.583675][ T5159] Bluetooth: hci4: command 0x0c1a tx timeout [ 614.583674][ T8683] Bluetooth: hci5: command 0x0c1a tx timeout [ 614.656557][ T9891] usb usb8: usbfs: process 9891 (syz.7.769) did not claim interface 0 before use [ 615.289963][ T8683] Bluetooth: hci6: command 0x0c1a tx timeout [ 615.296265][ T5159] Bluetooth: hci0: command 0x0c1a tx timeout [ 615.986510][ T30] audit: type=1326 audit(1752573892.757:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9890 comm="syz.9.771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa72018e929 code=0x0 [ 616.395547][ T9908] netlink: 'syz.9.773': attribute type 10 has an invalid length. [ 616.416052][ T9908] netlink: 40 bytes leftover after parsing attributes in process `syz.9.773'. [ 616.711106][ T5159] Bluetooth: hci4: command 0x0c1a tx timeout [ 617.409623][ T5159] Bluetooth: hci0: command 0x0c1a tx timeout [ 617.875112][ T9922] fuse: Bad value for 'fd' [ 617.886530][ T9922] netlink: 96 bytes leftover after parsing attributes in process `syz.9.775'. [ 620.783670][ T9940] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 620.856180][ T9940] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 620.864264][ T9940] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 620.873411][ T9940] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 620.881517][ T9940] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 622.342378][ T9951] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 622.351396][ T9951] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 623.382250][ T9956] No buffer was provided with the request [ 624.168072][ T9963] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 624.248042][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.255979][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.725091][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 626.875265][ T9986] overlayfs: failed to resolve './file1/file0': -2 [ 627.440824][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 627.579663][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 627.616221][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 627.657827][ T10] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 628.077267][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.276958][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.300738][ T10] usb 8-1: Product: syz [ 628.304973][ T10] usb 8-1: Manufacturer: syz [ 628.316183][ T10] usb 8-1: SerialNumber: syz [ 628.830985][ T978] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 628.940345][ T10] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 629.254596][ T978] usb 10-1: device descriptor read/64, error -71 [ 629.650915][ T978] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 629.877423][ T978] usb 10-1: device descriptor read/64, error -71 [ 630.159111][ T978] usb usb10-port1: attempt power cycle [ 630.236528][ T10] usb 8-1: USB disconnect, device number 12 [ 630.407993][ T7974] udevd[7974]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.307953][ T978] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 631.707004][ T978] usb 10-1: device descriptor read/8, error -71 [ 633.722352][T10052] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 634.316476][T10043] netlink: 60 bytes leftover after parsing attributes in process `syz.2.795'. [ 635.266313][T10063] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 643.720749][ T7926] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 644.130908][ T7926] usb 3-1: Using ep0 maxpacket: 16 [ 644.310080][ T7926] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 644.356566][ T7926] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 644.386847][ T7926] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.469178][ T7926] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 644.505288][ T7926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.556241][ T7926] usb 3-1: Product: syz [ 644.560484][ T7926] usb 3-1: Manufacturer: syz [ 644.627251][ T7926] usb 3-1: SerialNumber: syz [ 645.145439][T10148] fuse: Bad value for 'fd' [ 645.156250][T10148] netlink: 96 bytes leftover after parsing attributes in process `syz.5.812'. [ 645.201278][T10148] vlan2: entered allmulticast mode [ 645.206536][T10148] gretap0: entered allmulticast mode [ 646.054770][ T7926] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 647.919912][T10161] No buffer was provided with the request [ 648.535073][ T7926] usb 3-1: USB disconnect, device number 21 [ 648.610240][ T8420] udevd[8420]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.841877][T10174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.817'. [ 649.319168][T10181] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 649.328151][T10181] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 652.980785][ T5949] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 653.220900][ T5949] usb 9-1: device descriptor read/64, error -71 [ 653.740901][ T5949] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 660.101231][T10263] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 660.109480][T10263] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 660.122289][T10263] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 660.714912][T10263] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 660.750976][T10263] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 660.796034][T10263] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 662.608141][ T5159] Bluetooth: hci4: command 0x0c1a tx timeout [ 662.619584][ T5159] Bluetooth: hci5: command 0x0c1a tx timeout [ 662.620832][ T8683] Bluetooth: hci3: command 0x0c1a tx timeout [ 662.732710][ T8683] Bluetooth: hci6: command 0x0c1a tx timeout [ 662.815921][ T8683] Bluetooth: hci0: command 0x0c1a tx timeout [ 663.396485][T10295] dummy0: entered promiscuous mode [ 663.438983][T10295] dummy0: entered allmulticast mode [ 663.733656][T10300] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 664.810734][ T8683] Bluetooth: hci6: command 0x0c1a tx timeout [ 666.491048][ T8054] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 666.886453][ T30] audit: type=1326 audit(1752573944.047:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10326 comm="syz.5.849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc16cd8e929 code=0x0 [ 666.907386][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.310762][ T8054] usb 8-1: Using ep0 maxpacket: 8 [ 667.461782][ T8054] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.475689][ T8054] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 667.523286][ T8054] usb 8-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 667.543357][ T8054] usb 8-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 667.593517][ T8054] usb 8-1: Product: syz [ 667.618063][ T8054] usb 8-1: Manufacturer: syz [ 667.650942][ T8054] usb 8-1: SerialNumber: syz [ 667.880759][ T5845] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 667.882099][T10322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.921375][T10322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.982208][T10322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.041321][T10322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.150752][ T5845] usb 6-1: Using ep0 maxpacket: 16 [ 668.163120][ T5845] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 668.188991][ T5845] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.243993][ T5845] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 668.933104][ T5845] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 668.950786][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.958871][ T5845] usb 6-1: Product: syz [ 668.963386][ T5845] usb 6-1: Manufacturer: syz [ 668.968044][ T5845] usb 6-1: SerialNumber: syz [ 669.267938][T10360] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:32 to non-existent VLAN 2048 [ 669.304975][ T5845] usb 6-1: 0:2 : does not exist [ 669.344546][ T5845] usb 6-1: USB disconnect, device number 6 [ 670.044781][ T9] usb 8-1: USB disconnect, device number 13 [ 670.646151][T10371] No buffer was provided with the request [ 671.413488][ T30] audit: type=1326 audit(1752573947.987:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10375 comm="syz.9.856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa72018e929 code=0x0 [ 672.230750][ T5845] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 672.395570][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 672.544258][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 672.590153][ T5845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 672.647841][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 672.700115][ T5845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 672.712183][ T9] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 672.720283][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.829807][ T5845] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 672.898374][ T9] usb 9-1: config 0 has no interface number 0 [ 672.945007][ T5845] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 672.945811][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 672.984732][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.987376][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.055363][ T5845] usb 3-1: Product: syz [ 673.055796][ T9] usb 9-1: Product: syz [ 673.059586][ T5845] usb 3-1: Manufacturer: syz [ 673.068665][ T9] usb 9-1: Manufacturer: syz [ 673.102730][ T9] usb 9-1: SerialNumber: syz [ 673.127774][ T5845] usb 3-1: SerialNumber: syz [ 673.212369][ T9] usb 9-1: config 0 descriptor?? [ 673.265807][ T9] usb 9-1: Found UVC 0.04 device syz (046d:08c3) [ 673.351224][ T9] usb 9-1: No valid video chain found. [ 673.507714][ T8054] usb 9-1: USB disconnect, device number 13 [ 673.565579][ T5845] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 675.528171][ T5845] usb 3-1: USB disconnect, device number 22 [ 675.833246][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 676.472874][ T8420] udevd[8420]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 676.741374][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 676.756473][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.982883][T10441] netlink: 'syz.2.868': attribute type 10 has an invalid length. [ 676.991032][T10441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.868'. [ 677.000234][T10441] dummy0: left allmulticast mode [ 677.008971][T10441] bridge0: port 3(dummy0) entered blocking state [ 677.016624][T10441] bridge0: port 3(dummy0) entered disabled state [ 677.051138][T10441] dummy0: entered allmulticast mode [ 677.091470][ T9] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 677.131261][T10441] bridge0: port 3(dummy0) entered blocking state [ 677.138128][T10441] bridge0: port 3(dummy0) entered forwarding state [ 677.320178][ T9] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 677.340307][ T9] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 677.369234][ T9] usb 9-1: Product: syz [ 677.382405][ T9] usb 9-1: Manufacturer: syz [ 677.546691][ T9] usb 9-1: SerialNumber: syz [ 678.341883][T10428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.391213][T10428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.436078][T10428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.484215][T10428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.010708][ T30] audit: type=1326 audit(1752573956.717:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10467 comm="syz.2.873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba55b8e929 code=0x0 [ 680.613085][T10473] usb usb8: usbfs: process 10473 (syz.7.870) did not claim interface 0 before use [ 680.651034][ T9] usb 9-1: USB disconnect, device number 14 [ 685.637941][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.648034][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.640441][ T30] audit: type=1326 audit(1752573963.727:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10535 comm="syz.5.886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc16cd8e929 code=0x0 [ 688.832996][T10554] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 692.018233][T10553] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 692.169320][T10553] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 692.331953][T10553] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 692.339761][T10553] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 830.990558][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 830.997579][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10554/1:b..l P10549/1:b..l P5171/1:b..l P10498/1:b..l [ 831.009659][ C1] rcu: (detected by 1, t=10503 jiffies, g=41857, q=286 ncpus=2) [ 831.017412][ C1] task:syz.8.878 state:R running task stack:26888 pid:10498 tgid:10491 ppid:8071 task_flags:0x40044c flags:0x00004002 [ 831.031871][ C1] Call Trace: [ 831.035183][ C1] [ 831.038148][ C1] __schedule+0x16a2/0x4cb0 [ 831.042714][ C1] ? preempt_schedule_common+0x83/0xd0 [ 831.048222][ C1] ? __pfx___schedule+0x10/0x10 [ 831.053118][ C1] ? do_raw_spin_lock+0x121/0x290 [ 831.058215][ C1] ? preempt_schedule+0xae/0xc0 [ 831.063103][ C1] preempt_schedule_common+0x83/0xd0 [ 831.068434][ C1] preempt_schedule+0xae/0xc0 [ 831.073161][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 831.078585][ C1] preempt_schedule_thunk+0x16/0x30 [ 831.083830][ C1] _raw_spin_unlock+0x3f/0x50 [ 831.088544][ C1] unmap_page_range+0x3842/0x41c0 [ 831.093665][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 831.099090][ C1] ? unmap_vmas+0x144/0x580 [ 831.103639][ C1] unmap_vmas+0x399/0x580 [ 831.108007][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 831.112918][ C1] exit_mmap+0x248/0xb50 [ 831.117199][ C1] ? uprobe_clear_state+0x20f/0x290 [ 831.122435][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 831.127240][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 831.132919][ C1] ? __pfx_exit_aio+0x10/0x10 [ 831.137645][ C1] ? uprobe_clear_state+0x274/0x290 [ 831.142924][ C1] ? mm_update_next_owner+0xa7/0x870 [ 831.148251][ C1] __mmput+0x118/0x410 [ 831.152350][ C1] exit_mm+0x1da/0x2c0 [ 831.156476][ C1] ? __pfx_exit_mm+0x10/0x10 [ 831.161118][ C1] ? rcu_is_watching+0x15/0xb0 [ 831.165922][ C1] do_exit+0x648/0x22e0 [ 831.170121][ C1] ? do_raw_spin_lock+0x121/0x290 [ 831.175189][ C1] ? __pfx_do_exit+0x10/0x10 [ 831.179830][ C1] do_group_exit+0x21c/0x2d0 [ 831.184476][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.189712][ C1] get_signal+0x125e/0x1310 [ 831.194263][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 831.199856][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 831.206080][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 