last executing test programs: 11m51.528690852s ago: executing program 1 (id=21): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x600540, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x30, 0x4, 0x53, 0xfffff03d}]}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x6, 0x1, 0x4, 0x0, 0x3}) inotify_init() ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) ioprio_set$pid(0x3, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000850000000500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 11m44.133356829s ago: executing program 1 (id=34): r0 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x6) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r6, 0x0, 0x0, 0x40000140, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r5, 0x7ac, 0x0) fallocate(r0, 0x0, 0x0, 0x200401) fallocate(r0, 0x0, 0x0, 0x200401) 11m42.209199437s ago: executing program 1 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m39.757616314s ago: executing program 1 (id=45): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 11m35.444086562s ago: executing program 1 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) clock_gettime(0x8, &(0x7f0000000180)) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e64, 0x2, @mcast1, 0xff7bfffd}}, {{0xa, 0x4e20, 0x4a3, @remote, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001"], 0x110) 11m31.490014188s ago: executing program 1 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 11m17.109837583s ago: executing program 4 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m15.039504337s ago: executing program 32 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 11m14.280571635s ago: executing program 4 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x40000000015, 0x5, 0x0) 11m6.574061967s ago: executing program 4 (id=86): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = syz_open_dev$ndb(0x0, 0x0, 0x4300) readahead(r0, 0x6, 0x0) 11m5.951943587s ago: executing program 4 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m2.319982387s ago: executing program 4 (id=93): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd06) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5], 0x22c}}, 0x0) 10m53.75770385s ago: executing program 4 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 10m38.230656237s ago: executing program 33 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 10m20.755660328s ago: executing program 34 (id=118): r0 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x6) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r5, 0x0, 0x0, 0x40000140, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x200401) 9m0.001298084s ago: executing program 35 (id=187): listen(0xffffffffffffffff, 0xb5d6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) 6m54.391561952s ago: executing program 6 (id=364): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) getpid() prlimit64(0x0, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004102, 0x0) r6 = syz_io_uring_setup(0x43, &(0x7f0000000380)={0x0, 0xb5d6, 0x1, 0x41, 0x395, 0x0, r5}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) close_range(r3, 0xffffffffffffffff, 0x0) 6m52.012139127s ago: executing program 6 (id=367): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) memfd_create(0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000040), 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 6m50.793486822s ago: executing program 6 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0002}]}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e1e, @empty}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) setrlimit(0xc, &(0x7f00000000c0)={0x101, 0xfff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000040)={0x0, r8, r7}) socket$nl_netfilter(0x10, 0x3, 0xc) 6m46.802135831s ago: executing program 6 (id=378): r0 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x6) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x40000140, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x200401) fallocate(r0, 0x0, 0x0, 0x200401) r5 = socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(khazad)\x00'}, 0x58) 6m45.254720782s ago: executing program 6 (id=380): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000040), 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 6m43.743655232s ago: executing program 6 (id=386): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x600540, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x30, 0x4, 0x53, 0xfffff03d}]}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x6, 0x1, 0x4, 0x0, 0x3}) inotify_init() ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000850000000500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 6m27.930722221s ago: executing program 36 (id=386): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x600540, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x30, 0x4, 0x53, 0xfffff03d}]}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x6, 0x1, 0x4, 0x0, 0x3}) inotify_init() ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000850000000500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 5m11.815454921s ago: executing program 3 (id=558): prctl$PR_SET_MM(0x35, 0x6, &(0x7f0000f77000/0x4000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) close(r2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 5m10.119721014s ago: executing program 3 (id=559): pipe2(&(0x7f0000000040), 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x9d}}, {{@in6=@mcast2, 0x0, 0x3c}, 0xa, @in=@empty, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x24000040}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 5m8.67965779s ago: executing program 3 (id=561): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0xa, 0x3}) 5m8.300586311s ago: executing program 3 (id=563): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff06"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c0", 0x1}], 0x1) 5m7.89559503s ago: executing program 3 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) bind$llc(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, 0x0, 0x4006804) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) symlink(0x0, 0x0) 5m6.210388264s ago: executing program 3 (id=566): syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x203, {{0xa, 0x4c23, 0x7fff, @private1, 0x8000}}, {{0xa, 0x0, 0x5, @empty, 0x1}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b07, &(0x7f0000000080)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) r4 = open$dir(0x0, 0x18000, 0x71) utimensat(r4, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={{0x0, 0x2710}, {0x77359400}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0xeae96d90c36de6a2, 0x5f, 0x30, 0x0, 0x5f]}}, &(0x7f00000004c0)=""/184, 0x2b, 0xb8, 0x1, 0x3}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff419b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) 4m50.897473414s ago: executing program 37 (id=566): syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x203, {{0xa, 0x4c23, 0x7fff, @private1, 0x8000}}, {{0xa, 0x0, 0x5, @empty, 0x1}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b07, &(0x7f0000000080)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) r4 = open$dir(0x0, 0x18000, 0x71) utimensat(r4, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={{0x0, 0x2710}, {0x77359400}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0xeae96d90c36de6a2, 0x5f, 0x30, 0x0, 0x5f]}}, &(0x7f00000004c0)=""/184, 0x2b, 0xb8, 0x1, 0x3}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff419b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) 1m38.898415071s ago: executing program 7 (id=910): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xb8}, 0x1, 0x1000000}, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) 1m30.301867575s ago: executing program 7 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @loopback, @private}, "000088beffff0000"}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) 1m28.625575868s ago: executing program 7 (id=922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x28, r4, 0x11, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 1m25.721084299s ago: executing program 2 (id=927): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) memfd_create(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000040), 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 1m25.379173939s ago: executing program 7 (id=928): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m25.214545412s ago: executing program 2 (id=929): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x55, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x20, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) 1m22.999198699s ago: executing program 2 (id=932): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x203, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r1) open$dir(&(0x7f0000000080)='./file0\x00', 0x10000, 0x100) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900"/15, @ANYRES32, @ANYBLOB="0bb1000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040200020000000095000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) semop(0x0, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 1m21.149207611s ago: executing program 2 (id=933): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0x2, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 1m21.145613022s ago: executing program 7 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) bind$llc(r5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, 0x0, 0x4006804) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) symlink(0x0, 0x0) 1m20.347773066s ago: executing program 2 (id=936): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x3000) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000100)={{0x2, 0xfffffffc}, 0x100, './file0\x00'}) socket$inet(0x2, 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendto$packet(r2, &(0x7f0000000540)="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", 0x715, 0x808, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_emit_ethernet(0x85, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4f, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x7, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac1"}]}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x9, &(0x7f00000003c0)=0x246, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x80000005, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x5, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x4, 0xfffffff3, 0x129432e6, 0x40cb, 0xf9, 0xe, 0x82c0, 0x3, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb97, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xb, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x5, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93692, 0x42, 0x26fb], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x800, 0x9, 0xa2, 0x8003, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x4, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x1, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x8, 0x6, 0xca, 0x1ff, 0x2, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x101, 0xb9, 0xce3, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10004, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x149, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfdfff000, 0x10010000, 0x0, 0x7e, 0x1009, 0x9602, 0x40007, 0xaf, 0x5, 0x2, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x221, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m16.011278838s ago: executing program 7 (id=938): unshare(0x68040200) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x2}, 0x0, 0x0}) 1m14.162613141s ago: executing program 2 (id=944): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x207c, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100050000000000040002000000000010000600000000002000020000000040ee25c1f6794f56ae7dfe81eb4d97798cb8"], 0x24, 0x3) 1m0.836375315s ago: executing program 38 (id=938): unshare(0x68040200) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x2}, 0x0, 0x0}) 58.353715117s ago: executing program 39 (id=944): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x207c, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf408006a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100050000000000040002000000000010000600000000002000020000000040ee25c1f6794f56ae7dfe81eb4d97798cb8"], 0x24, 0x3) 17.1395378s ago: executing program 9 (id=1007): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) memfd_create(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000040), 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 16.982125631s ago: executing program 9 (id=1008): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x100000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0xfffffffffffffe98) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read(0xffffffffffffffff, &(0x7f0000000bc0)=""/4096, 0x1000) 15.835333054s ago: executing program 9 (id=1010): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) bind$llc(r5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, 0x0, 0x4006804) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) symlink(0x0, 0x0) 10.861072782s ago: executing program 5 (id=1017): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x330, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00', {}, {}, 0x0, 0x3}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000400001a000000180001801400020064756d6d793000000000000000000000341d4ef0f970136361e66b3e99feefe39eeaea8e795923af73b237924445e18f71d2fd0f2b7392f0921de3cb7bed17d73a2e8bab63caf970104249f33acd4a"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x20000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x65010102, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e20], [0x4e21, 0x4e22]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xc405, 0x10100, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETVESABLANK(r8, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000040)) 9.282742369s ago: executing program 0 (id=1021): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x10, 0x2, 0xb, &(0x7f0000000000)={0xffffffffffffffff}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4060}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r5, 0x0) close_range(r4, 0xffffffffffffffff, 0x3f00000000000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) socket$inet6_tcp(0xa, 0x1, 0x0) 8.937934083s ago: executing program 5 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800c0102}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0890}, 0x40) 8.882482751s ago: executing program 0 (id=1024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008844}, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.479468536s ago: executing program 5 (id=1025): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x10, 0x2, 0xb, &(0x7f0000000000)={0xffffffffffffffff}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4060}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) socket$inet6_tcp(0xa, 0x1, 0x0) 6.697059136s ago: executing program 9 (id=1027): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10, 0x0, 0x24e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x8, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.603726715s ago: executing program 5 (id=1028): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x2, 0x80805, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x91, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000800000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x20088004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x83, &(0x7f0000000140)={r10}, 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r11], 0x1, r3, r4, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 4.999458787s ago: executing program 0 (id=1030): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4}}}}}]}}]}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) 4.637537358s ago: executing program 8 (id=1031): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 4.351480917s ago: executing program 8 (id=1032): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 4.334467204s ago: executing program 9 (id=1033): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x330, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00', {}, {}, 0x0, 0x3}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000400001a000000180001801400020064756d6d793000000000000000000000341d4ef0f970136361e66b3e99feefe39eeaea8e795923af73b237924445e18f71d2fd0f2b7392f0921de3cb7bed17d73a2e8bab63caf970104249f33acd4a"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x20000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x65010102, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e20], [0x4e21, 0x4e22]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xc405, 0x10100, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETVESABLANK(r8, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000040)) 3.993258282s ago: executing program 8 (id=1034): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x10, 0x2, 0xb, &(0x7f0000000000)={0xffffffffffffffff}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4060}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r5, 0x0) close_range(r4, 0xffffffffffffffff, 0x3f00000000000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) socket$inet6_tcp(0xa, 0x1, 0x0) 3.255600658s ago: executing program 8 (id=1035): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 3.09975613s ago: executing program 8 (id=1036): creat(0x0, 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2b, 0x801, 0x0) splice(r4, 0x0, r3, 0x0, 0x8ec0, 0x0) 2.069779858s ago: executing program 8 (id=1037): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) bind$llc(r5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, 0x0, 0x4006804) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) symlink(0x0, 0x0) 1.998318604s ago: executing program 0 (id=1038): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x10, 0x2, 0xb, &(0x7f0000000000)={0xffffffffffffffff}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4060}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) socket$inet6_tcp(0xa, 0x1, 0x0) 1.694773858s ago: executing program 5 (id=1039): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) fcntl$setpipe(r0, 0x407, 0x4) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffc000/0x1000)=nil) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036000000"], 0x5b0}, 0x20008001) lstat(0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="ef38df273fc935b005d380e9f6696d255b9514052a1b756b91083e499f7bb421796c44b950615f6f7d41", 0x2a}, {&(0x7f0000000600)="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", 0xb5f}, {0x0}], 0x3}, 0x20008004) 1.460897589s ago: executing program 9 (id=1040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008844}, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 382.45544ms ago: executing program 5 (id=1041): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) memfd_create(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000040), 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 374.908413ms ago: executing program 0 (id=1042): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) 0s ago: executing program 0 (id=1043): open(0x0, 0x4008040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10, 0x0, 0x24e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x8, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 967295 subj=unconfined pid=7996 comm="syz.8.