last executing test programs: 14m54.803309879s ago: executing program 4 (id=160): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setregid(0xffffffffffffffff, r0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') lseek(r5, 0x3, 0x0) getdents64(r5, 0xffffffffffffffff, 0x43) 14m38.443932239s ago: executing program 32 (id=160): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setregid(0xffffffffffffffff, r0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') lseek(r5, 0x3, 0x0) getdents64(r5, 0xffffffffffffffff, 0x43) 12m27.774347135s ago: executing program 33 (id=323): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f0000004000)={0x2020}, 0x2020) mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc34d, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x200000, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12m6.988175852s ago: executing program 34 (id=349): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d3, &(0x7f0000000100)) setregid(0xffffffffffffffff, r0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') lseek(r7, 0x3, 0x0) getdents64(r7, 0xffffffffffffffff, 0x43) 11m13.532487049s ago: executing program 35 (id=415): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0), 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000100)=""/119) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) accept4(r7, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0xd, 0x2, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 10m52.635977427s ago: executing program 1 (id=452): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0xf, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="147b0000d8e017885b0e76c1238b403b33d7c3030000ce31df21d865fd1589764980c44cf76c1ed4f96417", @ANYRES16=r4, @ANYBLOB="310428bd70000000000016000000"], 0x14}}, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="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", 0x351}], 0x1}}], 0x1, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 10m47.099487519s ago: executing program 1 (id=455): close(0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000400)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000062b000/0x2000)=nil, 0x1d5000, 0x40000000, 0x3, &(0x7f00009f6000/0x3000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) semctl$SETVAL(0x0, 0x22f6a273abb842f6, 0x10, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x6, 0xfffffffffffffffb}, {0x7, 0x100000001}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) 10m45.137307343s ago: executing program 1 (id=459): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0xf, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r3, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="f4c44888112286b0fcc69bd757ce93cb07d0fc06a737181e6d631bd33a045797a61ef10ed40bacc74ba22a30e95fee563e80a7b72785c9228135c08735074fa67b37265ed7c02c4ef3daa92203a132a03495015e1851e0c1ae6dbc065e5ce1a13628125962461d87568872f86754722903d8ea82ad4cc576bf23aa3c6e7698d4b1782e73437f4d3764fa218a906fece5ac822b235c663e8bab4b2a97d17de35fed53d6c3975d49c1b70a818a3b4b0b817611fd3e35cb404fbae19a2ccd774555fa4114264ee3f816868884152efbe74d74e848d99bcd3dadb274deb9dc820c78eaf983dfc234154e0b719c1e0a07710ffed4e0b283973e0d045ba23381c5ece9a52bec1937d95cec17e6ea7c387eef4a3412c18a78678283c97d20cd5860f0bd35e629cb541a965d5c1437f2580abdc1153e58614d2e8fd41478a5ee9aca37864e0a9f918c95e5dc45e011d60e53fed228f181f9fa80b1c9737c484298652b92ef7a0508fde423e178c6acfc33b67fcf516c4d93475715e908451ecc559152b20ac01da50697da05effe671f960a5b4b5392a95dd99fbf0b7fb0bd9d8077dad3a5e268dd8a013ef4014b4f1c11e0072d8f537fd6590317c3e9435ef43a7093d87694d7cbf0a35edca939294e580f2a7b04dd2884186c0e5977b7c836749d00c6ffa8c0796a4be2db5b14d83f843b7df9dc8bd7d09b24ac70221284042898b1c60b863a3ee69a8d78c7c5f851beef3fb7f33a0556eac8156d78e9b4945fa403cd84d1da7617daa4e8007f3a8acd9f442d8b3a7f4900a9358c0bb195d713a63a7d74b353606789d5737ab41e20743341d63d62e3aa272b37af8cb203f165eb24f397707a931c8131ae900e53a0112c313363ec80ad3f150390459399e7018b4e25ee427a219ef31f618b3375082c43e89132b277452bcfba5c3ab0859c27e6b1d6827af1811e06eeb2e528d3c13fb3180f69a741802e6bc2ec61be51ae78f3813d56a1ade11d778b6e4c5c3bc648ad9a96b060178518b6191eff547597c4f0e4dbf332516b0366a37254994258a66182ad492bcb1cdfa8d68d2685acaabc679b6a4db24e6f2de5e5647ba49cbf4f331927d709c56f0927e9485961f1c6c8044439f80860533ae2de9bf5fdffe28f46f278b6ccab75445488565ddf38170cda172f270e19417e16f840fea8d09fdf85b53951", 0x351}], 0x1}}], 0x1, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 10m42.669872638s ago: executing program 1 (id=461): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0xf, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="147b0000d8e017885b0e76c1238b403b33d7c3030000ce31df21d865fd1589764980c44cf76c1ed4f96417", @ANYRES16=r4, @ANYBLOB="310428bd70000000000016000000"], 0x14}}, 