last executing test programs: 9.196133207s ago: executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) gettid() r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000080)=""/201, 0xc9}], 0x1, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000100)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f00000000c0)={r8, 0x0, 0x2908}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) 7.602487865s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$eJzs3MtvG0UYAPBv7SR9k1DKo6WFQEFEPJImfdADFxBIHEBCgkMRp5CkVajboCZItIogcAhHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZu6iZ3GiVOX7O8nbTvjHWvm292xZ2e8CaCwBtN/koi9EfFHRPTXs7cXGKz/d3NpfuKfpfmJJKrVt/9OauVuLM1P5EXz9+2pZ6rVLL+jSb2L70WMVypTl7L8yNyFD0dmL195YfrC+Lmpc1MXx06fPnH8SN+psZMdiTON68ahT2YOH3z93atvTpy5+v4v36Xt3Zvtb4yjUwbrR7eppztdWZfta0gnPV1sCG0pR0R6unpr/b8/yrFreV9/vPZ5VxsHbKlqtVpt9v2cWagC21gS3W4B0B35F316/5tvd2nocU+4/nL9BiiN+2a21ff0RCkr07vi/raTBiPizMK/X6dbbNE8BABAox/S8c/zzcZ/pXioodx92RrKQETcHxH7I+KBiDgQEQ9G1Mo+HBGPtFn/yhWS1eOf0rUNBbZO6fjvpWxt6/bxXz76i4FylttXi783OTtdmTqWHZOh6N2R5kfXqOPHV3//stW+xvFfuqX152PBrB3XelZM0E2Oz41vJuZG1z+LONTTLP4k8mWcJCIORsShDdYx/ey3h1vtu3P8a+jAOlP1m4hn6ud/IVbEn0tark+Ovnhq7OTIzqhMHRvJr4rVfv1t8a1W9W8q/g5Iz//uptf/cvwDyc6I2ctXztfWa2fbr2Pxzy9a3tNs9PrvS96ppfuy1z4en5u7NBrRl7yx+vWxW+/N83n5NP6ho837//64dSQejYj0Ij4SEY9FxONZ25+IiCcj4uga8f/8ylMftB//GrPyHZTGP3mn8x+N57/9RPn8T9+3H38uPf8naqmh7JX1fP6tt4GbOXYAAADwf1Gq/QY+KQ0vp0ul4eH6b/gPxO5SZWZ27rmzMx9dnKz/Vn4gekv5TFd/w3zoaDY3nOfHVuSPZ/PGX5V31fLDEzOVyW4HDwW3p0X/T/1V7nbrgC3neS0oLv0fikv/h+LS/6G49H8ormb9/9MutAO4+3z/Q3Hp/1Bc+j8Ul/4PhdTy2fjSph75l9j2iSjdE83Y/omedf8xiw0mdjTd1e1PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74LwAA//9wiOSH") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="b8f92416074d3848"}}) 6.461166229s ago: executing program 0: socket(0x0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="82", 0x358, 0x2, &(0x7f0000000040)={0x18, 0x3}, 0x1c) 6.18827792s ago: executing program 4: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 5.330887417s ago: executing program 4: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 5.117412277s ago: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x7) fcntl$setsig(r4, 0xa, 0x12) ioctl$TIOCSETD(r1, 0x5423, 0x0) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r6 = dup2(r4, r5) fcntl$setown(r5, 0x8, r3) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x8005}, 0x4) tkill(r3, 0x14) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x48}}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 4.955890173s ago: executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) fcntl$lock(r0, 0xa, 0x0) 4.563445043s ago: executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x284000, 0x0) 4.519412135s ago: executing program 2: fanotify_init(0x200, 0x0) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7}, 0x7) syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x5e0, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r3 = socket$qrtr(0x2a, 0x2, 0x0) read(r3, &(0x7f0000000180)=""/52, 0xfffffdef) 4.455363242s ago: executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) 4.143014538s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000280)=ANY=[@ANYBLOB="000000d2"]) 3.880812278s ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r1 = memfd_create(&(0x7f0000001c80)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83Uz\xc0W\xc1\xcc\x97\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xc2_o\xe6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\x16=q\x93u\xf1\xde\xef\xac\x171\x13r\xc49\x80\x86\x1a\xbf\xaa&\xf0\xe8Gwm\x80]\xe8\xc2\x90w\xf8H\xe8Cc\x84\xa6y\xb7\xbe\xcbX\x891\xae\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcIv\xe6\xd1\xb5\xbf\xacw\xda\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfd\x05\x00\x00\x00Q\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89b,8X\xee\rSJQ\x94{}\xd5\xaf\xa9mX0\x94T\x95\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4b\xfc\xf9\xb1\xe0\xdd2\xfd\xda\x84\xbd\xaf\x88\xb3\x91P6t\xf3\xcc\x03\xb8\x9a\x043|A\f\xd4\x1a?h \f\x7f\x92\xb5\x98/J\xd1\x8eW\xfd\xf4o\xd4[\x90\xb3\xc3\xf9\x18\x86\xd1\xeb\x13PIwg\xbe\xbb\"\xfce:\xae\xa9\xc57\xe7\xf6G\x93\xe1X\x9f\xfb\xa5\xe4$>L\xe5]\xc3\x88\xca\xb7\x8b\xfcCn\xcc7>\xa7\xf6mF\xc2\x96q\xc48\xeeP%\x89d\x942\x84r]S\x18{\xd8\xbfT\x0f\xcb\xf7\x84D\xac\x03F+Nj\xd5\x81\x10\xfe\xa6\xf9l\x96N\x1f\xae\xab\xf67\xf1e4v*\x8et\xd3}}\xee\xaf5\x123\x15\xa0\x05\xf4B\x9c\x127\xc42\xab\xf2\xcd\x9a\xcdu\xa9A\xa4\x1f?y\xf0p\x9a\xd7o\xcd\xd0X.\xfa\x15(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xe8\x97\xb7\xb6:\aD\x92\x007\xf0\xe2\x1e\xbf9%\x10\xdb\xd69\xfa6e\xef\xf3\xbf{!H1\xd6+\xde\x7f\xe9\x98\xe4\x1do\xfc\xa3\x9b@z\xe5\xbf\xbce\xdd4d\\\x97\x17\xec\x8c\xc0;\xb9\x17`-\x1d\xc4~\x1f\xbcW\"\xb9\x8e~\xc8|\xeb.\x90\x8f\xe5\xf8\x8fM\x1a\xb3\x12j\xae\xffX\xca\xd3\xa4[]\xfe\xc1\x01\x14\xd7\xcdb\xff\b4`\xcd$\x81R\xe5\xbf\xe1\v\xcf,\xd9&\x1a\xfc\x134\xf40P\xd5J\xec\x15-\f\xf0ls9{\xb1\x8f\xb2\xa5', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r1, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@none}, {@cpuset_v2_mode}]}) 3.716695153s ago: executing program 3: shmctl$IPC_RMID(0x0, 0x0) shmget(0x1, 0x3000, 0x916058965dfb867c, &(0x7f0000ffd000/0x3000)=nil) 3.599265316s ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.378467772s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r3 = dup(r2) write$FUSE_NOTIFY_DELETE(r3, 0x0, 0x0) close(r3) 3.00035465s ago: executing program 3: r0 = memfd_create(&(0x7f0000000100)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8T\xech\x18\xae\xd6;\x18\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)w\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde\x1f\x00]\xd8\xebD\x82S\x17?