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 439.426644][ T30] audit: type=1326 audit(1771875195.838:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.8.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 439.563779][ T30] audit: type=1326 audit(1771875195.838:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.8.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 440.747870][ T30] audit: type=1326 audit(1771875195.848:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.8.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 441.257417][ T30] audit: type=1326 audit(1771875195.848:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.8.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 442.297146][ T30] audit: type=1326 audit(1771875195.848:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.8.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 442.424182][ T30] audit: type=1326 audit(1771875195.848:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.8.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 442.546375][ T30] audit: type=1326 audit(1771875195.848:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.8.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 443.147854][ T30] audit: type=1326 audit(1771875195.848:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.8.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 443.911279][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.918268][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.600498][ T8052] can0: slcan on ttyS3. [ 444.843904][ T8055] capability: warning: `syz.2.400' uses deprecated v2 capabilities in a way that may be insecure [ 445.378741][ T8052] can0 (unregistered): slcan off ttyS3. [ 445.639219][ T8056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.899951][ T8062] kAFS: unable to lookup cell '(,c¾Ì' [ 452.351457][ T8107] netlink: 'syz.3.409': attribute type 4 has an invalid length. [ 452.359350][ T8107] netlink: 152 bytes leftover after parsing attributes in process `syz.3.409'. [ 452.408580][ T8107] .`: renamed from bond0 (while UP) [ 453.698491][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 453.698546][ T30] audit: type=1326 audit(1771875211.138:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 454.598776][ T30] audit: type=1326 audit(1771875211.138:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 454.930904][ T30] audit: type=1326 audit(1771875211.138:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 455.052159][ T30] audit: type=1326 audit(1771875211.138:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 455.150892][ T30] audit: type=1326 audit(1771875211.148:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 455.277078][ T5148] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 455.282164][ T30] audit: type=1326 audit(1771875211.148:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 455.369964][ T30] audit: type=1326 audit(1771875211.148:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 455.489842][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 455.510548][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 455.510771][ T5148] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 455.527469][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 455.538370][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.545084][ T30] audit: type=1326 audit(1771875211.148:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 455.577273][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 455.578106][ T5148] usb 4-1: config 0 descriptor?? [ 455.627185][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 455.728580][ T30] audit: type=1326 audit(1771875211.148:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 455.753368][ T5148] cp210x 4-1:0.0: cp210x converter detected [ 455.882428][ T8139] overlayfs: statfs failed on './file0' [ 455.882933][ T30] audit: type=1326 audit(1771875211.148:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 456.257998][ T5148] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 457.056381][ T8154] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 457.517182][ T5148] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 457.544075][ T8149] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 457.569239][ T5148] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 457.607772][ T5148] usb 4-1: cp210x converter now attached to ttyUSB0 [ 457.634052][ T8149] bond1: (slave lo): Enslaving as an active interface with an up link [ 457.665905][ T5148] usb 4-1: USB disconnect, device number 8 [ 457.679810][ T8149] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 457.716344][ T5148] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 457.727106][ T5830] Bluetooth: hci3: command tx timeout [ 457.769007][ T5148] cp210x 4-1:0.0: device disconnected [ 459.827063][ T5830] Bluetooth: hci3: command tx timeout [ 460.298328][ T8187] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.422'. [ 463.247581][ T5830] Bluetooth: hci3: command tx timeout [ 465.862555][ T5830] Bluetooth: hci3: command tx timeout [ 465.944957][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 465.945011][ T30] audit: type=1326 audit(1771875223.268:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.9.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77cb55cece code=0x7ffc0000 [ 466.096743][ T1159] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.184886][ T30] audit: type=1326 audit(1771875223.268:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.9.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77cb55cece code=0x7ffc0000 [ 466.473972][ T5830] Bluetooth: hci7: command 0x0406 tx timeout [ 466.837239][ T30] audit: type=1326 audit(1771875223.268:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.9.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77cb55cece code=0x7ffc0000 [ 466.955954][ T30] audit: type=1326 audit(1771875223.268:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.9.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77cb55cece code=0x7ffc0000 [ 467.024642][ T30] audit: type=1326 audit(1771875223.268:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.9.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77cb55cece code=0x7ffc0000 [ 467.112347][ T30] audit: type=1326 audit(1771875223.268:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.9.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 467.191886][ T30] audit: type=1326 audit(1771875223.268:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.9.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77cb55cece code=0x7ffc0000 [ 467.202296][ T1159] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.243174][ T30] audit: type=1326 audit(1771875223.268:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.9.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77cb55cece code=0x7ffc0000 [ 467.365135][ T30] audit: type=1326 audit(1771875223.268:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.9.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 467.869356][ T8240] netlink: 'syz.7.436': attribute type 13 has an invalid length. [ 467.877381][ T8240] netlink: 'syz.7.436': attribute type 17 has an invalid length. [ 467.949467][ T30] audit: type=1326 audit(1771875223.278:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.9.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77cb55cece code=0x7ffc0000 [ 468.370256][ T8247] netlink: 24 bytes leftover after parsing attributes in process `syz.9.437'. [ 468.943677][ T8240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.977715][ T8232] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 468.982578][ T8234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.182840][ T1159] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.608581][ T8269] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.439'. [ 472.954812][ T1159] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.421205][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.7.444'. [ 476.925025][ T8135] chnl_net:caif_netlink_parms(): no params data found [ 477.194570][ T1159] bridge_slave_1: left allmulticast mode [ 477.220897][ T1159] bridge_slave_1: left promiscuous mode [ 477.226772][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.786721][ T1159] bridge_slave_0: left allmulticast mode [ 477.824491][ T1159] bridge_slave_0: left promiscuous mode [ 477.854119][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.286228][ T8314] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 481.300337][ T8336] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.456'. [ 484.312067][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.365280][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.422118][ T1159] bond0 (unregistering): Released all slaves [ 484.511243][ T8303] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 484.530965][ T8310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.431762][ T8364] uprobe: syz.8.463:8364 failed to unregister, leaking uprobe [ 487.596676][ T8135] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.694085][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.804431][ T8135] bridge_slave_0: entered allmulticast mode [ 487.812841][ T8406] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.470'. [ 487.953949][ T8135] bridge_slave_0: entered promiscuous mode [ 488.092563][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.146168][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.183578][ T8135] bridge_slave_1: entered allmulticast mode [ 488.229564][ T8135] bridge_slave_1: entered promiscuous mode [ 488.844305][ T8419] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 488.853814][ T8419] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 489.568537][ T8417] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.474'. [ 490.806430][ T8135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.864448][ T8435] kAFS: unable to lookup cell '(,c¾Ì' [ 491.238672][ T8442] ubi0: attaching mtd0 [ 491.244587][ T8442] ubi0: scanning is finished [ 491.537256][ T1159] hsr_slave_0: left promiscuous mode [ 491.593307][ T8449] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 491.607116][ T1159] hsr_slave_1: left promiscuous mode [ 491.927321][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.947266][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.067878][ T8442] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 492.473477][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.481115][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.668168][ T1159] veth1_macvtap: left promiscuous mode [ 492.673713][ T1159] veth0_macvtap: left promiscuous mode [ 492.788245][ T1159] veth1_vlan: left promiscuous mode [ 492.793696][ T1159] veth0_vlan: left promiscuous mode [ 494.040836][ T8475] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.484'. [ 495.186006][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 495.206220][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 495.374566][ T8135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.383870][ T8430] bond1: option mode: unable to set because the bond device has slaves [ 495.395308][ T8436] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 495.416762][ T8448] kthread_run failed with err -4 [ 495.796535][ T8135] team0: Port device team_slave_0 added [ 495.882314][ T8135] team0: Port device team_slave_1 added [ 496.052466][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.100695][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.217116][ T8135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.287490][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.127021][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.218557][ T8499] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.491'. [ 497.228166][ T8135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.833355][ T8514] kAFS: unable to lookup cell '(,c¾Ì' [ 498.170906][ T8516] ubi0: attaching mtd0 [ 498.181712][ T8516] ubi0: scanning is finished [ 498.184342][ T8135] hsr_slave_0: entered promiscuous mode [ 498.240266][ T8135] hsr_slave_1: entered promiscuous mode [ 498.432198][ T8516] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 498.439854][ T8516] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 498.448824][ T8516] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 498.456001][ T8516] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 498.463908][ T8516] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 498.470773][ T8516] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 498.478845][ T8516] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 431797692 [ 498.490788][ T8516] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 498.515627][ T8526] ubi0: background thread "ubi_bgt0d" started, PID 8526 [ 498.868226][ T8532] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 498.928063][ T8519] overlayfs: statfs failed on './file0' [ 499.191220][ T8532] bond1: (slave lo): Enslaving as an active interface with an up link [ 499.257842][ T8534] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 499.382160][ T8532] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 501.299031][ T8546] netlink: 'syz.2.500': attribute type 13 has an invalid length. [ 501.306988][ T8546] netlink: 'syz.2.500': attribute type 17 has an invalid length. [ 502.347073][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 503.908816][ T8546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 504.052324][ T8556] tipc: Enabling of bearer rejected, failed to enable media [ 505.880298][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.886743][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.970720][ T8597] overlayfs: statfs failed on './file0' [ 506.064218][ T8606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.891409][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 509.549573][ T8135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 509.836537][ T8135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 510.753000][ T8135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 512.441838][ T8666] pimreg512: entered allmulticast mode [ 513.307079][ T8135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 513.740459][ T8687] warning: `syz.9.530' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 513.937425][ T5925] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 514.308508][ T5925] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 514.340373][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.686688][ T5925] usb 3-1: config 0 descriptor?? [ 514.785694][ T5925] cp210x 3-1:0.0: cp210x converter detected [ 515.958203][ T5925] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 515.965743][ T5925] cp210x 3-1:0.0: querying part number failed [ 516.206595][ T5925] usb 3-1: cp210x converter now attached to ttyUSB0 [ 516.417994][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 516.427317][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 516.435519][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 