831.211569][ C1] exit_to_user_mode_loop+0x75/0x110 [ 831.216883][ C1] do_syscall_64+0x2bd/0x3b0 [ 831.221515][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.226751][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.232845][ C1] ? clear_bhb_loop+0x60/0xb0 [ 831.237619][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.243536][ C1] RIP: 0033:0x7f6352f8e929 [ 831.247989][ C1] RSP: 002b:00007f6353d41038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 831.256432][ C1] RAX: 0000000000010106 RBX: 00007f63531b6080 RCX: 00007f6352f8e929 [ 831.264439][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 831.272438][ C1] RBP: 00007f6353010b39 R08: 0000000000000000 R09: 0000000000000000 [ 831.280432][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 831.288441][ C1] R13: 0000000000000000 R14: 00007f63531b6080 R15: 00007fffd18c9cd8 [ 831.296465][ C1] [ 831.299514][ C1] task:jbd2/sda1-8 state:R running task stack:23832 pid:5171 tgid:5171 ppid:2 task_flags:0x240040 flags:0x00004000 [ 831.313054][ C1] Call Trace: [ 831.316357][ C1] [ 831.319317][ C1] __schedule+0x16a2/0x4cb0 [ 831.323875][ C1] ? unwind_get_return_address_ptr+0x70/0xa0 [ 831.329896][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 831.335313][ C1] ? __pfx___schedule+0x10/0x10 [ 831.340194][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 831.345291][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 831.351519][ C1] ? arch_stack_walk+0x110/0x150 [ 831.356513][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 831.361838][ C1] preempt_schedule_irq+0xb5/0x150 [ 831.366993][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 831.372756][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 831.378592][ C1] irqentry_exit+0x6f/0x90 [ 831.383049][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 831.389060][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 831.394374][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 3b c2 fe 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 831.414017][ C1] RSP: 0018:ffffc9000fc6ef50 EFLAGS: 00000206 [ 831.420111][ C1] RAX: 6a2eb4b8a47a4a00 RBX: 0000000000000202 RCX: 6a2eb4b8a47a4a00 [ 831.428107][ C1] RDX: 0000000000000001 RSI: ffffffff8db72142 RDI: ffffffff8be1ca00 [ 831.436111][ C1] RBP: ffff8880347ba918 R08: ffffc9000fc6fd90 R09: 0000000000000000 [ 831.444110][ C1] R10: ffffc9000fc6f0d8 R11: fffff52001f8de1d R12: 0000000000000001 [ 831.452109][ C1] R13: 0000000000000001 R14: ffffffff8e13f0e0 R15: ffff8880347b9e00 [ 831.460129][ C1] ? unwind_next_frame+0xa5/0x2390 [ 831.465280][ C1] ? unwind_next_frame+0xa5/0x2390 [ 831.470418][ C1] unwind_next_frame+0x19a9/0x2390 [ 831.475566][ C1] ? unwind_next_frame+0xa5/0x2390 [ 831.480704][ C1] ? kjournald2+0x3cf/0x750 [ 831.485240][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 831.491422][ C1] arch_stack_walk+0x11c/0x150 [ 831.496226][ C1] ? kthread+0x711/0x8a0 [ 831.500506][ C1] stack_trace_save+0x9c/0xe0 [ 831.505214][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 831.510636][ C1] save_stack+0xf7/0x1f0 [ 831.514915][ C1] ? __pfx_save_stack+0x10/0x10 [ 831.519864][ C1] ? __free_frozen_pages+0xc65/0xe60 [ 831.525200][ C1] ? __put_partials+0x161/0x1c0 [ 831.530079][ C1] ? put_cpu_partial+0x17c/0x250 [ 831.535046][ C1] ? __slab_free+0x2f7/0x400 [ 831.539661][ C1] ? qlist_free_all+0x97/0x140 [ 831.544452][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 831.550116][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 831.555171][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 831.560830][ C1] ? alloc_buffer_head+0x2a/0x270 [ 831.565882][ C1] ? folio_alloc_buffers+0x32d/0x640 [ 831.571185][ C1] ? bdev_getblk+0x299/0x690 [ 831.575793][ C1] ? jbd2_journal_get_descriptor_buffer+0x147/0x420 [ 831.582416][ C1] ? journal_submit_commit_record+0xec/0x8b0 [ 831.588428][ C1] ? jbd2_journal_commit_transaction+0x3455/0x5a00 [ 831.594966][ C1] ? kjournald2+0x3cf/0x750 [ 831.599694][ C1] ? page_ext_put+0x97/0xc0 [ 831.604239][ C1] __reset_page_owner+0x71/0x1f0 [ 831.609221][ C1] __free_frozen_pages+0xc65/0xe60 [ 831.614385][ C1] __put_partials+0x161/0x1c0 [ 831.619100][ C1] put_cpu_partial+0x17c/0x250 [ 831.623902][ C1] ? put_cpu_partial+0x6d/0x250 [ 831.628796][ C1] __slab_free+0x2f7/0x400 [ 831.633252][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 831.639625][ C1] ? __phys_addr+0xd3/0x180 [ 831.644159][ C1] qlist_free_all+0x97/0x140 [ 831.648805][ C1] kasan_quarantine_reduce+0x148/0x160 [ 831.654310][ C1] __kasan_slab_alloc+0x22/0x80 [ 831.659196][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 831.664696][ C1] ? alloc_buffer_head+0x2a/0x270 [ 831.669756][ C1] alloc_buffer_head+0x2a/0x270 [ 831.674658][ C1] ? folio_alloc_buffers+0x30f/0x640 [ 831.679980][ C1] folio_alloc_buffers+0x32d/0x640 [ 831.685123][ C1] bdev_getblk+0x299/0x690 [ 831.689601][ C1] jbd2_journal_get_descriptor_buffer+0x147/0x420 [ 831.696093][ C1] journal_submit_commit_record+0xec/0x8b0 [ 831.701949][ C1] ? __pfx_journal_submit_commit_record+0x10/0x10 [ 831.708414][ C1] jbd2_journal_commit_transaction+0x3455/0x5a00 [ 831.714826][ C1] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 831.721579][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 831.727956][ C1] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 831.733645][ C1] ? __pfx___timer_delete_sync+0x10/0x10 [ 831.739354][ C1] kjournald2+0x3cf/0x750 [ 831.743766][ C1] ? __pfx_kjournald2+0x10/0x10 [ 831.748659][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 831.754790][ C1] ? __kthread_parkme+0x7b/0x200 [ 831.759781][ C1] ? __kthread_parkme+0x1a1/0x200 [ 831.764864][ C1] kthread+0x711/0x8a0 [ 831.768988][ C1] ? __pfx_kjournald2+0x10/0x10 [ 831.773893][ C1] ? __pfx_kthread+0x10/0x10 [ 831.778539][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 831.783788][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.789031][ C1] ? __pfx_kthread+0x10/0x10 [ 831.793677][ C1] ret_from_fork+0x3fc/0x770 [ 831.798312][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 831.803471][ C1] ? __switch_to_asm+0x39/0x70 [ 831.808279][ C1] ? __switch_to_asm+0x33/0x70 [ 831.813083][ C1] ? __pfx_kthread+0x10/0x10 [ 831.817717][ C1] ret_from_fork_asm+0x1a/0x30 [ 831.822547][ C1] [ 831.825597][ C1] task:rm state:R running task stack:24104 pid:10549 tgid:10549 ppid:10503 task_flags:0x400000 flags:0x00004002 [ 831.839140][ C1] Call Trace: [ 831.842451][ C1] [ 831.845418][ C1] __schedule+0x16a2/0x4cb0 [ 831.849988][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 831.855322][ C1] ? __pfx___schedule+0x10/0x10 [ 831.860211][ C1] ? __kernel_text_address+0xd/0x40 [ 831.865446][ C1] ? mas_wr_store_entry+0x205a/0x25b0 [ 831.870865][ C1] ? arch_stack_walk+0xfc/0x150 [ 831.875770][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 831.881098][ C1] preempt_schedule_irq+0xb5/0x150 [ 831.886244][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 831.892019][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 831.897863][ C1] irqentry_exit+0x6f/0x90 [ 831.902331][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 831.908342][ C1] RIP: 0010:lock_acquire+0x9a/0x360 [ 831.913591][ C1] Code: 83 3d b9 c2 02 0e 00 0f 84 f0 00 00 00 48 8b b4 24 90 00 00 00 4c 89 ef e8 f3 22 83 00 83 3d 9c c2 02 0e 00 0f 84 fa 00 00 00 <65> 8b 05 9f 15 ff 10 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 10 [ 831.933238][ C1] RSP: 0018:ffffc9000de1f098 EFLAGS: 00000202 [ 831.939343][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8f27e612132bdf00 [ 831.947348][ C1] RDX: 0000000000000000 RSI: ffffffff8172ab02 RDI: 1ffffffff1c27e1c [ 831.955353][ C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: 0000000000000000 [ 831.963354][ C1] R10: ffffc9000de1f258 R11: ffffffff81acff90 R12: 0000000000000002 [ 831.971360][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000000 [ 831.979367][ C1] ? unwind_next_frame+0xa5/0x2390 [ 831.984516][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 831.990704][ C1] ? unwind_next_frame+0xc2/0x2390 [ 831.995844][ C1] ? lock_acquire+0x8d/0x360 [ 832.000457][ C1] ? unwind_next_frame+0xa5/0x2390 [ 832.005592][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 832.010903][ C1] ? stack_trace_save+0x9c/0xe0 [ 832.015785][ C1] ? unwind_next_frame+0xa5/0x2390 [ 832.020922][ C1] unwind_next_frame+0xc2/0x2390 [ 832.025885][ C1] ? unwind_next_frame+0xa5/0x2390 [ 832.031030][ C1] ? arch_stack_walk+0xe4/0x150 [ 832.035917][ C1] ? __unwind_start+0x5b9/0x760 [ 832.040796][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 832.046982][ C1] arch_stack_walk+0x11c/0x150 [ 832.051790][ C1] ? stack_trace_save+0x9c/0xe0 [ 832.056684][ C1] stack_trace_save+0x9c/0xe0 [ 832.061391][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 832.066804][ C1] save_stack+0xf7/0x1f0 [ 832.071081][ C1] ? __pfx_save_stack+0x10/0x10 [ 832.075989][ C1] __reset_page_owner+0x71/0x1f0 [ 832.080974][ C1] __free_frozen_pages+0xc65/0xe60 [ 832.086136][ C1] __put_partials+0x161/0x1c0 [ 832.090841][ C1] put_cpu_partial+0x17c/0x250 [ 832.095639][ C1] ? put_cpu_partial+0x6d/0x250 [ 832.100520][ C1] __slab_free+0x2f7/0x400 [ 832.104978][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 832.111350][ C1] ? __phys_addr+0xd3/0x180 [ 832.115902][ C1] qlist_free_all+0x97/0x140 [ 832.120540][ C1] kasan_quarantine_reduce+0x148/0x160 [ 832.126035][ C1] __kasan_slab_alloc+0x22/0x80 [ 832.130929][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 832.136443][ C1] ? vm_area_alloc+0x24/0x140 [ 832.141157][ C1] vm_area_alloc+0x24/0x140 [ 832.145692][ C1] mmap_region+0xcc7/0x1f30 [ 832.150249][ C1] ? process_measurement+0x15b6/0x1a40 [ 832.155731][ C1] ? __pfx_mmap_region+0x10/0x10 [ 832.160715][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 