\xd6As\x02\v6\x1d%\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\xb9\x81\x8b\x05\x00\x00\x00\x00\x00\x11)W\x9c\x82\x00\x00\x00\x00@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!a.\x04\xaeK2RK\xab+\x88<\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7f\x92\x16\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1\xff\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc9\x81\rLJ{\x18\xd1\x91\xf5\x879\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\x04\x00\x00\x00\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\xe2F^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth\xac\x9a~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x86p\x98\x9d\x1a\x8b\x88\xff\x05\x86\x9d\xe5.\xfc\xa2v\xb1\xff\xc6\xbd\xfa\xa5\x96|\xcb\xa5[\xabZ\xbd\a\xa1\x8e\xd0\x8b\xebG\xde\x82\xdb\xe3\x9f\x11\xea\x0e}\xeb\x8cX\xeft$\aW\xe7\xe5cL\xf4\xbd9P\xe0\xab\xb8b\xcd,\x0fd{\x19\x98\xaa\x12\xad\xce\r$3j/\xda\xc1-X\xf1\x82\fC\xe9\x187\xd3\x84[\x92\f#\x00\xba\xd4b\b\xafr\x7f\x02i+)\xb7]\x98x\x13\xe3\xbc\x04\x1es\xa3\xd4\xdf\x0fZL\x94E\x81\xa1z\b\b\xfb\x16\xae\x88\x9a{\xbf\xe4\x1a\x81\x8a\xbf\x18/-M\x12\xe6\xdfvzJR\x83\xd5\x03\xf2\xc1\xce\xaf\xfa\xb8\xa7\v`1\xae\xe7\xab\x98*\xd9U\xfe\x9aE\xe5\x14\x10\xd0\xc8M\xf4\x99\xeb\b\x89\xa5\xe5\xbd\xb7\x92[<\x89\x95Y\b[-P\xbc\x9c\x85E\xcf\xf7\xc3\x86\n\xe7\xa9\xf8L\x89\x86\xbbc\x98$/5\x82\x85\xdad\x8e]\xcc\xff\x855\x9f\xa3\xe6w\x85\x94\x11%n\xf2\n\xe1\xa71\x83\xed\x99q\xc8\xb2\xc1x\xe1U/\x87\xcc\x9d\xfe\xc6\xc2\xcd\xfa\xf2T\x182\v/\xc8\x80u\xd4!(\xe5\xc3\xcf\x12bim\x92f', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000007) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETNOCSUM(r1, 0x5421, 0x20000000) 2.409652387s ago: executing program 4: semget(0x1, 0x4, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000000)=""/4096) semctl$GETZCNT(0x0, 0x3, 0xf, &(0x7f0000001000)=""/209) semget(0x3, 0x0, 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) recvmsg$unix(r0, &(0x7f0000001840)={&(0x7f00000011c0), 0x6e, 0x0, 0x0, &(0x7f0000001800)=[@cred={{0x1c}}], 0x20}, 0x2000) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000001880)=""/67) read$FUSE(0xffffffffffffffff, &(0x7f0000005a80)={0x2020}, 0x2051) semget(0x1, 0x0, 0x2) r1 = semget(0x1, 0x4, 0x0) msgsnd(r1, &(0x7f0000004a40)=ANY=[@ANYBLOB="01"], 0x1008, 0x0) 2.278925464s ago: executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x5450, 0x0) 2.035203027s ago: executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, "f996ff109a04000000008000", 0xfffffff9, 0x10}) 1.973785835s ago: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000050a245d5cde00800451b00280000008d4ac9000002907800000000ffffffff11e090780000000062ea00000000000000002000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) creat(0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x49) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="bad7024a2c05cd5349eb40a77e2b836ec5c18a00b7d661cfa325ef67d582bd0c1edfbbf696634bba467d8a693aa0ed2622f1f1f71c73c50221e6dc0a6be07a6994a3338a7017c33ad3fb0f7efa2d701b4e7f92816943eca4f9dfa6f6735cb25147c554fbdd5756f19a3c9a089140f387609aa20cd882197ae952e9a24d28963f9dd7ad7be16579033518952849a89804d96ff8"]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x3, 0x3000, 0x0, 0x3ff}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000200)) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100) r5 = syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f00000004c0)="eabd17de7ae81cba34f486408d8a2d129365fb94612e89ef69ccc5f97766015a19b4c3a6575cbf2f56195fbfa565d9de7d4ae8f5b6ac546e370893760718bd2f950bc62a3fad7f9488b12290f13aaa17e01cd69a0c6e47770605c5e36be94cf47b6670d4f22a54bf678413841a29b4ee3a3b5747af862ba415f7ecd6121ca55148e4cf98b04a9ed4a8ed88f5c807bdb0f6376505e0bf018cb44b1e80f77c3b413468744f30ecf71e2add898c5a4b9d5fcc354d2de2dadb52cf17664b8db8f3306c2d233f48d048af381915674277a41a3a", &(0x7f0000000840)="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"}}, &(0x7f0000bbdffc)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200002, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r5) 1.868139892s ago: executing program 1: r0 = msgget$private(0x0, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/209}, 0xd9, 0x0, 0x1000) msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000) msgsnd(r0, &(0x7f0000000280)={0x3}, 0x8, 0x0) r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) msgctl$MSG_STAT(0x0, 0xb, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000480)=""/50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) shmctl$IPC_STAT(r1, 0x2, 0x0) msgget(0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) 1.702723368s ago: executing program 4: r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x628c, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1.530549584s ago: executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000200), 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000002080)=0x3a, 0x23b) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x0, 0xff}, 'port0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000340)='memory.swap.events\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20200101}, 0xc, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)) 