516.443763][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 516.452334][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 517.862478][ T792] usb 3-1: USB disconnect, device number 6 [ 517.928286][ T792] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 518.047763][ T792] cp210x 3-1:0.0: device disconnected [ 519.327759][ T5830] Bluetooth: hci1: command tx timeout [ 519.515578][ T8747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.134191][ T8756] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.544'. [ 520.538383][ T8746] tipc: Enabling of bearer rejected, failed to enable media [ 521.408634][ T5830] Bluetooth: hci1: command tx timeout [ 524.604773][ T5830] Bluetooth: hci1: command tx timeout [ 524.870214][ T8710] chnl_net:caif_netlink_parms(): no params data found [ 526.720399][ T5836] Bluetooth: hci1: command tx timeout [ 526.777147][ T5890] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 526.975573][ T5890] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 527.022487][ T5890] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.258608][ T5890] usb 10-1: config 0 descriptor?? [ 527.299214][ T5890] cp210x 10-1:0.0: cp210x converter detected [ 527.437636][ T8806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.747157][ T5890] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 527.759566][ T5890] cp210x 10-1:0.0: querying part number failed [ 527.788275][ T5890] usb 10-1: cp210x converter now attached to ttyUSB0 [ 528.880564][ T8710] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.937077][ T29] usb 10-1: USB disconnect, device number 3 [ 529.967297][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.974751][ T8710] bridge_slave_0: entered allmulticast mode [ 530.108033][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 530.137683][ T29] cp210x 10-1:0.0: device disconnected [ 530.139396][ T8710] bridge_slave_0: entered promiscuous mode [ 530.434999][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.477277][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.484633][ T8710] bridge_slave_1: entered allmulticast mode [ 530.629425][ T8710] bridge_slave_1: entered promiscuous mode [ 530.780241][ T8826] tipc: Enabling of bearer rejected, failed to enable media [ 531.137538][ T792] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 531.158520][ T8710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.654312][ T8710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.769459][ T792] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 532.807624][ T792] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 532.867077][ T792] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 532.893957][ T1134] bridge_slave_1: left allmulticast mode [ 532.907159][ T792] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 532.918783][ T1134] bridge_slave_1: left promiscuous mode [ 532.924606][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.952185][ T792] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 532.983615][ T1134] bridge_slave_0: left allmulticast mode [ 532.997162][ T1134] bridge_slave_0: left promiscuous mode [ 533.010906][ T792] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 533.027191][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.034514][ T792] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 533.075032][ T792] usb 3-1: Product: syz [ 533.085141][ T792] usb 3-1: Manufacturer: syz [ 533.161745][ T792] cdc_wdm 3-1:1.0: skipping garbage [ 533.203988][ T792] cdc_wdm 3-1:1.0: skipping garbage [ 533.237470][ T792] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 533.267015][ T792] cdc_wdm 3-1:1.0: Unknown control protocol [ 534.282372][ T5925] usb 3-1: USB disconnect, device number 7 [ 536.367826][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.900137][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.081438][ T1134] bond0 (unregistering): Released all slaves [ 537.432886][ T8710] team0: Port device team_slave_0 added [ 537.466854][ T8710] team0: Port device team_slave_1 added [ 537.931907][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.986980][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.088803][ T8710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.123035][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.167045][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.249385][ T8710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.603784][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 538.603966][ T30] audit: type=1326 audit(1771875296.068:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.8.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 539.067080][ T1134] hsr_slave_0: left promiscuous mode [ 539.104334][ T1134] hsr_slave_1: left promiscuous mode [ 539.118662][ T30] audit: type=1326 audit(1771875296.078:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.8.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 539.137052][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.179016][ T30] audit: type=1326 audit(1771875296.078:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.8.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 539.457319][ T30] audit: type=1326 audit(1771875296.078:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.8.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 539.533517][ T30] audit: type=1326 audit(1771875296.078:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.8.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 540.398684][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.417880][ T30] audit: type=1326 audit(1771875296.078:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.8.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 541.667048][ T30] audit: type=1326 audit(1771875296.078:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.8.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 541.950837][ T30] audit: type=1326 audit(1771875296.078:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.8.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 542.403578][ T30] audit: type=1326 audit(1771875296.078:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.8.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 542.462114][ T30] audit: type=1326 audit(1771875296.078:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.8.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 543.081683][ T8959] kAFS: unable to lookup cell '(,c¾Ì' [ 543.511711][ T8962] ubi: mtd0 is already attached to ubi0 [ 543.981482][ T5922] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 544.192498][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 544.204325][ T5922] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 544.227101][ T5922] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 544.245455][ T5922] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 544.255151][ T5922] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 544.269468][ T5922] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 544.363938][ T5922] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 544.376875][ T5922] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 544.385991][ T5922] usb 10-1: Product: syz [ 544.390571][ T5922] usb 10-1: Manufacturer: syz [ 544.433384][ T5922] cdc_wdm 10-1:1.0: skipping garbage [ 544.444741][ T5922] cdc_wdm 10-1:1.0: skipping garbage [ 544.459414][ T5922] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 544.476488][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 544.500190][ T5922] cdc_wdm 10-1:1.0: Unknown control protocol [ 544.902152][ T8972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.034211][ T29] usb 10-1: USB disconnect, device number 4 [ 545.666526][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.8.590'. [ 547.896331][ T8710] hsr_slave_0: entered promiscuous mode [ 547.981126][ T8710] hsr_slave_1: entered promiscuous mode [ 548.137583][ T9003] kAFS: unable to lookup cell '(,c¾Ì' [ 548.758297][ T9011] ubi: mtd0 is already attached to ubi0 [ 548.853409][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 548.853462][ T30] audit: type=1326 audit(1771875306.018:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 549.267368][ T30] audit: type=1326 audit(1771875306.018:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 549.309759][ T30] audit: type=1326 audit(1771875306.018:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 549.930784][ T30] audit: type=1326 audit(1771875306.018:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 549.953999][ T30] audit: type=1326 audit(1771875306.018:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 550.031617][ T30] audit: type=1326 audit(1771875306.018:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 550.121748][ T30] audit: type=1326 audit(1771875306.018:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 550.511380][ T30] audit: type=1326 audit(1771875306.018:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 550.568667][ T9029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.758749][ T30] audit: type=1326 audit(1771875306.028:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 550.825462][ T30] audit: type=1326 audit(1771875306.028:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84e19c629 code=0x7ffc0000 [ 551.402093][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 551.418241][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 551.443965][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 551.454652][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 551.464581][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 551.797132][ T792] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 552.432295][ T792] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 552.448492][ T6872] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.466093][ T792] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 552.485975][ T792] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 552.513813][ T792] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 552.537176][ T792] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 552.585542][ T792] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 552.599334][ T6872] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.627939][ T792] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 552.636136][ T792] usb 9-1: Product: syz [ 552.799069][ T792] usb 9-1: Manufacturer: syz [ 552.849022][ T792] cdc_wdm 9-1:1.0: skipping garbage [ 552.854320][ T792] cdc_wdm 9-1:1.0: skipping garbage [ 552.880333][ T792] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 552.896851][ T792] cdc_wdm 9-1:1.0: Unknown control protocol [ 553.151970][ T6872] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.568319][ T5836] Bluetooth: hci2: command tx timeout [ 553.982591][ T5925] usb 9-1: USB disconnect, device number 2 [ 554.308659][ T6872] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.607476][ T5925] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 554.923149][ T5925] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 554.947012][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.985002][ T5925] usb 8-1: Product: syz [ 554.997652][ T5925] usb 8-1: Manufacturer: syz [ 555.031259][ T5925] usb 8-1: SerialNumber: syz [ 555.107251][ T5925] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 555.128608][ T5922] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 555.153175][ T9068] kAFS: unable to lookup cell '(,c¾Ì' [ 555.500063][ T9073] ubi: mtd0 is already attached to ubi0 [ 555.737197][ T5836] Bluetooth: hci2: command tx timeout [ 556.338891][ T5922] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 557.445603][ T5922] ath9k_htc: Failed to initialize the device [ 557.455519][ T5925] usb 8-1: USB disconnect, device number 2 [ 557.861348][ T5836] Bluetooth: hci2: command tx timeout [ 557.904538][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 557.904632][ T30] audit: type=1326 audit(1771875315.118:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.9.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 558.097104][ T6872] bridge_slave_1: left allmulticast mode [ 558.128015][ T6872] bridge_slave_1: left promiscuous mode [ 558.153552][ T5925] usb 8-1: ath9k_htc: USB layer deinitialized [ 558.198080][ T30] audit: type=1326 audit(1771875315.118:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.9.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 558.198726][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.300021][ T30] audit: type=1326 audit(1771875315.118:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.9.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 558.417199][ T6872] bridge_slave_0: left allmulticast mode [ 558.422923][ T6872] bridge_slave_0: left promiscuous mode [ 558.489958][ T30] audit: type=1326 audit(1771875315.118:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.9.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 558.502362][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.588362][ T9094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.629697][ T30] audit: type=1326 audit(1771875315.118:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.9.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 559.089588][ T30] audit: type=1326 audit(1771875315.128:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.9.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 559.113051][ T30] audit: type=1326 audit(1771875315.128:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.9.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 559.214301][ T30] audit: type=1326 audit(1771875315.128:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.9.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 559.489840][ T30] audit: type=1326 audit(1771875315.128:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.9.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 559.543698][ T30] audit: type=1326 audit(1771875315.128:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.9.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 560.168429][ T5836] Bluetooth: hci2: command tx timeout [ 561.188802][ T6872] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.230364][ T6872] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.257339][ T7610] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 561.324864][ T6872] .` (unregistering): Released all slaves [ 561.719680][ T9125] kAFS: unable to lookup cell '(,c¾Ì' [ 561.948184][ T6872] bond1 (unregistering): (slave lo): Releasing backup interface [ 561.957717][ T7610] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 561.966371][ T7610] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 561.983871][ T6872] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 561.995313][ T9126] ubi: mtd0 is already attached to ubi0 [ 562.001011][ T7610] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 562.010452][ T7610] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 562.010635][ T6872] bond1 (unregistering): Released all slaves [ 562.022409][ T7610] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 562.042562][ T7610] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 562.054145][ T7610] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 562.067809][ T7610] usb 9-1: Product: syz [ 562.072344][ T7610] usb 9-1: Manufacturer: syz [ 562.123682][ T7610] cdc_wdm 9-1:1.0: skipping garbage [ 562.131675][ T7610] cdc_wdm 9-1:1.0: skipping garbage [ 562.138773][ T8710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 562.152026][ T7610] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 562.166528][ T7610] cdc_wdm 9-1:1.0: Unknown control protocol [ 562.349205][ T9034] chnl_net:caif_netlink_parms(): no params data found [ 562.378934][ C0] wdm_int_callback: 25 callbacks suppressed [ 562.378973][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 562.483163][ T8710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 562.767807][ C0] wdm_int_callback: 24 callbacks suppressed [ 562.767844][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 562.771720][ T5925] usb 9-1: USB disconnect, device number 3 [ 562.773798][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 562.773832][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 562.787685][ T8710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 563.103134][ T6872] tipc: Left network mode [ 563.156298][ T8710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 566.807901][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.814878][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.818746][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.825874][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.913005][ T9034] bridge_slave_0: entered allmulticast mode [ 568.959564][ T9180] netlink: 60 bytes leftover after parsing attributes in process `syz.8.632'. [ 569.078819][ T9034] bridge_slave_0: entered promiscuous mode [ 569.562673][ T9034] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.586158][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.603856][ T9034] bridge_slave_1: entered allmulticast mode [ 569.762282][ T9034] bridge_slave_1: entered promiscuous mode [ 569.828218][ T9034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.998807][ T9034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.287354][ T6872] hsr_slave_0: left promiscuous mode [ 570.327270][ T6872] hsr_slave_1: left promiscuous mode [ 570.347057][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.374842][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.395754][ T9196] kAFS: unable to lookup cell '(,c¾Ì' [ 570.402963][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.430614][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.483572][ T6872] veth1_macvtap: left promiscuous mode [ 570.503880][ T6872] veth0_macvtap: left promiscuous mode [ 570.524307][ T6872] veth1_vlan: left promiscuous mode [ 570.545236][ T6872] veth0_vlan: left promiscuous mode [ 570.709510][ T9197] ubi: mtd0 is already attached to ubi0 [ 571.876572][ T30] kauditd_printk_skb: 147 callbacks suppressed [ 571.876600][ T30] audit: type=1804 audit(1771875329.488:1109): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.634" name="/newroot/63/file0" dev="tmpfs" ino=375 res=1 errno=0 [ 571.912907][ T9204] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 571.949268][ T9204] ref_ctr increment failed for inode: 0x177 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880779c24c0 [ 572.201697][ T9191] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 573.594627][ T9191] ref_ctr decrement failed for inode: 0x177 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880779c24c0 [ 573.720667][ T9191] uprobe: syz.8.634:9191 failed to unregister, leaking uprobe [ 575.177651][ T6872] team0 (unregistering): Port device team_slave_1 removed [ 575.367160][ T5922] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 575.495923][ T6872] team0 (unregistering): Port device team_slave_0 removed [ 575.801839][ T5922] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 575.847062][ T5922] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 575.920756][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 575.931361][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 575.950355][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 575.959853][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 575.969565][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 575.976742][ T5922] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 576.036287][ T5922] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 576.253707][ T5922] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 576.271336][ T5922] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 576.284040][ T5922] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 576.295034][ T5922] usb 8-1: Product: syz [ 576.307188][ T5922] usb 8-1: Manufacturer: syz [ 576.798805][ T5922] cdc_wdm 8-1:1.0: skipping garbage [ 576.964804][ T5922] cdc_wdm 8-1:1.0: skipping garbage [ 576.983770][ T5922] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 576.997098][ T5922] cdc_wdm 8-1:1.0: Unknown control protocol [ 577.170603][ T7610] usb 8-1: USB disconnect, device number 3 [ 577.547142][ T9246] kAFS: unable to lookup cell '(,c¾Ì' [ 577.850167][ T9248] ubi: mtd0 is already attached to ubi0 [ 578.481506][ T9034] team0: Port device team_slave_0 added [ 578.527991][ T5836] Bluetooth: hci3: command tx timeout [ 578.918391][ T9034] team0: Port device team_slave_1 added [ 579.270770][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.317112][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.443313][ T9034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.812626][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.855380][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.134492][ T9034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.961789][ T5836] Bluetooth: hci3: command tx timeout [ 581.344758][ T9034] hsr_slave_0: entered promiscuous mode [ 583.145269][ T5836] Bluetooth: hci3: command tx timeout [ 583.178491][ T9034] hsr_slave_1: entered promiscuous mode [ 583.184999][ T9034] debugfs: 'hsr0' already exists in 'hsr' [ 583.977860][ T9034] Cannot create hsr debugfs directory [ 585.166976][ T5830] Bluetooth: hci3: command tx timeout [ 587.928056][ T30] audit: type=1804 audit(1771875345.528:1110): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.657" name="/newroot/167/file0" dev="tmpfs" ino=934 res=1 errno=0 [ 587.989689][ T9324] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 588.000724][ T9324] ref_ctr increment failed for inode: 0x3a6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805b874980 [ 589.228726][ T9231] chnl_net:caif_netlink_parms(): no params data found [ 592.154255][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.230388][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.258360][ T9231] bridge_slave_0: entered allmulticast mode [ 592.267498][ T9231] bridge_slave_0: entered promiscuous mode [ 592.276459][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.284537][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.292081][ T9231] bridge_slave_1: entered allmulticast mode [ 592.300690][ T9231] bridge_slave_1: entered promiscuous mode [ 592.496774][ T9231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.420233][ T9231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.972925][ T5148] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 594.375629][ T9374] netlink: 48 bytes leftover after parsing attributes in process `syz.2.671'. [ 594.421585][ T5148] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 594.434299][ T5148] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 594.504752][ T5148] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 594.780295][ T5148] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 594.842453][ T5148] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 595.069854][ T5148] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 595.090545][ T5148] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 595.131124][ T5148] usb 10-1: Product: syz [ 595.147505][ T5148] usb 10-1: Manufacturer: syz [ 595.382950][ T9231] team0: Port device team_slave_0 added [ 595.404372][ T9231] team0: Port device team_slave_1 added [ 595.416275][ T5148] cdc_wdm 10-1:1.0: skipping garbage [ 595.537005][ T5148] cdc_wdm 10-1:1.0: skipping garbage [ 595.547208][ T5148] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 595.553627][ T5148] cdc_wdm 10-1:1.0: Unknown control protocol [ 595.795618][ T9385] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.674'. [ 595.870416][ T5148] usb 10-1: USB disconnect, device number 5 [ 595.988665][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.995678][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.132780][ T9231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.172907][ T9034] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 596.688911][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.775456][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.037091][ T9231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.575640][ T9034] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 597.611796][ T9034] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 597.675926][ T9034] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 597.992235][ T9231] hsr_slave_0: entered promiscuous mode [ 598.008384][ T9231] hsr_slave_1: entered promiscuous mode [ 598.023870][ T9231] debugfs: 'hsr0' already exists in 'hsr' [ 598.049076][ T9231] Cannot create hsr debugfs directory [ 598.105375][ T1134] bridge_slave_1: left allmulticast mode [ 598.117144][ T1134] bridge_slave_1: left promiscuous mode [ 598.162035][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.524791][ T30] audit: type=1804 audit(1771875356.128:1111): pid=9413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.675" name="/newroot/171/file0" dev="tmpfs" ino=955 res=1 errno=0 [ 600.428342][ T1134] bridge_slave_0: left allmulticast mode [ 600.434083][ T1134] bridge_slave_0: left promiscuous mode [ 600.441544][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.235453][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.352462][ T9446] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.688'. [ 602.496250][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.635611][ T1134] bond0 (unregistering): Released all slaves [ 604.715217][ T1134] hsr_slave_0: left promiscuous mode [ 604.729660][ T1134] hsr_slave_1: left promiscuous mode [ 604.752514][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.787587][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.802795][ T9458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 605.414492][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 605.452212][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 605.994647][ T9454] pimreg3: entered allmulticast mode [ 608.244195][ T9487] netlink: 'syz.8.697': attribute type 13 has an invalid length. [ 608.256077][ T9487] netlink: 'syz.8.697': attribute type 17 has an invalid length. [ 609.892514][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.902638][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.910718][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.928095][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.935871][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 610.140837][ T9505] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 610.794644][ T9507] netlink: 100 bytes leftover after parsing attributes in process `syz.2.702'. [ 610.837138][ T9487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 610.942801][ T9498] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 611.708671][ T9501] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.725493][ T9501] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.858743][ T9501] bridge_slave_0: left allmulticast mode [ 611.865851][ T9501] bridge_slave_0: left promiscuous mode [ 611.881182][ T9501] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.046784][ T5836] Bluetooth: hci1: command tx timeout [ 614.113008][ T9501] bridge_slave_1: left allmulticast mode [ 614.138374][ T9501] bridge_slave_1: left promiscuous mode [ 614.144141][ T9501] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.583694][ T9501] bond0: (slave bond_slave_0): Releasing backup interface [ 614.627438][ T9501] bond0: (slave bond_slave_1): Releasing backup interface [ 614.673202][ T9501] team0: Port device team_slave_0 removed [ 615.097221][ T5836] Bluetooth: hci1: command tx timeout [ 615.209785][ T9501] team0: Port device team_slave_1 removed [ 615.287684][ T9501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.326031][ T9501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.412264][ T9501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.670643][ T9501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.756330][ T9535] ======================================================= [ 615.756330][ T9535] WARNING: The mand mount option has been deprecated and [ 615.756330][ T9535] and is ignored by this kernel. Remove the mand [ 615.756330][ T9535] option from the mount to silence this warning. [ 615.756330][ T9535] ======================================================= [ 616.417058][ T9501] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 617.178109][ T5836] Bluetooth: hci1: command tx timeout [ 617.252499][ T9542] netlink: 100 bytes leftover after parsing attributes in process `syz.9.713'. [ 617.961358][ T9550] netlink: 'syz.8.714': attribute type 13 has an invalid length. [ 617.972605][ T9550] netlink: 'syz.8.714': attribute type 17 has an invalid length. [ 618.554439][ T9550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 619.247787][ T5836] Bluetooth: hci1: command tx timeout [ 619.263089][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 619.329959][ T30] audit: type=1326 audit(1771875376.928:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 619.353665][ T30] audit: type=1326 audit(1771875376.928:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 619.381135][ T30] audit: type=1326 audit(1771875376.928:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 619.405667][ T30] audit: type=1326 audit(1771875376.928:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 619.430228][ T30] audit: type=1326 audit(1771875376.928:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 619.451955][ T9231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 619.455173][ T30] audit: type=1326 audit(1771875376.928:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 619.481748][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 619.489586][ T24] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 619.497795][ T24] usb 10-1: config 0 has no interface number 0 [ 619.505782][ T30] audit: type=1326 audit(1771875376.928:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 619.525310][ T9231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 619.530267][ T30] audit: type=1326 audit(1771875376.928:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 619.558115][ T24] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 619.567745][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.575875][ T24] usb 10-1: Product: syz [ 619.585132][ T24] usb 10-1: Manufacturer: syz [ 619.590301][ T30] audit: type=1326 audit(1771875376.928:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 619.612665][ T24] usb 10-1: SerialNumber: syz [ 619.620356][ T30] audit: type=1326 audit(1771875376.928:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104a59c629 code=0x7ffc0000 [ 619.621374][ T24] usb 10-1: config 0 descriptor?? [ 619.691621][ T9231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 619.694241][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 619.710651][ T9231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 620.089461][ T24] gspca_spca1528: reg_w err -71 [ 620.118596][ T24] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 620.144814][ T1134] bridge_slave_1: left allmulticast mode [ 620.165288][ T24] usb 10-1: USB disconnect, device number 6 [ 620.176114][ T1134] bridge_slave_1: left promiscuous mode [ 620.189990][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.725831][ T1134] bridge_slave_0: left allmulticast mode [ 620.732139][ T1134] bridge_slave_0: left promiscuous mode [ 620.739437][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.733588][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.812948][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.879690][ T1134] bond0 (unregistering): Released all slaves [ 622.948007][ T9595] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 623.199925][ T9592] bond1: (slave lo): Releasing backup interface [ 623.243069][ T9592] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 623.586843][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.594251][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.851811][ T9592] bridge_slave_0: left allmulticast mode [ 623.862724][ T9592] bridge_slave_0: left promiscuous mode [ 623.872836][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.896123][ T9592] bridge_slave_1: left allmulticast mode [ 623.910583][ T9592] bridge_slave_1: left promiscuous mode [ 623.920964][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.674749][ T9607] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 624.684358][ T9607] ref_ctr increment failed for inode: 0x1f4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888077bcd5c0 [ 624.707116][ T30] kauditd_printk_skb: 229 callbacks suppressed [ 624.707181][ T30] audit: type=1804 audit(1771875382.238:1351): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.724" name="/newroot/86/file0" dev="tmpfs" ino=500 res=1 errno=0 [ 625.056026][ T9611] netlink: 'syz.7.728': attribute type 13 has an invalid length. [ 625.064524][ T9611] netlink: 'syz.7.728': attribute type 17 has an invalid length. [ 625.130549][ T9592] bond0: (slave bond_slave_0): Releasing backup interface [ 625.427592][ T9592] bond0: (slave bond_slave_1): Releasing backup interface [ 625.444418][ T9592] team0: Port device team_slave_0 removed [ 625.496708][ T9592] team0: Port device team_slave_1 removed [ 625.538879][ T9592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.574180][ T9592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.603540][ T9592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.631566][ T9592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.689075][ T9592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 625.720240][ T9500] chnl_net:caif_netlink_parms(): no params data found [ 625.853638][ T1134] hsr_slave_0: left promiscuous mode [ 625.867388][ T5148] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 625.886739][ T1134] hsr_slave_1: left promiscuous mode [ 625.896153][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.906724][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.163458][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 626.185724][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 626.197361][ T30] audit: type=1326 audit(1771875383.818:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.9.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 626.234387][ T30] audit: type=1326 audit(1771875383.818:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.9.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 626.266493][ T30] audit: type=1326 audit(1771875383.818:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.9.