832.166393][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 832.171457][ C1] ? rcu_is_watching+0x15/0xb0 [ 832.176250][ C1] ? process_measurement+0x15c3/0x1a40 [ 832.181781][ C1] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 832.187719][ C1] ? bpf_lsm_mmap_addr+0x9/0x20 [ 832.192599][ C1] ? security_mmap_addr+0x71/0x270 [ 832.197754][ C1] ? shmem_mapping+0xd/0x50 [ 832.202295][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 832.207789][ C1] do_mmap+0xc45/0x10d0 [ 832.211989][ C1] ? __pfx_do_mmap+0x10/0x10 [ 832.216627][ C1] ? down_write_killable+0x178/0x230 [ 832.221947][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 832.227623][ C1] vm_mmap_pgoff+0x31b/0x4c0 [ 832.232252][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 832.237392][ C1] ? __fget_files+0x2a/0x420 [ 832.242011][ C1] ? __fget_files+0x3a0/0x420 [ 832.246710][ C1] ? __fget_files+0x2a/0x420 [ 832.251336][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 832.256146][ C1] do_syscall_64+0xfa/0x3b0 [ 832.260694][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 832.265940][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.272046][ C1] ? clear_bhb_loop+0x60/0xb0 [ 832.276771][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.282703][ C1] RIP: 0033:0x7f628f236242 [ 832.287146][ C1] RSP: 002b:00007ffe6b5c8ca8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 832.295595][ C1] RAX: ffffffffffffffda RBX: 00007f628ef42000 RCX: 00007f628f236242 [ 832.303596][ C1] RDX: 0000000000000005 RSI: 0000000000008000 RDI: 00007f628ef42000 [ 832.311590][ C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000003000 [ 832.319588][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffe6b5c8cf8 [ 832.327598][ C1] R13: 00007f628f20b580 R14: 00007ffe6b5c9120 R15: 00000fffcd6b9198 [ 832.335618][ C1] [ 832.338660][ C1] task:syz.5.889 state:R running task stack:25928 pid:10554 tgid:10547 ppid:8008 task_flags:0x40054c flags:0x00004002 [ 832.352200][ C1] Call Trace: [ 832.355501][ C1] [ 832.358461][ C1] __schedule+0x16a2/0x4cb0 [ 832.363024][ C1] ? preempt_schedule_common+0x83/0xd0 [ 832.368525][ C1] ? __pfx___schedule+0x10/0x10 [ 832.373458][ C1] ? do_raw_spin_lock+0x121/0x290 [ 832.378520][ C1] ? rcu_is_watching+0x15/0xb0 [ 832.383317][ C1] ? __folio_rmap_sanity_checks+0x30d/0x700 [ 832.389245][ C1] ? preempt_schedule+0xae/0xc0 [ 832.394135][ C1] preempt_schedule_common+0x83/0xd0 [ 832.399460][ C1] preempt_schedule+0xae/0xc0 [ 832.404190][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 832.409612][ C1] preempt_schedule_thunk+0x16/0x30 [ 832.414857][ C1] _raw_spin_unlock+0x3f/0x50 [ 832.419565][ C1] unmap_page_range+0x3842/0x41c0 [ 832.424670][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 832.430091][ C1] ? unmap_vmas+0x144/0x580 [ 832.434626][ C1] unmap_vmas+0x399/0x580 [ 832.438997][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 832.443908][ C1] exit_mmap+0x248/0xb50 [ 832.448188][ C1] ? uprobe_clear_state+0x20f/0x290 [ 832.453430][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 832.458228][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 832.463896][ C1] ? __pfx_exit_aio+0x10/0x10 [ 832.468618][ C1] ? uprobe_clear_state+0x274/0x290 [ 832.473852][ C1] ? mm_update_next_owner+0xa7/0x870 [ 832.479180][ C1] __mmput+0x118/0x410 [ 832.483282][ C1] exit_mm+0x1da/0x2c0 [ 832.487382][ C1] ? __pfx_exit_mm+0x10/0x10 [ 832.492010][ C1] ? rcu_is_watching+0x15/0xb0 [ 832.496805][ C1] do_exit+0x648/0x22e0 [ 832.501004][ C1] ? do_raw_spin_lock+0x121/0x290 [ 832.506071][ C1] ? __pfx_do_exit+0x10/0x10 [ 832.510778][ C1] do_group_exit+0x21c/0x2d0 [ 832.515403][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 832.520636][ C1] get_signal+0x125e/0x1310 [ 832.525192][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 832.530792][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 832.537002][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 832.542489][ C1] exit_to_user_mode_loop+0x75/0x110 [ 832.547797][ C1] do_syscall_64+0x2bd/0x3b0 [ 832.552414][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.558506][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 832.564700][ C1] ? clear_bhb_loop+0x60/0xb0 [ 832.569408][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.575347][ C1] RIP: 0033:0x7fc16cd8e929 [ 832.579783][ C1] RSP: 002b:00007fc16dc70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 832.588226][ C1] RAX: fffffffffffffe00 RBX: 00007fc16cfb6160 RCX: 00007fc16cd8e929 [ 832.596224][ C1] RDX: 000000000000001b RSI: 00002000000001c0 RDI: 0000000000000004 [ 832.604226][ C1] RBP: 00007fc16ce10b39 R08: 0000200000000100 R09: 0000000000000010 [ 832.612234][ C1] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000000 [ 832.620229][ C1] R13: 0000000000000000 R14: 00007fc16cfb6160 R15: 00007ffe948c9028 [ 832.628243][ C1] [ 832.631283][ C1] rcu: rcu_preempt kthread starved for 10455 jiffies! g41857 