947.239999ms ago: executing program 1: fanotify_init(0x200, 0x0) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = dup(r0) write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7}, 0x7) syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x5e0, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r3 = socket$qrtr(0x2a, 0x2, 0x0) read(r3, &(0x7f0000000180)=""/52, 0xfffffdef) 861.143597ms ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000280)=ANY=[@ANYBLOB="000000d2"]) 629.277198ms ago: executing program 3: syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed010000000000010902240001000000000904040001030000000921000000000005000905a303"], 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 539.162259ms ago: executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x24ff, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) setuid(0x0) io_uring_enter(r1, 0x5c26, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) r3 = io_uring_setup(0x17c3, &(0x7f00000002c0)) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r4, 0x0) recvmmsg(r4, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) io_setup(0xd32ef621, &(0x7f00000000c0)) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)=@multiplanar_fd={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "58973092"}, 0x0, 0x4, {0x0}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000000080), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. 2024/06/13 10:18:57 fuzzer started 2024/06/13 10:18:58 dialing manager at 10.128.0.169:30026 [ 174.719863][ T5041] cgroup: Unknown subsys name 'net' [ 174.977969][ T5041] cgroup: Unknown subsys name 'rlimit' [ 224.179142][ T1220] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.186104][ T1220] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/13 10:19:51 starting 5 executor processes [ 226.707625][ T5044] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 229.000232][ T5070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.016203][ T5070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.029153][ T5070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.060827][ T5070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.073854][ T5070] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.085789][ T5070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.140571][ T4429] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.171302][ T4429] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.206798][ T4429] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.272010][ T4429] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.291306][ T4429] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 229.309449][ T4429] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.414923][ T4429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.425235][ T4429] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.436228][ T4429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.450048][ T4429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.463159][ T4429] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 229.472718][ T4429] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.571688][ T4429] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.645655][ T4429] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.660248][ T4429] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.675219][ T4429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.687327][ T4429] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.696749][ T4429] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.784261][ T5070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.817864][ T5070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.831475][ T5070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.859105][ T5070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.892053][ T5070] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.991955][ T5070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.775438][ T5069] chnl_net:caif_netlink_parms(): no params data found [ 230.941270][ T5079] chnl_net:caif_netlink_parms(): no params data found [ 231.205860][ T5070] Bluetooth: hci0: command tx timeout [ 231.302884][ T5073] chnl_net:caif_netlink_parms(): no params data found [ 231.523959][ T5070] Bluetooth: hci1: command tx timeout [ 231.603605][ T5070] Bluetooth: hci2: command tx timeout [ 231.710814][ T5077] chnl_net:caif_netlink_parms(): no params data found [ 231.772229][ T5070] Bluetooth: hci3: command tx timeout [ 232.102882][ T5070] Bluetooth: hci4: command tx timeout [ 232.341593][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.351456][ T5079] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.359417][ T5079] bridge_slave_0: entered allmulticast mode [ 232.369052][ T5079] bridge_slave_0: entered promiscuous mode [ 232.459154][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.466869][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.474801][ T5069] bridge_slave_0: entered allmulticast mode [ 232.483632][ T5069] bridge_slave_0: entered promiscuous mode [ 232.502255][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.510250][ T5079] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.518212][ T5079] bridge_slave_1: entered allmulticast mode [ 232.527590][ T5079] bridge_slave_1: entered promiscuous mode [ 232.539739][ T5073] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.547806][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.556447][ T5073] bridge_slave_0: entered allmulticast mode [ 232.566451][ T5073] bridge_slave_0: entered promiscuous mode [ 232.580082][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 232.643850][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.651710][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.659748][ T5069] bridge_slave_1: entered allmulticast mode [ 232.669266][ T5069] bridge_slave_1: entered promiscuous mode [ 232.682807][ T5073] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.691080][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.698936][ T5073] bridge_slave_1: entered allmulticast mode [ 232.708494][ T5073] bridge_slave_1: entered promiscuous mode [ 232.924756][ T5079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.027377][ T5069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.052957][ T5069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.077420][ T5079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.099213][ T5073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.206320][ T5073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.293867][ T5070] Bluetooth: hci0: command tx timeout [ 233.456413][ T5079] team0: Port device team_slave_0 added [ 233.465081][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.472826][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.480946][ T5077] bridge_slave_0: entered allmulticast mode [ 233.490351][ T5077] bridge_slave_0: entered promiscuous mode [ 233.511144][ T5069] team0: Port device team_slave_0 added [ 233.521607][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.529525][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.537449][ T5077] bridge_slave_1: entered allmulticast mode [ 233.546979][ T5077] bridge_slave_1: entered promiscuous mode [ 233.594041][ T5073] team0: Port device team_slave_0 added [ 233.622032][ T5079] team0: Port device team_slave_1 added [ 233.635121][ T5070] Bluetooth: hci1: command tx timeout [ 233.683676][ T5070] Bluetooth: hci2: command tx timeout [ 233.729719][ T5069] team0: Port device team_slave_1 added [ 233.744483][ T5073] team0: Port device team_slave_1 added [ 233.843691][ T5070] Bluetooth: hci3: command tx timeout [ 233.981402][ T5079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.988960][ T5079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.017124][ T5079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.072444][ T5069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.079866][ T5069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.106406][ T5069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.168289][ T5079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.176777][ T5079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.204853][ T5079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.218756][ T5070] Bluetooth: hci4: command tx timeout [ 234.229615][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.260017][ T5069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.267314][ T5069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.293726][ T5069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.307819][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.315170][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.341863][ T5073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.398119][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.437720][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.444981][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.471261][ T5073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.616502][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.624399][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.632277][ T5082] bridge_slave_0: entered allmulticast mode [ 234.641836][ T5082] bridge_slave_0: entered promiscuous mode [ 234.777674][ T5079] hsr_slave_0: entered promiscuous mode [ 234.787405][ T5079] hsr_slave_1: entered promiscuous mode [ 234.807846][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.815837][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.824012][ T5082] bridge_slave_1: entered allmulticast mode [ 234.833270][ T5082] bridge_slave_1: entered promiscuous mode [ 234.884387][ T5077] team0: Port device team_slave_0 added [ 234.909187][ T5069] hsr_slave_0: entered promiscuous mode [ 234.920761][ T5069] hsr_slave_1: entered promiscuous mode [ 234.930891][ T5069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.938853][ T5069] Cannot create hsr debugfs directory [ 234.998317][ T5077] team0: Port device team_slave_1 added [ 235.192151][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.321761][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.347703][ T5073] hsr_slave_0: entered promiscuous mode [ 235.358708][ T5073] hsr_slave_1: entered promiscuous mode [ 235.368161][ T5073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.373709][ T5070] Bluetooth: hci0: command tx timeout [ 235.376064][ T5073] Cannot create hsr debugfs directory [ 235.452948][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.461751][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.489509][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.637606][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.645324][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.671733][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.690310][ T5070] Bluetooth: hci1: command tx timeout [ 