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 626.294197][ T30] audit: type=1326 audit(1771875383.818:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.9.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 626.303255][ T5148] usb 9-1: Using ep0 maxpacket: 32 [ 626.318795][ T30] audit: type=1326 audit(1771875383.818:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.9.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 626.347886][ T30] audit: type=1326 audit(1771875383.818:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.9.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 626.372340][ T30] audit: type=1326 audit(1771875383.818:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.9.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 626.401092][ T30] audit: type=1326 audit(1771875383.818:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.9.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 626.423866][ T30] audit: type=1326 audit(1771875383.818:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.9.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77cb59c629 code=0x7ffc0000 [ 626.487175][ T9611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.499218][ T5148] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 626.519337][ T5148] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.532025][ T5148] usb 9-1: Product: syz [ 626.536775][ T5148] usb 9-1: Manufacturer: syz [ 626.541819][ T5148] usb 9-1: SerialNumber: syz [ 626.568867][ T5148] usb 9-1: config 0 descriptor?? [ 626.601329][ T5148] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 626.615222][ T5148] dvb-usb: bulk message failed: -22 (2/0) [ 626.653307][ T5148] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 626.664421][ T5148] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 626.675180][ T5148] usb 9-1: media controller created [ 626.818642][ T5148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 626.899224][ T5148] usb 9-1: selecting invalid altsetting 7 [ 626.905009][ T5148] cxusb: set interface failed [ 626.998208][ T5148] dvb-usb: bulk message failed: -22 (1/0) [ 628.150146][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.273585][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.280057][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.801043][ T5148] DVB: Unable to find symbol lgdt330x_attach() [ 628.835404][ T5148] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 628.896643][ T9231] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.028019][ T9641] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 629.400732][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.412021][ T5148] rc_core: IR keymap rc-dvico-portable not found [ 629.418808][ T5148] Registered IR keymap rc-empty [ 629.427075][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.434847][ T5148] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 629.651192][ T9500] bridge_slave_0: entered allmulticast mode [ 629.681408][ T5148] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input5 [ 629.696837][ T9500] bridge_slave_0: entered promiscuous mode [ 629.922008][ T5148] dvb-usb: schedule remote query interval to 100 msecs. [ 629.929133][ T5148] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 629.932051][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.945202][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.964584][ T5148] usb 9-1: USB disconnect, device number 4 [ 630.119513][ T7610] dvb-usb: bulk message failed: -22 (1/0) [ 630.457558][ T7610] dvb-usb: bulk message failed: -22 (1/0) [ 630.628147][ T5890] dvb-usb: bulk message failed: -22 (1/0) [ 630.710795][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.727260][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.739565][ T9500] bridge_slave_1: entered allmulticast mode [ 630.778065][ T9500] bridge_slave_1: entered promiscuous mode [ 631.248832][ T678] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.255986][ T678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.378982][ T5148] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 631.800701][ T9500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.905819][ T9500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.112821][ T9679] netlink: 20 bytes leftover after parsing attributes in process `syz.8.746'. [ 634.128923][ T30] kauditd_printk_skb: 200 callbacks suppressed [ 634.128950][ T30] audit: type=1804 audit(1771875391.748:1561): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.740" name="/newroot/84/file0" dev="tmpfs" ino=485 res=1 errno=0 [ 634.158430][ T9680] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 634.197034][ T9680] ref_ctr increment failed for inode: 0x1e5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88813fe83100 [ 634.219103][ T9500] team0: Port device team_slave_0 added [ 634.320817][ T9656] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 634.330493][ T9500] team0: Port device team_slave_1 added [ 634.357730][ T9656] ref_ctr decrement failed for inode: 0x1e5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88813fe83100 [ 634.370806][ T9656] uprobe: syz.7.740:9656 failed to unregister, leaking uprobe [ 634.493363][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.547996][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.665964][ T9500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.712860][ T9500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.784002][ T9500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.917115][ T9500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.874303][ T9500] hsr_slave_0: entered promiscuous mode [ 636.881234][ T9500] hsr_slave_1: entered promiscuous mode [ 638.896292][ T9705] tipc: Started in network mode [ 638.912243][ T9705] tipc: Node identity 8a7c35451093, cluster identity 4711 [ 638.974749][ T9705] tipc: Enabled bearer , priority 0 [ 638.996355][ T9710] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.755'. [ 639.039213][ T9713] tipc: Resetting bearer [ 639.050081][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 639.069776][ T9702] tipc: Disabling bearer [ 639.081708][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 639.091051][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 639.099494][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 639.107578][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 639.368006][ T9720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.097404][ T9729] xt_recent: Unsupported userspace flags (000000de) [ 641.512793][ T5830] Bluetooth: hci2: command tx timeout [ 643.569551][ T5830] Bluetooth: hci2: command tx timeout [ 643.761126][ T9757] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.767'. [ 645.415790][ T9765] syzkaller0: entered promiscuous mode [ 645.421766][ T9765] syzkaller0: entered allmulticast mode [ 645.451690][ T9714] chnl_net:caif_netlink_parms(): no params data found [ 645.652332][ T5830] Bluetooth: hci2: command tx timeout [ 645.719397][ T9777] netlink: 52 bytes leftover after parsing attributes in process `syz.8.763'. [ 645.734012][ T12] bridge_slave_1: left allmulticast mode [ 645.751028][ T12] bridge_slave_1: left promiscuous mode [ 645.757184][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.772268][ T12] bridge_slave_0: left allmulticast mode [ 645.796672][ T12] bridge_slave_0: left promiscuous mode [ 645.813561][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.546279][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.617946][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.727069][ T5830] Bluetooth: hci2: command tx timeout [ 647.987320][ T12] bond0 (unregistering): Released all slaves [ 649.164523][ T9500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 649.326257][ T9808] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.780'. [ 650.533947][ T9821] netlink: 52 bytes leftover after parsing attributes in process `syz.8.785'. [ 650.656956][ T12] hsr_slave_0: left promiscuous mode [ 650.686955][ T12] hsr_slave_1: left promiscuous mode [ 651.315904][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.547781][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.144613][ T9855] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.793'. [ 654.376524][ T12] team0 (unregistering): Port device team_slave_1 removed [ 654.545252][ T12] team0 (unregistering): Port device team_slave_0 removed [ 655.972550][ T9500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 656.033435][ T9847] syzkaller0: entered promiscuous mode [ 656.065367][ T9847] syzkaller0: entered allmulticast mode [ 656.717963][ T9500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 656.780710][ T9500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 658.207110][ T7610] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 658.727374][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.762967][ T9714] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.775022][ T7610] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 658.795038][ T9714] bridge_slave_0: entered allmulticast mode [ 658.801633][ T7610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.075433][ T9896] netlink: 'syz.9.801': attribute type 13 has an invalid length. [ 659.085898][ T9896] netlink: 'syz.9.801': attribute type 17 has an invalid length. [ 659.128637][ T9714] bridge_slave_0: entered promiscuous mode [ 659.141595][ T7610] usb 3-1: config 0 descriptor?? [ 659.161251][ T7610] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 659.591869][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.8.803'. [ 659.602052][ T7610] gspca_cpia1: usb_control_msg 03, error -32 [ 659.621452][ T7610] gspca_cpia1: usb_control_msg 03, error -32 [ 659.640250][ T7610] gspca_cpia1: usb_control_msg 03, error -32 [ 659.659416][ T7610] gspca_cpia1: usb_control_msg 03, error -32 [ 659.683230][ T7610] gspca_cpia1: usb_control_msg 01, error -71 [ 659.690901][ T7610] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 659.717905][ T9896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.751406][ T9896] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.778394][ T7610] usb 3-1: USB disconnect, device number 8 [ 659.796150][ T9896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 659.828387][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.857112][ T9714] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.864459][ T9714] bridge_slave_1: entered allmulticast mode [ 659.897670][ T9714] bridge_slave_1: entered promiscuous mode [ 660.218939][ T9714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.269281][ T9714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.088564][ T9714] team0: Port device team_slave_0 added [ 663.380355][ T9714] team0: Port device team_slave_1 added [ 663.580629][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.607026][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.706211][ T9714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.948759][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.031798][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.400197][ T9714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.109070][ T9714] hsr_slave_0: entered promiscuous mode [ 665.125875][ T9714] hsr_slave_1: entered promiscuous mode [ 665.132772][ T9714] debugfs: 'hsr0' already exists in 'hsr' [ 665.166973][ T9714] Cannot create hsr debugfs directory [ 666.693687][ T9500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.495349][ T9500] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.662534][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.669752][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.041812][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.048995][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.802702][ T9990] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.822'. [ 672.741815][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 672.767256][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 672.778183][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 672.811414][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 672.829583][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 673.147421][ T9714] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 673.447155][ T9714] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 674.527479][ T9714] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 674.626801][ T9714] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 674.937078][ T5836] Bluetooth: hci3: command tx timeout [ 677.007124][ T5836] Bluetooth: hci3: command tx timeout [ 679.280782][ T5836] Bluetooth: hci3: command tx timeout [ 680.663786][ T8944] bridge_slave_1: left allmulticast mode [ 680.696977][ T8944] bridge_slave_1: left promiscuous mode [ 680.760191][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.207414][ T8944] bridge_slave_0: left allmulticast mode [ 681.230251][ T8944] bridge_slave_0: left promiscuous mode [ 681.287094][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.341267][ T5836] Bluetooth: hci3: command tx timeout [ 686.641281][ T8944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.667861][ T8944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.748583][ T8944] bond0 (unregistering): Released all slaves [ 689.795878][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.802259][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.945831][ T9714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.177565][ T9714] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.221125][T10129] binder: 10128:10129 ioctl 80089203 0 returned -22 [ 690.312683][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.319847][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.783743][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.790917][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.542539][ T8944] hsr_slave_0: left promiscuous mode [ 691.649015][ T8944] hsr_slave_1: left promiscuous mode [ 692.454167][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.768140][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.452521][T10165] netlink: 'syz.7.857': attribute type 13 has an invalid length. [ 695.460930][T10165] netlink: 'syz.7.857': attribute type 17 has an invalid length. [ 699.126966][ T8944] team0 (unregistering): Port device team_slave_1 removed [ 699.825221][ T8944] team0 (unregistering): Port device team_slave_0 removed [ 701.221981][ T5836] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 701.280648][T10183] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 701.287488][T10183] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 701.296760][T10183] vhci_hcd vhci_hcd.0: Device attached [ 701.439719][T10192] vhci_hcd: connection closed [ 701.457557][ T203] vhci_hcd vhci_hcd.2: stop threads [ 701.530144][ T203] vhci_hcd vhci_hcd.2: release socket [ 701.539035][ T7610] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 701.583987][ T203] vhci_hcd vhci_hcd.2: disconnect device [ 701.929415][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 701.968302][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 701.977446][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 702.197740][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 702.206150][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 703.745859][T10165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 704.500504][ T9997] chnl_net:caif_netlink_parms(): no params data found [ 705.247026][ T5830] Bluetooth: hci1: command tx timeout [ 706.706127][ T7610] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 707.327009][ T5830] Bluetooth: hci1: command tx timeout [ 708.877129][ T9997] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.926235][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.019005][ T9997] bridge_slave_0: entered allmulticast mode [ 709.064160][ T9997] bridge_slave_0: entered promiscuous mode [ 709.355349][ T9997] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.417072][ T5830] Bluetooth: hci1: command tx timeout [ 709.693318][ T9997] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.733849][ T9997] bridge_slave_1: entered allmulticast mode [ 709.936509][ T9997] bridge_slave_1: entered promiscuous mode [ 710.724402][T10267] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.882'. [ 712.827061][ T5830] Bluetooth: hci1: command tx timeout [ 714.507257][ T9997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.603849][ T9997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.105855][ T9997] team0: Port device team_slave_0 added [ 717.364419][ T9997] team0: Port device team_slave_1 added [ 720.207321][T10310] netlink: 20 bytes leftover after parsing attributes in process `syz.8.891'. [ 720.629261][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.722941][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.897214][ T9997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.415626][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.708697][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.225400][ T9997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.586861][T10352] overlay: ./file0 is not a directory [ 729.635640][ T9997] hsr_slave_0: entered promiscuous mode [ 729.705168][ T9997] hsr_slave_1: entered promiscuous mode [ 733.192231][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 733.206007][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 733.214518][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 733.223040][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 733.231484][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 733.887502][T10384] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.896'. [ 734.145079][T10199] chnl_net:caif_netlink_parms(): no params data found [ 735.058829][ T8944] bridge_slave_1: left allmulticast mode [ 735.064532][ T8944] bridge_slave_1: left promiscuous mode [ 735.187200][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.280998][ T5830] Bluetooth: hci2: command tx timeout [ 737.326985][ T5830] Bluetooth: hci2: command tx timeout [ 738.881725][ T8944] bridge_slave_0: left allmulticast mode [ 738.937006][ T8944] bridge_slave_0: left promiscuous mode [ 739.016918][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.417111][ T5830] Bluetooth: hci2: command tx timeout [ 741.601813][ T5830] Bluetooth: hci2: command tx timeout [ 741.748141][ T8944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.891847][ T8944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.011415][ T8944] bond0 (unregistering): Released all slaves [ 743.899619][ T8944] hsr_slave_0: left promiscuous mode [ 743.912877][ T8944] hsr_slave_1: left promiscuous mode [ 743.945879][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.031866][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.100006][T10439] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.917'. [ 746.302922][T10441] netlink: 32 bytes leftover after parsing attributes in process `syz.9.908'. [ 747.617675][ T8944] team0 (unregistering): Port device team_slave_1 removed [ 748.210436][ T8944] team0 (unregistering): Port device team_slave_0 removed [ 750.104125][T10199] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.192726][T10199] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.316792][T10199] bridge_slave_0: entered allmulticast mode [ 750.398912][T10199] bridge_slave_0: entered promiscuous mode [ 750.530668][T10199] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.570292][T10199] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.633856][T10199] bridge_slave_1: entered allmulticast mode [ 750.777743][T10199] bridge_slave_1: entered promiscuous mode [ 750.783792][T10469] netlink: 16 bytes leftover after parsing attributes in process `syz.7.922'. [ 751.093034][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.099593][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.294940][T10199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.581949][T10199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.877298][T10199] team0: Port device team_slave_0 added [ 753.990538][T10199] team0: Port device team_slave_1 added [ 756.068877][T10504] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.930'. [ 757.315388][T10374] chnl_net:caif_netlink_parms(): no params data found [ 757.874620][ T8944] bridge_slave_1: left allmulticast mode [ 757.925780][ T8944] bridge_slave_1: left promiscuous mode [ 757.982628][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.258894][ T8944] bridge_slave_0: left allmulticast mode [ 758.264601][ T8944] bridge_slave_0: left promiscuous mode [ 758.487336][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.763139][T10533] netlink: 48 bytes leftover after parsing attributes in process `syz.8.935'. [ 759.687754][ T8944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.772551][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 759.787475][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 759.795330][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 759.803723][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 759.821601][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 759.903193][ T8944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.999148][ T8944] bond0 (unregistering): Released all slaves [ 762.509462][T10549] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 762.522662][T10549] ref_ctr increment failed for inode: 0x516 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880379d3d40 [ 762.575255][ T5836] Bluetooth: hci1: command tx timeout [ 762.586321][ T30] audit: type=1804 audit(1771875520.128:1562): pid=10549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.936" name="/newroot/238/file0" dev="tmpfs" ino=1302 res=1 errno=0 [ 762.654007][ T8944] hsr_slave_0: left promiscuous mode [ 762.708883][T10531] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 762.746978][T10531] ref_ctr decrement failed for inode: 0x516 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880379d3d40 [ 762.798178][T10531] uprobe: syz.2.936:10531 failed to unregister, leaking uprobe [ 762.882827][ T8944] hsr_slave_1: left promiscuous mode [ 762.935864][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.053265][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.120101][T10558] fuse: Bad value for 'group_id' [ 763.146922][T10558] fuse: Bad value for 'group_id' [ 763.543689][ T8944] team0 (unregistering): Port device team_slave_1 removed [ 763.637800][ T8944] team0 (unregistering): Port device team_slave_0 removed [ 764.607342][ T5830] Bluetooth: hci1: command tx timeout [ 765.688582][T10576] overlay: ./file0 is not a directory [ 765.705376][T10374] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.751091][T10374] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.786353][T10374] bridge_slave_0: entered allmulticast mode [ 765.810712][T10374] bridge_slave_0: entered promiscuous mode [ 765.876382][T10374] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.243215][T10374] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.327513][T10374] bridge_slave_1: entered allmulticast mode [ 766.367060][T10374] bridge_slave_1: entered promiscuous mode [ 766.680769][T10374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.694345][ T5830] Bluetooth: hci1: command tx timeout [ 766.920250][T10374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.191991][T10587] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.946'. [ 767.352326][T10374] team0: Port device team_slave_0 added [ 767.470485][T10374] team0: Port device team_slave_1 added [ 768.049777][T10374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.056780][T10374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.093212][T10374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.831423][ T5830] Bluetooth: hci1: command tx timeout [ 768.869160][T10374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.896861][T10374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.962991][T10374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.370265][ T8944] bridge_slave_1: left allmulticast mode [ 769.418701][ T8944] bridge_slave_1: left promiscuous mode [ 769.424568][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.415079][ T8944] bridge_slave_0: left allmulticast mode [ 772.438608][ T8944] bridge_slave_0: left promiscuous mode [ 772.472300][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.736998][ T29] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 772.931528][ T29] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 772.943941][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.976127][ T29] usb 8-1: Product: syz [ 773.032402][ T29] usb 8-1: Manufacturer: syz [ 773.072785][ T29] usb 8-1: SerialNumber: syz [ 773.322113][ T29] usb 8-1: config 0 descriptor?? [ 773.685944][ T29] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 773.763190][ T8944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.858893][ T8944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.397037][ T29] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 775.438352][ T8944] bond0 (unregistering): Released all slaves [ 777.026705][T10374] hsr_slave_0: entered promiscuous mode [ 777.043847][T10374] hsr_slave_1: entered promiscuous mode [ 777.704096][ T8944] team0 (unregistering): Port device team_slave_1 removed [ 777.805564][ T8944] team0 (unregistering): Port device team_slave_0 removed [ 778.516098][T10539] chnl_net:caif_netlink_parms(): no params data found [ 778.536907][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 778.735024][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.758050][ T24] usb 10-1: config 0 has no interfaces? [ 778.763663][ T24] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 779.352986][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.365062][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 779.375318][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 779.375765][ T24] usb 10-1: config 0 descriptor?? [ 779.387507][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 779.411011][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 779.423874][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 779.527167][T10539] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.534409][T10539] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.545852][T10539] bridge_slave_0: entered allmulticast mode [ 779.558905][T10539] bridge_slave_0: entered promiscuous mode [ 779.568661][T10539] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.576212][T10539] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.585106][T10539] bridge_slave_1: entered allmulticast mode [ 779.594196][T10539] bridge_slave_1: entered promiscuous mode [ 779.873098][T10539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.920903][T10539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.382104][T10539] team0: Port device team_slave_0 added [ 780.412075][T10539] team0: Port device team_slave_1 added [ 780.864376][ T24] usb 8-1: USB disconnect, device number 4 [ 781.012841][T10539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.043172][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.186548][T10539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.257052][T10539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.287781][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.393508][T10539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.489295][ T5836] Bluetooth: hci3: command tx timeout [ 781.665867][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 781.675639][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 781.695632][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 781.710911][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 781.719807][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 781.730574][ T29] usb 10-1: USB disconnect, device number 7 [ 781.767054][ T678] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.179928][ T678] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.620916][ T678] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.983081][ T5830] Bluetooth: hci3: command tx timeout [ 784.993422][ T5830] Bluetooth: hci4: command tx timeout [ 785.178404][ T678] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.367513][T10539] hsr_slave_0: entered promiscuous mode [ 785.374264][T10539] hsr_slave_1: entered promiscuous mode [ 785.427965][T10539] debugfs: 'hsr0' already exists in 'hsr' [ 785.433729][T10539] Cannot create hsr debugfs directory [ 785.837109][T10679] chnl_net:caif_netlink_parms(): no params data found [ 785.953468][T10374] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 786.086934][T10374] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 786.289257][T10374] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 786.401791][T10374] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 787.007340][ T5836] Bluetooth: hci3: command tx timeout [ 787.013331][ T5830] Bluetooth: hci4: command tx timeout [ 787.946485][T10679] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.978202][T10679] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.985490][T10679] bridge_slave_0: entered allmulticast mode [ 788.151397][T10679] bridge_slave_0: entered promiscuous mode [ 788.343983][T10753] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.967'. [ 788.775379][T10679] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.794961][T10679] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.833987][T10679] bridge_slave_1: entered allmulticast mode [ 788.864200][T10679] bridge_slave_1: entered promiscuous mode [ 788.893522][ T678] bridge_slave_1: left allmulticast mode [ 788.906548][ T678] bridge_slave_1: left promiscuous mode [ 788.927177][ T678] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.950265][ T678] bridge_slave_0: left allmulticast mode [ 788.955946][ T678] bridge_slave_0: left promiscuous mode [ 788.970114][ T678] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.087160][ T5830] Bluetooth: hci4: command tx timeout [ 789.092617][ T5830] Bluetooth: hci3: command tx timeout [ 790.018753][ T678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.032267][ T678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.044268][ T678] bond0 (unregistering): Released all slaves [ 790.063343][ T678] bond1 (unregistering): (slave lo): Releasing backup interface [ 790.071628][ T678] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 790.085107][ T678] bond1 (unregistering): Released all slaves [ 790.351250][T10679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.445437][T10679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.544422][T10699] chnl_net:caif_netlink_parms(): no params data found [ 790.963995][T10784] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 791.475233][ T5830] Bluetooth: hci4: command tx timeout [ 791.908477][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 791.927087][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 791.935105][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 791.943471][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 791.952165][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 793.789370][T10679] team0: Port device team_slave_0 added [ 793.816402][T10679] team0: Port device team_slave_1 added [ 793.999232][ T678] hsr_slave_0: left promiscuous mode [ 794.022788][ T678] hsr_slave_1: left promiscuous mode [ 794.064201][ T678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.147219][ T678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.262662][ T678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.316641][ T678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.501321][ T678] veth1_macvtap: left promiscuous mode [ 794.550439][ T678] veth0_macvtap: left promiscuous mode [ 794.582187][ T678] veth1_vlan: left promiscuous mode [ 794.624221][ T678] veth0_vlan: left promiscuous mode [ 795.242538][T10805] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.977'. [ 795.294868][ T678] pimreg512 (unregistering): left allmulticast mode [ 795.507290][ T5836] Bluetooth: hci5: command tx timeout [ 796.042097][ T678] team0 (unregistering): Port device team_slave_1 removed [ 796.217861][ T678] team0 (unregistering): Port device team_slave_0 removed [ 796.436537][T10817] xt_hashlimit: size too large, truncated to 1048576 [ 796.933098][T10816] syz.9.975 uses old SIOCAX25GETINFO [ 797.227532][T10679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.252753][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.279563][T10679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.418632][T10679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.425710][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.518527][T10679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.569526][ T5836] Bluetooth: hci5: command tx timeout [ 797.718304][T10699] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.725573][T10699] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.754368][T10699] bridge_slave_0: entered allmulticast mode [ 797.780375][T10699] bridge_slave_0: entered promiscuous mode [ 797.900115][T10699] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.917362][T10699] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.935153][T10699] bridge_slave_1: entered allmulticast mode [ 797.954456][T10699] bridge_slave_1: entered promiscuous mode [ 798.131598][T10679] hsr_slave_0: entered promiscuous mode [ 798.150962][T10679] hsr_slave_1: entered promiscuous mode [ 798.177641][T10679] debugfs: 'hsr0' already exists in 'hsr' [ 798.183582][T10679] Cannot create hsr debugfs directory [ 798.234022][T10699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.271683][T10699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.329191][T10539] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 798.409463][T10539] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 798.492303][T10539] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 798.519013][T10539] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 798.553800][T10699] team0: Port device team_slave_0 added [ 798.572067][T10699] team0: Port device team_slave_1 added [ 799.302632][T10864] netlink: 88 bytes leftover after parsing attributes in process `syz.8.982'. [ 799.327969][T10864] netlink: 60 bytes leftover after parsing attributes in process `syz.8.982'. [ 799.647729][ T5836] Bluetooth: hci5: command