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 832.642502][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 832.652497][ C1] rcu: RCU grace-period kthread stack dump: [ 832.658420][ C1] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 832.671960][ C1] Call Trace: [ 832.675266][ C1] [ 832.678222][ C1] __schedule+0x16a2/0x4cb0 [ 832.682785][ C1] ? schedule+0x165/0x360 [ 832.687158][ C1] ? __pfx___schedule+0x10/0x10 [ 832.692056][ C1] ? schedule+0x91/0x360 [ 832.696345][ C1] schedule+0x165/0x360 [ 832.700537][ C1] schedule_timeout+0x12b/0x270 [ 832.705413][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 832.710811][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 832.716743][ C1] ? __pfx_process_timeout+0x10/0x10 [ 832.722067][ C1] ? prepare_to_swait_event+0x341/0x380 [ 832.727655][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 832.732550][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 832.737789][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 832.743972][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 832.749284][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 832.754530][ C1] ? finish_swait+0xcd/0x1f0 [ 832.759155][ C1] rcu_gp_kthread+0x99/0x390 [ 832.763778][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 832.769017][ C1] ? __kthread_parkme+0x7b/0x200 [ 832.773999][ C1] ? __kthread_parkme+0x1a1/0x200 [ 832.779066][ C1] kthread+0x711/0x8a0 [ 832.783173][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 832.788416][ C1] ? __pfx_kthread+0x10/0x10 [ 832.793048][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 832.798283][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 832.803517][ C1] ? __pfx_kthread+0x10/0x10 [ 832.808143][ C1] ret_from_fork+0x3fc/0x770 [ 832.812771][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 832.817922][ C1] ? __switch_to_asm+0x39/0x70 [ 832.822721][ C1] ? __switch_to_asm+0x33/0x70 [ 832.827521][ C1] ? __pfx_kthread+0x10/0x10 [ 832.832147][ C1] ret_from_fork_asm+0x1a/0x30 [ 832.836963][ C1] [ 832.840003][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 832.846347][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 832.858013][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 832.868105][ C1] RIP: 0010:lock_release+0x46/0x3e0 [ 832.873332][ C1] Code: d0 c4 fe 10 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 d3 c4 fe 10 83 f8 08 0f 83 9a 02 00 00 89 c0 48 0f a3 05 7c 80 02 0e 73 16 25 e0 08 00 84 c0 75 0d f6 05 fc 6a ec 0d 01 0f 84 ad 02 00 00 [ 832.892971][ C1] RSP: 0018:ffffc90000a07b10 EFLAGS: 00000297 [ 832.899074][ C1] RAX: 0000000000000001 RBX: ffffc90000a07c01 RCX: b9dd39958c632900 [ 832.907075][ C1] RDX: ffffffff9030c801 RSI: ffffffff8172aae5 RDI: ffffffff8e13f0e0 [ 832.915085][ C1] RBP: dffffc0000000000 R08: ffffc90000a07ca7 R09: 0000000000000000 [ 832.923088][ C1] R10: ffffc90000a07c98 R11: fffff52000140f95 R12: ffffc90000a08ff8 [ 832.931100][ C1] R13: ffffffff8172aae5 R14: ffffffff8e13f0e0 R15: ffffffff8172aae5 [ 832.939106][ C1] FS: 0000000000000000(0000) GS:ffff888125d4f000(0000) knlGS:0000000000000000 [ 832.948069][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 832.954686][ C1] CR2: 000055555db5e648 CR3: 0000000052bf2000 CR4: 00000000003526f0 [ 832.962702][ C1] Call Trace: [ 832.966070][ C1] [ 832.968949][ C1] ? unwind_next_frame+0xa5/0x2390 [ 832.974095][ C1] unwind_next_frame+0x19a9/0x2390 [ 832.979240][ C1] ? unwind_next_frame+0xa5/0x2390 [ 832.984486][ C1] ? irq_exit_rcu+0x9/0x30 [ 832.988938][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 832.995137][ C1] arch_stack_walk+0x11c/0x150 [ 832.999937][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 833.005788][ C1] stack_trace_save+0x9c/0xe0 [ 833.010502][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 833.015910][ C1] ? stack_trace_save+0x9c/0xe0 [ 833.020806][ C1] ? stack_depot_save_flags+0x40/0x900 [ 833.026306][ C1] kasan_save_track+0x3e/0x80 [ 833.031017][ C1] ? kasan_save_track+0x3e/0x80 [ 833.035895][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 833.040959][ C1] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 833.047062][ C1] ? kmalloc_reserve+0xbd/0x290 [ 833.051950][ C1] ? __alloc_skb+0x142/0x2d0 [ 833.056575][ C1] ? synproxy_send_client_synack+0x16c/0xe20 [ 833.062588][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 833.068055][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 833.073474][ C1] ? nft_do_chain+0x40c/0x1920 [ 833.078285][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 833.083443][ C1] ? nf_hook_slow+0xc2/0x220 [ 833.088068][ C1] ? NF_HOOK+0x206/0x3a0 [ 833.092343][ C1] ? NF_HOOK+0x30c/0x3a0 [ 833.096609][ C1] ? __netif_receive_skb+0x143/0x380 [ 833.101918][ C1] ? process_backlog+0x60e/0x14f0 [ 833.106972][ C1] ? __napi_poll+0xc4/0x480 [ 833.111503][ C1] ? net_rx_action+0x707/0xe30 [ 833.116294][ C1] ? handle_softirqs+0x283/0x870 [ 