235.722316][ T5082] team0: Port device team_slave_0 added [ 235.766321][ T5070] Bluetooth: hci2: command tx timeout [ 235.880449][ T5082] team0: Port device team_slave_1 added [ 235.923839][ T5070] Bluetooth: hci3: command tx timeout [ 235.951567][ T5077] hsr_slave_0: entered promiscuous mode [ 235.962876][ T5077] hsr_slave_1: entered promiscuous mode [ 235.972425][ T5077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.980367][ T5077] Cannot create hsr debugfs directory [ 236.120279][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.128185][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.154775][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.238613][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.245980][ T5070] Bluetooth: hci4: command tx timeout [ 236.251575][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.278035][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.839605][ T5082] hsr_slave_0: entered promiscuous mode [ 236.849168][ T5082] hsr_slave_1: entered promiscuous mode [ 236.859315][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.869242][ T5082] Cannot create hsr debugfs directory [ 237.181572][ T5069] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 237.219031][ T5069] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.350034][ T5069] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.371391][ T5069] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 237.461673][ T5070] Bluetooth: hci0: command tx timeout [ 237.599727][ T5079] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 237.701128][ T5073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 237.743315][ T5073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.765871][ T5079] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 237.775337][ T5070] Bluetooth: hci1: command tx timeout [ 237.798717][ T5079] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 237.837524][ T5079] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 237.846986][ T5070] Bluetooth: hci2: command tx timeout [ 237.869206][ T5073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.911614][ T5073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.032820][ T5070] Bluetooth: hci3: command tx timeout [ 238.318597][ T5077] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.327870][ T5070] Bluetooth: hci4: command tx timeout [ 238.351836][ T5077] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.417286][ T5077] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.451195][ T5077] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.824149][ T5082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.914628][ T5082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.990671][ T5082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.103325][ T5082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.425970][ T5069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.605747][ T5073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.635906][ T5079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.675525][ T5069] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.897783][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.905724][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.965350][ T5079] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.031532][ T5073] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.054917][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.062682][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.193600][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.201310][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.241307][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.330818][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.338626][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.364331][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.372055][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.600281][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.608067][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.760909][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.024993][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.032705][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.049574][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.057439][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.146080][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.166419][ T5079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.214970][ T5073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.512266][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.692240][ T5077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.703094][ T5077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.747721][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.755585][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.025937][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.033795][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.414192][ T5069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.620509][ T5073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.676881][ T5079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.110175][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.278752][ T5073] veth0_vlan: entered promiscuous mode [ 244.497979][ T5073] veth1_vlan: entered promiscuous mode [ 244.561919][ T5079] veth0_vlan: entered promiscuous