tx timeout [ 799.745389][T10699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.767217][T10699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.797314][T10699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.055172][T10699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.082083][T10699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.158140][T10699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.727981][ T5836] Bluetooth: hci5: command tx timeout [ 801.777245][T10787] chnl_net:caif_netlink_parms(): no params data found [ 802.643504][T10699] hsr_slave_0: entered promiscuous mode [ 802.669877][T10699] hsr_slave_1: entered promiscuous mode [ 802.676173][T10699] debugfs: 'hsr0' already exists in 'hsr' [ 802.722752][T10699] Cannot create hsr debugfs directory [ 803.584786][T10787] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.616242][T10787] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.644504][T10787] bridge_slave_0: entered allmulticast mode [ 803.699255][T10787] bridge_slave_0: entered promiscuous mode [ 803.769016][ T678] bridge_slave_1: left allmulticast mode [ 803.774715][ T678] bridge_slave_1: left promiscuous mode [ 803.789941][ T678] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.812888][ T678] bridge_slave_0: left allmulticast mode [ 803.818824][ T678] bridge_slave_0: left promiscuous mode [ 803.826329][ T678] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.208591][ T678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.225616][ T678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.241256][ T678] bond0 (unregistering): Released all slaves [ 804.259818][T10787] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.269086][T10787] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.276467][T10787] bridge_slave_1: entered allmulticast mode [ 804.296338][T10787] bridge_slave_1: entered promiscuous mode [ 804.307581][ T7610] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 804.488220][ T7610] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 804.517642][ T7610] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 804.530145][T10787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.543319][ T7610] usb 9-1: Product: syz [ 804.554753][ T7610] usb 9-1: Manufacturer: syz [ 804.569868][ T7610] usb 9-1: SerialNumber: syz [ 804.574618][ T678] hsr_slave_0: left promiscuous mode [ 804.587873][ T678] hsr_slave_1: left promiscuous mode [ 804.594361][ T7610] usb 9-1: config 0 descriptor?? [ 804.603521][ T678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.629815][ T678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.089703][ T10] usb 9-1: USB disconnect, device number 5 [ 805.197588][ T678] team0 (unregistering): Port device team_slave_1 removed [ 805.242437][ T678] team0 (unregistering): Port device team_slave_0 removed [ 806.516865][T10787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.140364][T10787] team0: Port device team_slave_0 added [ 807.157238][T10787] team0: Port device team_slave_1 added [ 807.297326][T10539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.485242][T10539] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.541987][T10787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.551716][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.613725][T10787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.644361][T10787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.653310][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.680159][T10787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.705098][T10679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 807.958102][T10952] netlink: 48 bytes leftover after parsing attributes in process `syz.9.992'. [ 808.208772][T10679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 808.290429][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.297725][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.418973][T10679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 808.535711][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.542933][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.587592][T10679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 810.258630][T10787] hsr_slave_0: entered promiscuous mode [ 810.268006][T10787] hsr_slave_1: entered promiscuous mode [ 811.919773][T10699] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 812.143577][T10699] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 812.231733][T10699] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 812.261419][T10699] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 812.297390][ T29] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 812.393782][T10679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.490107][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 812.519394][ T29] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 812.546749][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.553387][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.577322][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 812.600106][ T29] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 812.608904][T10679] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.609654][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.624340][ T29] usb 9-1: Product: syz [ 812.629059][ T29] usb 9-1: Manufacturer: syz [ 812.634062][ T29] usb 9-1: SerialNumber: syz [ 812.652619][ T29] usb 9-1: config 0 descriptor?? [ 812.709173][ T29] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 812.732968][T10539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.757037][ T29] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 812.810556][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.817764][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.923795][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.931050][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.282720][ T29] em28xx 9-1:0.0: unknown em28xx chip ID (86) [ 813.432521][T10787] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 813.502178][ T29] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 813.503899][T10787] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 813.562196][ T29] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 813.628781][T10787] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 813.645863][ T29] em28xx 9-1:0.0: No AC97 audio processor [ 813.691367][T10787] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 813.731668][ T29] usb 9-1: USB disconnect, device number 6 [ 813.800226][ T29] em28xx 9-1:0.0: Disconnecting em28xx [ 813.879564][ T29] em28xx 9-1:0.0: Freeing device [ 814.092430][T10699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.142103][T10539] veth0_vlan: entered promiscuous mode [ 814.280147][T10539] veth1_vlan: entered promiscuous mode [ 814.424876][T10699] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.766120][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.773385][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.114026][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.121296][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.405899][T10679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.515758][T10539] veth0_macvtap: entered promiscuous mode [ 815.682751][T10539] veth1_macvtap: entered promiscuous mode [ 815.818334][T10787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.883118][T10539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.940319][T10539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.109076][T10787] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.213354][ T678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.531241][ T678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.582358][ T678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.626713][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.633942][ T6872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.750919][ T678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.895969][ T678] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.903188][ T678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.280981][T10787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 817.327609][T10787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 817.439660][ T8944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.473162][ T8944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.604433][T10699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.674771][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.690995][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.961154][T10679] veth0_vlan: entered promiscuous mode [ 818.018113][T10679] veth1_vlan: entered promiscuous mode [ 818.058656][T11070] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.1002'. [ 818.186348][T10699] veth0_vlan: entered promiscuous mode [ 818.300444][T10699] veth1_vlan: entered promiscuous mode [ 818.387793][T10679] veth0_macvtap: entered promiscuous mode [ 818.428244][T10679] veth1_macvtap: entered promiscuous mode [ 818.443729][T10787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.470875][T10699] veth0_macvtap: entered promiscuous mode [ 818.495338][T10679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.536037][T10679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.570451][T10699] veth1_macvtap: entered promiscuous mode [ 818.642612][ T678] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.674398][T10699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.688109][ T678] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.758833][ T678] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.787850][ T678] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.853290][T10699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.267302][ T8944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.977297][ T8944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.233909][ T30] audit: type=1800 audit(1771875577.848:1563): pid=11095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1003" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 820.258154][ T6872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.268105][ T8944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.289316][T11095] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 820.307498][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 820.316181][T11095] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 820.318787][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 820.336395][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 820.344789][ T6872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.354681][T11095] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 820.363965][ T8944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.384057][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 820.393037][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 820.581513][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.677203][ T5148] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 820.865522][ T5148] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 820.916188][ T5148] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.963197][ T5148] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 821.020018][ T5148] usb 9-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 821.063241][ T5148] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.160040][ T5148] usb 9-1: config 0 descriptor?? [ 821.589602][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.780869][ T5148] ntrig 0003:1B96:0004.0003: unbalanced delimiter at end of report description [ 821.804344][ T5148] ntrig 0003:1B96:0004.0003: parse failed [ 821.806744][ T6872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.819806][ T5148] ntrig 0003:1B96:0004.0003: probe with driver ntrig failed with error -22 [ 821.844001][ T6872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.882834][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.219986][ T5922] usb 9-1: USB disconnect, device number 7 [ 822.447030][ T5836] Bluetooth: hci1: command tx timeout [ 823.037428][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.149145][T11124] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.959'. [ 823.349476][ T6872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.394630][ T6872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.440285][T10787] veth0_vlan: entered promiscuous mode [ 823.767992][T11144] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.1012'. [ 824.529564][ T5836] Bluetooth: hci1: command tx timeout [ 825.464586][T10787] veth1_vlan: entered promiscuous mode [ 825.553507][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.600679][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.973468][ T36] bridge_slave_1: left allmulticast mode [ 825.991015][ T36] bridge_slave_1: left promiscuous mode [ 826.004767][T11164] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.1014'. [ 826.069249][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.199986][ T36] bridge_slave_0: left allmulticast mode [ 826.226125][ T36] bridge_slave_0: left promiscuous mode [ 826.258953][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.608343][ T5836] Bluetooth: hci1: command tx timeout [ 827.777882][ C0] hrtimer: interrupt took 52421 ns [ 828.155352][T11182] xt_recent: Unsupported userspace flags (000000de) [ 828.687580][ T5836] Bluetooth: hci1: command tx timeout [ 829.452230][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.508041][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.610283][ T36] bond0 (unregistering): Released all slaves [ 829.738477][T11102] chnl_net:caif_netlink_parms(): no params data found [ 829.813962][T11199] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1021'. [ 829.878779][T10787] veth0_macvtap: entered promiscuous mode [ 830.196718][T10787] veth1_macvtap: entered promiscuous mode [ 830.297914][T11208] syzkaller0: entered promiscuous mode [ 830.303442][T11208] syzkaller0: entered allmulticast mode [ 831.355002][T11221] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.1025'. [ 834.364998][ T36] hsr_slave_0: left promiscuous mode [ 834.427964][ T36] hsr_slave_1: left promiscuous mode [ 834.477498][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.495263][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.557040][ T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 834.558507][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.583518][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.636501][T11252] xt_recent: Unsupported userspace flags (000000de) [ 834.671647][ T36] veth1_macvtap: left promiscuous mode [ 834.677450][ T36] veth0_macvtap: left promiscuous mode [ 834.683036][ T36] veth1_vlan: left promiscuous mode [ 834.697733][ T36] veth0_vlan: left promiscuous mode [ 834.732241][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 834.832298][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.864896][ T29] usb 1-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 834.897138][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.995275][ T29] usb 1-1: config 0 descriptor?? [ 835.428833][T11260] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.1034'. [ 835.443739][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 835.473205][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 835.515191][ T29] usb 1-1: USB disconnect, device number 3 [ 836.025850][ T36] team0 (unregistering): Port device team_slave_1 removed [ 836.057638][ T36] team0 (unregistering): Port device team_slave_0 removed [ 836.796152][ T30] audit: type=1800 audit(1771875594.408:1564): pid=11231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1028" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 836.830454][T11102] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.838314][T11231] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 836.868116][T11102] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.875450][T11102] bridge_slave_0: entered allmulticast mode [ 836.881797][T11231] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 836.926683][T11231] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 836.956688][T11102] bridge_slave_0: entered promiscuous mode [ 836.998208][T10787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.201078][T11280] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1038'. [ 837.210880][T11102] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.258571][T11102] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.311943][T11102] bridge_slave_1: entered allmulticast mode [ 837.361245][T11102] bridge_slave_1: entered promiscuous mode [ 837.511759][T10787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.288266][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.335748][T11102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.457794][T11102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.557135][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.657010][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.666585][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.972227][T11102] team0: Port device team_slave_0 added [ 839.923666][ T12] [ 839.926088][ T12] ============================================ [ 839.932280][ T12] WARNING: possible recursive locking detected [ 839.938422][ T12] syzkaller #0 Tainted: G L [ 839.944471][ T12] -------------------------------------------- [ 839.950602][ T12] kworker/u8:0/12 is trying to acquire lock: [ 839.956572][ T12] ffff888091ec1ce0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x1a2/0x860 [ 839.965911][ T12] [ 839.965911][ T12] but task is already holding lock: [ 839.973266][ T12] ffff888091ec1ce0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x1c/0xc0 [ 839.982787][ T12] [ 839.982787][ T12] other info that might help us debug this: [ 839.990832][ T12] Possible unsafe locking scenario: [ 839.990832][ T12] [ 839.998270][ T12] CPU0 [ 840.001534][ T12] ---- [ 840.004797][ T12] lock(k-sk_lock-AF_INET6); [ 840.009489][ T12] lock(k-sk_lock-AF_INET6); [ 840.014170][ T12] [ 840.014170][ T12] *** DEADLOCK *** [ 840.014170][ T12] [ 840.022296][ T12] May be due to missing lock nesting notation [ 840.022296][ T12] [ 840.030600][ T12] 4 locks held by kworker/u8:0/12: [ 840.035696][ T12] #0: ffff88802c812148 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 840.046879][ T12] #1: ffffc90000117d08 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 840.059111][ T12] #2: ffff888091ec1ce0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x1c/0xc0 [ 840.069080][ T12] #3: ffff888091ec1e88 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x90/0x790 [ 840.079087][ T12] [ 840.079087][ T12] stack backtrace: [ 840.084990][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.085040][ T12] Tainted: [L]=SOFTLOCKUP [ 840.085117][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 840.085146][ T12] Workqueue: krds_cp_wq#4/0 rds_send_worker [ 840.085209][ T12] Call Trace: [ 840.085260][ T12] [ 840.085277][ T12] dump_stack_lvl+0x100/0x190 [ 840.085334][ T12] print_deadlock_bug.cold+0xbd/0xca [ 840.085392][ T12] __lock_acquire+0x12bb/0x2630 [ 840.085450][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.085493][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.085545][ T12] lock_acquire+0x1cf/0x380 [ 840.085595][ T12] ? inet6_getname+0x1a2/0x860 [ 840.085641][ T12] lock_sock_nested+0x41/0xf0 [ 840.085676][ T12] ? inet6_getname+0x1a2/0x860 [ 840.085714][ T12] inet6_getname+0x1a2/0x860 [ 840.085756][ T12] rds_tcp_get_peer_sport+0x7c/0x110 [ 840.085792][ T12] ? __pfx_rds_tcp_get_peer_sport+0x10/0x10 [ 840.085835][ T12] ? find_held_lock+0x2b/0x80 [ 840.085875][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.085917][ T12] ? rds_addr_cmp+0x10d/0x150 [ 840.085963][ T12] rds_tcp_conn_slots_available+0x279/0x390 [ 840.085999][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 840.086046][ T12] rds_recv_hs_exthdrs+0x5cb/0x7e0 [ 840.086092][ T12] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 840.086142][ T12] rds_recv_incoming+0xdbf/0x1150 [ 840.086185][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.086228][ T12] ? __pfx_rds_recv_incoming+0x10/0x10 [ 840.086269][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.086311][ T12] ? skb_copy_bits+0x5c8/0x8d0 [ 840.086349][ T12] rds_tcp_data_recv+0x278/0xce0 [ 840.086389][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.086431][ T12] ? tcp_recv_skb+0x2a4/0x400 [ 840.086480][ T12] __tcp_read_sock+0x204/0x8d0 [ 840.086605][ T12] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 840.086643][ T12] ? __pfx___tcp_read_sock+0x10/0x10 [ 840.086693][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.086736][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.086782][ T12] rds_tcp_read_sock+0x12e/0x280 [ 840.086820][ T12] ? __pfx_rds_tcp_read_sock+0x10/0x10 [ 840.086854][ T12] ? lock_acquire+0x1cf/0x380 [ 840.086904][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.086948][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.086990][ T12] ? __sk_mem_schedule+0xd0/0x100 [ 840.087031][ T12] ? __pfx_sock_def_readable+0x10/0x10 [ 840.087062][ T12] rds_tcp_data_ready+0x1c9/0x790 [ 840.087097][ T12] ? tcp_data_ecn_check+0x1c0/0x750 [ 840.087142][ T12] tcp_data_ready+0x114/0x5a0 [ 840.087192][ T12] tcp_data_queue+0x1aca/0x4fd0 [ 840.087282][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.087325][ T12] ? tcp_urg+0x10f/0xb80 [ 840.087364][ T12] ? __pfx_tcp_data_queue+0x10/0x10 [ 840.087413][ T12] ? tcp_ecn_create_request+0x800/0x8d0 [ 840.087455][ T12] ? lockdep_hardirqs_on+0x78/0x100 [ 840.087500][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.087548][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.087589][ T12] ? ktime_get+0x1a7/0x300 [ 840.087639][ T12] tcp_rcv_established+0xb64/0x3980 [ 840.087696][ T12] ? __pfx_tcp_rcv_established+0x10/0x10 [ 840.087748][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.087795][ T12] tcp_v6_do_rcv+0x118b/0x1dd0 [ 840.087842][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.087886][ T12] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 840.087929][ T12] __release_sock+0x151/0x440 [ 840.087971][ T12] release_sock+0x5a/0x220 [ 840.088005][ T12] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 840.088045][ T12] rds_send_xmit+0x17cb/0x2950 [ 840.088103][ T12] ? __pfx_rds_send_xmit+0x10/0x10 [ 840.088147][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.088194][ T12] rds_send_worker+0x94/0x320 [ 840.088242][ T12] process_one_work+0x9d7/0x1920 [ 840.088309][ T12] ? __pfx_process_one_work+0x10/0x10 [ 840.088365][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.088414][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.088460][ T12] worker_thread+0x5da/0xe40 [ 840.088500][ T12] ? kthread+0x13a/0x450 [ 840.088556][ T12] ? __pfx_worker_thread+0x10/0x10 [ 840.088586][ T12] kthread+0x370/0x450 [ 840.088636][ T12] ? __pfx_kthread+0x10/0x10 [ 840.088689][ T12] ret_from_fork+0x754/0xd80 [ 840.088747][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 840.088803][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.088844][ T12] ? __switch_to+0x7b4/0x1120 [ 840.088882][ T12] ? __pfx_kthread+0x10/0x10 [ 840.088935][ T12] ret_from_fork_asm+0x1a/0x30 [ 840.088984][ T12] [ 840.533498][ T12] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 840.542287][ T12] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12, name: kworker/u8:0 [ 840.551412][ T12] preempt_count: 201, expected: 0 [ 840.556424][ T12] RCU nest depth: 0, expected: 0 [ 840.561362][ T12] INFO: lockdep is turned off. [ 840.566103][ T12] Preemption disabled at: [ 840.566115][ T12] [<0000000000000000>] 0x0 [ 840.574849][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.574890][ T12] Tainted: [L]=SOFTLOCKUP [ 840.574967][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 840.574988][ T12] Workqueue: krds_cp_wq#4/0 rds_send_worker [ 840.575032][ T12] Call Trace: [ 840.575043][ T12] [ 840.575054][ T12] dump_stack_lvl+0x100/0x190 [ 840.575098][ T12] __might_resched.cold+0x1ec/0x232 [ 840.575137][ T12] ? __pfx___might_resched+0x10/0x10 [ 840.575170][ T12] lock_sock_nested+0x52/0xf0 [ 840.575198][ T12] ? inet6_getname+0x1a2/0x860 [ 840.575231][ T12] inet6_getname+0x1a2/0x860 [ 840.575265][ T12] rds_tcp_get_peer_sport+0x7c/0x110 [ 840.575294][ T12] ? __pfx_rds_tcp_get_peer_sport+0x10/0x10 [ 840.575347][ T12] ? find_held_lock+0x2b/0x80 [ 840.575380][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.575414][ T12] ? rds_addr_cmp+0x10d/0x150 [ 840.575451][ T12] rds_tcp_conn_slots_available+0x279/0x390 [ 840.575480][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 840.575512][ T12] rds_recv_hs_exthdrs+0x5cb/0x7e0 [ 840.575556][ T12] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 840.575597][ T12] rds_recv_incoming+0xdbf/0x1150 [ 840.575632][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.575667][ T12] ? __pfx_rds_recv_incoming+0x10/0x10 [ 840.575699][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.575733][ T12] ? skb_copy_bits+0x5c8/0x8d0 [ 840.575764][ T12] rds_tcp_data_recv+0x278/0xce0 [ 840.575803][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.575836][ T12] ? tcp_recv_skb+0x2a4/0x400 [ 840.575876][ T12] __tcp_read_sock+0x204/0x8d0 [ 840.575919][ T12] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 840.575948][ T12] ? __pfx___tcp_read_sock+0x10/0x10 [ 840.575989][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.576024][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.576061][ T12] rds_tcp_read_sock+0x12e/0x280 [ 840.576089][ T12] ? __pfx_rds_tcp_read_sock+0x10/0x10 [ 840.576116][ T12] ? lock_acquire+0x1cf/0x380 [ 840.576157][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.576193][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.576227][ T12] ? __sk_mem_schedule+0xd0/0x100 [ 840.576261][ T12] ? __pfx_sock_def_readable+0x10/0x10 [ 840.576286][ T12] rds_tcp_data_ready+0x1c9/0x790 [ 840.576314][ T12] ? tcp_data_ecn_check+0x1c0/0x750 [ 840.576349][ T12] tcp_data_ready+0x114/0x5a0 [ 840.576390][ T12] tcp_data_queue+0x1aca/0x4fd0 [ 840.576434][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.576468][ T12] ? tcp_urg+0x10f/0xb80 [ 840.576499][ T12] ? __pfx_tcp_data_queue+0x10/0x10 [ 840.576543][ T12] ? tcp_ecn_create_request+0x800/0x8d0 [ 840.576607][ T12] ? lockdep_hardirqs_on+0x78/0x100 [ 840.576638][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.576672][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.576706][ T12] ? ktime_get+0x1a7/0x300 [ 840.576744][ T12] tcp_rcv_established+0xb64/0x3980 [ 840.576801][ T12] ? __pfx_tcp_rcv_established+0x10/0x10 [ 840.576860][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.576924][ T12] tcp_v6_do_rcv+0x118b/0x1dd0 [ 840.576963][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.576998][ T12] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 840.577034][ T12] __release_sock+0x151/0x440 [ 840.577069][ T12] release_sock+0x5a/0x220 [ 840.577095][ T12] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 840.577128][ T12] rds_send_xmit+0x17cb/0x2950 [ 840.577174][ T12] ? __pfx_rds_send_xmit+0x10/0x10 [ 840.577210][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.577249][ T12] rds_send_worker+0x94/0x320 [ 840.577287][ T12] process_one_work+0x9d7/0x1920 [ 840.577341][ T12] ? __pfx_process_one_work+0x10/0x10 [ 840.577386][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.577426][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.577463][ T12] worker_thread+0x5da/0xe40 [ 840.577494][ T12] ? kthread+0x13a/0x450 [ 840.577542][ T12] ? __pfx_worker_thread+0x10/0x10 [ 840.577566][ T12] kthread+0x370/0x450 [ 840.577607][ T12] ? __pfx_kthread+0x10/0x10 [ 840.577650][ T12] ret_from_fork+0x754/0xd80 [ 840.577695][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 840.577740][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 840.577773][ T12] ? __switch_to+0x7b4/0x1120 [ 840.577803][ T12] ? __pfx_kthread+0x10/0x10 [ 840.577847][ T12] ret_from_fork_asm+0x1a/0x30 [ 840.577887][ T12] [ 841.003351][ T12] BUG: scheduling while atomic: kworker/u8:0/12/0x00000202 [ 841.010633][ T12] INFO: lockdep is turned off. [ 841.015392][ T12] Modules linked in: [ 841.019373][ T12] Preemption disabled at: [ 841.019386][ T12] [<0000000000000000>] 0x0 [ 841.028111][ T12] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 841.036862][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W L syzkaller #0 PREEMPT(full) [ 841.047731][ T12] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 841.052925][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 841.063008][ T12] Workqueue: krds_cp_wq#4/0 rds_send_worker [ 841.068927][ T12] Call Trace: [ 841.072199][ T12] [ 841.075116][ T12] dump_stack_lvl+0x100/0x190 [ 841.079917][ T12] vpanic+0x552/0x970 [ 841.083904][ T12] ? __pfx_vpanic+0x10/0x10 [ 841.088405][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 841.093443][ T12] ? rcu_is_watching+0x12/0xc0 [ 841.098220][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.103870][ T12] panic+0xd1/0xe0 [ 841.107602][ T12] ? __pfx_panic+0x10/0x10 [ 841.112029][ T12] ? __pfx_print_modules+0x10/0x10 [ 841.117187][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.122832][ T12] ? check_panic_on_warn+0x1f/0x90 [ 841.128050][ T12] check_panic_on_warn.cold+0x19/0x34 [ 841.133517][ T12] __schedule_bug.cold+0xca/0xfa [ 841.138471][ T12] __schedule+0x3be1/0x60e0 [ 841.142973][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.148647][ T12] ? _printk+0xcf/0x110 [ 841.152804][ T12] ? __pfx__printk+0x10/0x10 [ 841.157398][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.163041][ T12] ? do_raw_spin_lock+0x128/0x260 [ 841.168076][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 841.173456][ T12] ? prepare_to_wait_exclusive+0xdc/0x2c0 [ 841.179186][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.184835][ T12] ? __pfx___schedule+0x10/0x10 [ 841.189690][ T12] ? rcu_is_watching+0x12/0xc0 [ 841.194559][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.200206][ T12] ? lock_release+0x263/0x320 [ 841.204982][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.210629][ T12] schedule+0xdd/0x390 [ 841.214707][ T12] __lock_sock+0x147/0x270 [ 841.219218][ T12] ? __pfx___lock_sock+0x10/0x10 [ 841.224168][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.229813][ T12] ? __pfx_autoremove_wake_function+0x10/0x10 [ 841.235901][ T12] ? __pfx___might_resched+0x10/0x10 [ 841.241280][ T12] lock_sock_nested+0xda/0xf0 [ 841.246051][ T12] inet6_getname+0x1a2/0x860 [ 841.250656][ T12] rds_tcp_get_peer_sport+0x7c/0x110 [ 841.255947][ T12] ? __pfx_rds_tcp_get_peer_sport+0x10/0x10 [ 841.261855][ T12] ? find_held_lock+0x2b/0x80 [ 841.266544][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.272185][ T12] ? rds_addr_cmp+0x10d/0x150 [ 841.276880][ T12] rds_tcp_conn_slots_available+0x279/0x390 [ 841.282861][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 841.289467][ T12] rds_recv_hs_exthdrs+0x5cb/0x7e0 [ 841.294606][ T12] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 841.300262][ T12] rds_recv_incoming+0xdbf/0x1150 [ 841.305302][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.310945][ T12] ? __pfx_rds_recv_incoming+0x10/0x10 [ 841.316413][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.322145][ T12] ? skb_copy_bits+0x5c8/0x8d0 [ 841.326927][ T12] rds_tcp_data_recv+0x278/0xce0 [ 841.331874][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.337527][ T12] ? tcp_recv_skb+0x2a4/0x400 [ 841.342218][ T12] __tcp_read_sock+0x204/0x8d0 [ 841.346998][ T12] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 841.352460][ T12] ? __pfx___tcp_read_sock+0x10/0x10 [ 841.357760][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.363403][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.369062][ T12] rds_tcp_read_sock+0x12e/0x280 [ 841.374041][ T12] ? __pfx_rds_tcp_read_sock+0x10/0x10 [ 841.379507][ T12] ? lock_acquire+0x1cf/0x380 [ 841.384291][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.389930][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.395568][ T12] ? __sk_mem_schedule+0xd0/0x100 [ 841.400593][ T12] ? __pfx_sock_def_readable+0x10/0x10 [ 841.406046][ T12] rds_tcp_data_ready+0x1c9/0x790 [ 841.411075][ T12] ? tcp_data_ecn_check+0x1c0/0x750 [ 841.416299][ T12] tcp_data_ready+0x114/0x5a0 [ 841.420987][ T12] tcp_data_queue+0x1aca/0x4fd0 [ 841.425862][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.431516][ T12] ? tcp_urg+0x10f/0xb80 [ 841.436032][ T12] ? __pfx_tcp_data_queue+0x10/0x10 [ 841.441245][ T12] ? tcp_ecn_create_request+0x800/0x8d0 [ 841.446806][ T12] ? lockdep_hardirqs_on+0x78/0x100 [ 841.452054][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.457734][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.463374][ T12] ? ktime_get+0x1a7/0x300 [ 841.467826][ T12] tcp_rcv_established+0xb64/0x3980 [ 841.473048][ T12] ? __pfx_tcp_rcv_established+0x10/0x10 [ 841.478691][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.484421][ T12] tcp_v6_do_rcv+0x118b/0x1dd0 [ 841.489194][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.494929][ T12] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 841.500054][ T12] __release_sock+0x151/0x440 [ 841.504911][ T12] release_sock+0x5a/0x220 [ 841.509319][ T12] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 841.515561][ T12] rds_send_xmit+0x17cb/0x2950 [ 841.520345][ T12] ? __pfx_rds_send_xmit+0x10/0x10 [ 841.525470][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.531167][ T12] rds_send_worker+0x94/0x320 [ 841.535864][ T12] process_one_work+0x9d7/0x1920 [ 841.540834][ T12] ? __pfx_process_one_work+0x10/0x10 [ 841.546222][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.551865][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.557507][ T12] worker_thread+0x5da/0xe40 [ 841.562170][ T12] ? kthread+0x13a/0x450 [ 841.566423][ T12] ? __pfx_worker_thread+0x10/0x10 [ 841.571539][ T12] kthread+0x370/0x450 [ 841.575631][ T12] ? __pfx_kthread+0x10/0x10 [ 841.580671][ T12] ret_from_fork+0x754/0xd80 [ 841.585282][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 841.590524][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 841.596217][ T12] ? __switch_to+0x7b4/0x1120 [ 841.600893][ T12] ? __pfx_kthread+0x10/0x10 [ 841.605493][ T12] ret_from_fork_asm+0x1a/0x30 [ 841.610270][ T12] [ 841.613804][ T12] Kernel Offset: disabled [ 841.618158][ T12] Rebooting in 86400 seconds..