833.121254][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 833.126042][ C1] ? irq_exit_rcu+0x9/0x30 [ 833.130532][ C1] __kasan_slab_alloc+0x6c/0x80 [ 833.135418][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 833.141345][ C1] ? kmalloc_reserve+0xbd/0x290 [ 833.146224][ C1] kmalloc_reserve+0xbd/0x290 [ 833.150932][ C1] __alloc_skb+0x142/0x2d0 [ 833.155383][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 833.161237][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 833.167603][ C1] ? nft_symhash_reduce+0x2b0/0x560 [ 833.172893][ C1] ? synproxy_pernet+0x45/0x270 [ 833.177797][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 833.183036][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 833.188882][ C1] ? nf_ip_checksum+0x13c/0x510 [ 833.193775][ C1] nft_synproxy_do_eval+0x345/0x570 [ 833.199019][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 833.204781][ C1] ? queue_work_on+0x115/0x270 [ 833.209583][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 833.214818][ C1] ? queue_work_on+0x1ed/0x270 [ 833.219623][ C1] nft_do_chain+0x40c/0x1920 [ 833.224255][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 833.229496][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 833.234909][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 833.240671][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 833.245772][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 833.251019][ C1] nft_do_chain_inet+0x25d/0x340 [ 833.255998][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 833.261496][ C1] ? ipt_do_table+0x2a3/0x1630 [ 833.266308][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 833.271713][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 833.277213][ C1] nf_hook_slow+0xc2/0x220 [ 833.281663][ C1] NF_HOOK+0x206/0x3a0 [ 833.285769][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 833.291782][ C1] ? NF_HOOK+0x9a/0x3a0 [ 833.295972][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 833.300584][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 833.305899][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 833.311922][ C1] ? skb_dst+0x4f/0xd0 [ 833.316026][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 833.321082][ C1] NF_HOOK+0x30c/0x3a0 [ 833.325186][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 833.330331][ C1] ? NF_HOOK+0x9a/0x3a0 [ 833.334519][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 833.339138][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 833.343769][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 833.348930][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 833.353473][ C1] __netif_receive_skb+0x143/0x380 [ 833.358620][ C1] ? process_backlog+0x2d5/0x14f0 [ 833.363685][ C1] process_backlog+0x60e/0x14f0 [ 833.368590][ C1] ? __pfx_process_backlog+0x10/0x10 [ 833.373910][ C1] ? rcu_is_watching+0x15/0xb0 [ 833.378726][ C1] __napi_poll+0xc4/0x480 [ 833.383082][ C1] ? net_rx_action+0x46d/0xe30 [ 833.387877][ C1] net_rx_action+0x707/0xe30 [ 833.392514][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 833.397675][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 833.403181][ C1] handle_softirqs+0x283/0x870 [ 833.407979][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 833.412782][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 833.418100][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 833.423350][ C1] __irq_exit_rcu+0xca/0x1f0 [ 833.427965][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 833.433202][ C1] irq_exit_rcu+0x9/0x30 [ 833.437476][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 833.443166][ C1] [ 833.446121][ C1] [ 833.449077][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 833.455085][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 833.460837][ C1] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 fd 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 833.480472][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 833.486578][ C1] RAX: b9dd39958c632900 RBX: ffffffff81976938 RCX: b9dd39958c632900 [ 833.494574][ C1] RDX: 0000000000000001 RSI: ffffffff8d98544c RDI: ffffffff8be1ca00 [ 833.502579][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 833.510578][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0cbf0 [ 833.518572][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a57b40 [ 833.526578][ C1] ? do_idle+0x1e8/0x510 [ 833.530874][ C1] default_idle+0x13/0x20 [ 833.535227][ C1] default_idle_call+0x74/0xb0 [ 833.540011][ C1] do_idle+0x1e8/0x510 [ 833.544110][ C1] ? __pfx_do_idle+0x10/0x10 [ 833.548740][ C1] ? do_idle+0xa/0x510 [ 833.552842][ C1] cpu_startup_entry+0x44/0x60 [ 833.557633][ C1] start_secondary+0x101/0x110 [ 833.562444][ C1] common_startup_64+0x13e/0x147 [ 833.567428][ C1] [ 835.392319][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 835.406425][ T1301] ieee802154 phy1 wpan1: encryption failed: -22