mode [ 244.746174][ T5077] veth0_vlan: entered promiscuous mode [ 244.796578][ T5079] veth1_vlan: entered promiscuous mode [ 244.881606][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.927359][ T5077] veth1_vlan: entered promiscuous mode [ 244.940106][ T5073] veth0_macvtap: entered promiscuous mode [ 245.060722][ T5073] veth1_macvtap: entered promiscuous mode [ 245.286316][ T5079] veth0_macvtap: entered promiscuous mode [ 245.381086][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.412304][ T5077] veth0_macvtap: entered promiscuous mode [ 245.467310][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.538138][ T5079] veth1_macvtap: entered promiscuous mode [ 245.585766][ T5077] veth1_macvtap: entered promiscuous mode [ 245.620563][ T5073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.629893][ T5073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.639303][ T5073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.648426][ T5073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.801445][ T5082] veth0_vlan: entered promiscuous mode [ 245.814794][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.825602][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.841400][ T5079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.915517][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.926437][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.936663][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.947398][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.962920][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.081436][ T5082] veth1_vlan: entered promiscuous mode [ 246.120766][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.131686][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.147156][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.164470][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.175871][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.187755][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.198699][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.214693][ T5079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.396062][ T5079] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.405405][ T5079] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.414597][ T5079] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.423726][ T5079] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.482938][ T5077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.495154][ T5077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.509841][ T5077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.521270][ T5077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.771442][ T5082] veth0_macvtap: entered promiscuous mode [ 246.923271][ T5082] veth1_macvtap: entered promiscuous mode [ 246.941269][ T5069] veth0_vlan: entered promiscuous mode [ 247.084922][ T5069] veth1_vlan: entered promiscuous mode [ 247.222433][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.233622][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.243905][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.254660][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.264866][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.277080][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.292630][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.539002][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.551166][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.561619][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.572604][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.582729][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.593600][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.610395][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.735852][ T5069] veth0_macvtap: entered promiscuous mode [ 247.798107][ T5082] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.807333][ T5082] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.816621][ T5082] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.825834][ T5082] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.888502][ T5069] veth1_macvtap: entered promiscuous mode [ 248.185135][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.196136][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.206469][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.217305][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.227513][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.238913][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.249070][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.259894][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.275634][ T5069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.388999][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.402009][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.414296][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.425776][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.435942][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.446818][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.457173][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.467992][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.487417][ T5069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.612751][ T5069] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.622055][ T5069] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.631309][ T5069] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.640443][ T5069] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.274833][ T5129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.282943][ T5129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.559207][ T5129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.567744][ T5129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.764954][ T3896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.773163][ T3896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.976769][ T2465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.985073][ T2465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.074108][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.082187][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.306413][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.314812][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.278606][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.288482][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.663787][ T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.671871][ T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.219137][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.229800][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.428489][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.436761][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.640219][ T5263] loop0: detected capacity change from 0 to 512 [ 256.731387][ T5263] EXT4-fs: Ignoring removed bh option [ 256.789824][ T5263] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 256.955746][ T5263] EXT4-fs (loop0): 1 truncate cleaned up [ 256.961728][ T5263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.336265][ T5082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.540510][ T29] audit: type=1326 audit(1718274022.631:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5267 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742a579 code=0x0 [ 259.773183][ T5129] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 260.195858][ T5129] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 260.205488][ T5129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.286361][ T5129] usb 1-1: config 0 descriptor?? [ 260.828434][ T29] audit: type=1326 audit(1718274025.911:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5310 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7464579 code=0x0 [ 260.904886][ T5129] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 260.913977][ T5129] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 260.961059][ T5129] [drm:udl_init] *ERROR* Selecting channel failed [ 261.032788][ T5129] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 261.040800][ T5129] [drm] Initialized udl on minor 2 [ 261.082665][ T5129] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 261.100344][ T5129] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 261.135604][ T5127] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 261.163206][ T5129] usb 1-1: USB disconnect, device number 2 [ 261.177588][ T5127] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 261.192131][ T5127] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 262.735770][ T5339] fuse: Unknown parameter 'ΊΧJ' [ 262.750033][ T5338] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.830543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 262.874631][ T29] audit: type=1804 audit(1718274027.891:4): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir193611002/syzkaller.QrSmGR/3/file0" dev="sda1" ino=1964 res=1 errno=0 [ 262.936198][ T5129] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 263.344658][ T5129] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 263.354455][ T5129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.410410][ T5129] usb 5-1: config 0 descriptor?? [ 263.492152][ T5129] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 263.765495][ T5348] ===================================================== [ 263.772791][ T5348] BUG: KMSAN: uninit-value in io_req_cqe_overflow+0x193/0x1c0 [ 263.781169][ T5348] io_req_cqe_overflow+0x193/0x1c0 [ 263.786827][ T5348] __io_submit_flush_completions+0x7eb/0x1be0 [ 263.793160][ T5348] ctx_flush_and_put+0x16c/0x360 [ 263.798468][ T5348] io_handle_tw_list+0x58b/0x5c0 [ 263.803791][ T5348] tctx_task_work_run+0xf8/0x3d0 [ 263.808973][ T5348] tctx_task_work+0x6d/0xc0 [ 263.813884][ T5348] task_work_run+0x268/0x310 [ 263.818709][ T5348] get_signal+0x143/0x2d00 [ 263.823508][ T5348] arch_do_signal_or_restart+0x53/0xcb0 [ 263.829305][ T5348] syscall_exit_to_user_mode+0x5d/0x160 [ 263.835379][ T5348] __do_fast_syscall_32+0xc4/0x120 [ 263.840738][ T5348] do_fast_syscall_32+0x38/0x80 [ 263.847189][ T5348] do_SYSENTER_32+0x1f/0x30 [ 263.857679][ T5348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.865989][ T5348] [ 263.868425][ T5348] Uninit was stored to memory at: [ 263.873991][ T5348] io_recv_finish+0xf10/0x1560 [ 263.878955][ T5348] io_recv+0x12ec/0x1ea0 [ 263.883367][ T5348] io_issue_sqe+0x429/0x22c0 [ 263.888402][ T5348] io_poll_issue+0x32/0x40 [ 263.892986][ T5348] io_poll_task_func+0x5f9/0x14d0 [ 263.898336][ T5348] io_handle_tw_list+0x23a/0x5c0 [ 263.903640][ T5348] tctx_task_work_run+0xf8/0x3d0 [ 263.908810][ T5348] tctx_task_work+0x6d/0xc0 [ 263.913676][ T5348] task_work_run+0x268/0x310 [ 263.918491][ T5348] get_signal+0x143/0x2d00 [ 263.923105][ T5348] arch_do_signal_or_restart+0x53/0xcb0 [ 263.929373][ T5348] syscall_exit_to_user_mode+0x5d/0x160 [ 263.935354][ T5348] __do_fast_syscall_32+0xc4/0x120 [ 263.940690][ T5348] do_fast_syscall_32+0x38/0x80 [ 263.945991][ T5348] do_SYSENTER_32+0x1f/0x30 [ 263.955806][ T5348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.962408][ T5348] [ 263.966446][ T5348] Uninit was created at: [ 263.970925][ T5348] __kmalloc+0x6e4/0x1060 [ 263.977584][ T5348] io_alloc_async_data+0xc0/0x220 [ 263.982854][ T5348] io_recvmsg_prep+0xbe8/0x1a20 [ 263.988060][ T5348] io_submit_sqes+0x1135/0x2f10 [ 263.993076][ T5348] __se_sys_io_uring_enter+0x40f/0x3c80 [ 263.999210][ T5348] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 264.005233][ T5348] ia32_sys_call+0x2c0/0x40a0 [ 264.010134][ T5348] __do_fast_syscall_32+0xb4/0x120 [ 264.015604][ T5348] do_fast_syscall_32+0x38/0x80 [ 264.020692][ T5348] do_SYSENTER_32+0x1f/0x30 [ 264.025656][ T5348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.032257][ T5348] [ 264.034853][ T5348] CPU: 1 PID: 5348 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 264.045192][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 264.060993][ T5348] ===================================================== [ 264.069636][ T5348] Disabling lock debugging due to kernel taint [ 264.076022][ T5348] Kernel panic - not syncing: kmsan.panic set ... [ 264.082555][ T5348] CPU: 1 PID: 5348 Comm: syz-executor.0 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 264.094202][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 264.104429][ T5348] Call Trace: [ 264.107831][ T5348] [ 264.110878][ T5348] dump_stack_lvl+0x216/0x2d0 2024/06/13 10:20:28 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 264.115781][ T5348] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 264.121805][ T5348] dump_stack+0x1e/0x30 [ 264.126197][ T5348] panic+0x4e2/0xcd0 [ 264.130328][ T5348] ? kmsan_get_metadata+0xf1/0x1d0 [ 264.135732][ T5348] kmsan_report+0x2d5/0x2e0 [ 264.140457][ T5348] ? __msan_warning+0x95/0x120 [ 264.145417][ T5348] ? io_req_cqe_overflow+0x193/0x1c0 [ 264.150948][ T5348] ? __io_submit_flush_completions+0x7eb/0x1be0 [ 264.157443][ T5348] ? ctx_flush_and_put+0x16c/0x360 [ 264.162791][ T5348] ? io_handle_tw_list+0x58b/0x5c0 [ 264.168136][ T5348] ? tctx_task_work_run+0xf8/0x3d0 [ 264.173523][ T5348] ? tctx_task_work+0x6d/0xc0 [ 264.178430][ T5348] ? task_work_run+0x268/0x310 [ 264.183458][ T5348] ? get_signal+0x143/0x2d00 [ 264.188262][ T5348] ? arch_do_signal_or_restart+0x53/0xcb0 [ 264.194249][ T5348] ? syscall_exit_to_user_mode+0x5d/0x160 [ 264.200251][ T5348] ? __do_fast_syscall_32+0xc4/0x120 [ 264.205793][ T5348] ? do_fast_syscall_32+0x38/0x80 [ 264.211061][ T5348] ? do_SYSENTER_32+0x1f/0x30 [ 264.215958][ T5348] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.222722][ T5348] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 264.228763][ T5348] ? io_recv+0x19e8/0x1ea0 [ 264.233389][ T5348] ? kmsan_get_metadata+0x146/0x1d0 [ 264.238785][ T5348] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 264.245305][ T5348] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 264.251682][ T5348] ? kmsan_get_metadata+0x146/0x1d0 [ 264.257092][ T5348] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 264.263132][ T5348] __msan_warning+0x95/0x120 [ 264.267926][ T5348] io_req_cqe_overflow+0x193/0x1c0 [ 264.273317][ T5348] __io_submit_flush_completions+0x7eb/0x1be0 [ 264.279695][ T5348] ctx_flush_and_put+0x16c/0x360 [ 264.284896][ T5348] io_handle_tw_list+0x58b/0x5c0 [ 264.290098][ T5348] tctx_task_work_run+0xf8/0x3d0 [ 264.295295][ T5348] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 264.301329][ T5348] ? __pfx_tctx_task_work+0x10/0x10 [ 264.306925][ T5348] tctx_task_work+0x6d/0xc0 [ 264.311665][ T5348] task_work_run+0x268/0x310 [ 264.316523][ T5348] get_signal+0x143/0x2d00 [ 264.321148][ T5348] ? filter_irq_stacks+0x164/0x1a0 [ 264.326524][ T5348] ? stack_depot_save_flags+0x2c/0x6e0 [ 264.332230][ T5348] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 264.338744][ T5348] ? arch_do_signal_or_restart+0x43/0xcb0 [ 264.344740][ T5348] ? syscall_exit_to_user_mode+0x5d/0x160 [ 264.350711][ T5348] arch_do_signal_or_restart+0x53/0xcb0 [ 264.356513][ T5348] ? kmsan_get_metadata+0x146/0x1d0 [ 264.361944][ T5348] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 264.367980][ T5348] ? schedule+0x18f/0x380 [ 264.372528][ T5348] syscall_exit_to_user_mode+0x5d/0x160 [ 264.378338][ T5348] __do_fast_syscall_32+0xc4/0x120 [ 264.383707][ T5348] ? irqentry_exit+0x16/0x60 [ 264.388544][ T5348] do_fast_syscall_32+0x38/0x80 [ 264.393638][ T5348] do_SYSENTER_32+0x1f/0x30 [ 264.398399][ T5348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.404984][ T5348] RIP: 0023:0xf7425579 [ 264.409210][ T5348] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 264.429035][ T5348] RSP: 002b:00000000f5eae66c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 264.437673][ T5348] RAX: 0000000000000001 RBX: 00000000f744afac RCX: 0000000000000081 [ 264.445801][ T5348] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.453934][ T5348] RBP: 00000000f72d2419 R08: 0000000000000000 R09: 0000000000000000 [ 264.462054][ T5348] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 264.470181][ T5348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.478323][ T5348] [ 264.481783][ T5348] Kernel Offset: disabled [ 264.486211][ T5348] Rebooting in 86400 seconds..