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r3, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="f4c44888112286b0fcc69bd757ce93cb07d0fc06a737181e6d631bd33a045797a61ef10ed40bacc74ba22a30e95fee563e80a7b72785c9228135c08735074fa67b37265ed7c02c4ef3daa92203a132a03495015e1851e0c1ae6dbc065e5ce1a13628125962461d87568872f86754722903d8ea82ad4cc576bf23aa3c6e7698d4b1782e73437f4d3764fa218a906fece5ac822b235c663e8bab4b2a97d17de35fed53d6c3975d49c1b70a818a3b4b0b817611fd3e35cb404fbae19a2ccd774555fa4114264ee3f816868884152efbe74d74e848d99bcd3dadb274deb9dc820c78eaf983dfc234154e0b719c1e0a07710ffed4e0b283973e0d045ba23381c5ece9a52bec1937d95cec17e6ea7c387eef4a3412c18a78678283c97d20cd5860f0bd35e629cb541a965d5c1437f2580abdc1153e58614d2e8fd41478a5ee9aca37864e0a9f918c95e5dc45e011d60e53fed228f181f9fa80b1c9737c484298652b92ef7a0508fde423e178c6acfc33b67fcf516c4d93475715e908451ecc559152b20ac01da50697da05effe671f960a5b4b5392a95dd99fbf0b7fb0bd9d8077dad3a5e268dd8a013ef4014b4f1c11e0072d8f537fd6590317c3e9435ef43a7093d87694d7cbf0a35edca939294e580f2a7b04dd2884186c0e5977b7c836749d00c6ffa8c0796a4be2db5b14d83f843b7df9dc8bd7d09b24ac70221284042898b1c60b863a3ee69a8d78c7c5f851beef3fb7f33a0556eac8156d78e9b4945fa403cd84d1da7617daa4e8007f3a8acd9f442d8b3a7f4900a9358c0bb195d713a63a7d74b353606789d5737ab41e20743341d63d62e3aa272b37af8cb203f165eb24f397707a931c8131ae900e53a0112c313363ec80ad3f150390459399e7018b4e25ee427a219ef31f618b3375082c43e89132b277452bcfba5c3ab0859c27e6b1d6827af1811e06eeb2e528d3c13fb3180f69a741802e6bc2ec61be51ae78f3813d56a1ade11d778b6e4c5c3bc648ad9a96b060178518b6191eff547597c4f0e4dbf332516b0366a37254994258a66182ad492bcb1cdfa8d68d2685acaabc679b6a4db24e6f2de5e5647ba49cbf4f331927d709c56f0927e9485961f1c6c8044439f80860533ae2de9bf5fdffe28f46f278b6ccab75445488565ddf38170cda172f270e19417e16f840fea8d09fdf85b53951", 0x351}], 0x1}}], 0x1, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 10m40.92108223s ago: executing program 1 (id=463): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[], 0x5c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(r0, &(0x7f0000000500)='net/ip6_tables_matches\x00') r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000000)=""/142, 0x8e}, {0x0}], 0x2, 0x0, 0xc19) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) r7 = syz_open_procfs(r0, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x8, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0x5453, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10m37.943978473s ago: executing program 1 (id=466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x87) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000300)={0x0, 0xfffffff3}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, 0x0, 0x810) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r6, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) socket$nl_route(0x10, 0x3, 0x0) socket(0x8, 0xa, 0xfffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 10m22.413313041s ago: executing program 36 (id=466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x87) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000300)={0x0, 0xfffffff3}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, 0x0, 0x810) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r6, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) socket$nl_route(0x10, 0x3, 0x0) socket(0x8, 0xa, 0xfffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 9m38.886344096s ago: executing program 4 (id=483): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000200)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@i_version}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x4}}, {@inlinecrypt}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@quota}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000004000d80a70068f8665e38eabbac000088567b2d68be474f28ea1a786a1dfc26a2aa01791455a414aeb92450a8f3d4331b23465ad539f876cf6731c4c27edc03d00256725c2d2234b5644d448d4560024df9b43c85b0b8b034b140ed461396ba5ed2dc716e3aff949ff8a1d99482ad39930012f0d62cdb"], 0x68}}, 0x4000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000180)=""/79, 0x4f}], 0x2, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000840)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000940)=0xeb) statx(r0, &(0x7f0000000980)='./file1\x00', 0x800, 0x80, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9m34.15738846s ago: executing program 4 (id=522): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) bind$alg(0xffffffffffffffff, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x80000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000001dc0)=0xfffffffd, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000200)={0x409a090a, 0x101, "eb38845cf6f2e168f59e5c708b4cddb9f54e0bd29a8afaea3096d9061a2df0c1", 0x10001, 0x1, 0x1000000, 0x0, 0x1000, 0xc, 0x400009, 0x8, [0x5, 0x2, 0x4, 0xe]}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x20010, r7, 0xa8799000) 9m29.317512925s ago: executing program 4 (id=525): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5c1, 0xfffffffffffffffb) keyctl$update(0x2, r2, &(0x7f0000000000)="11868a0fceae284c00000001", 0xc) bind$x25(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000500)={[], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fowner_gt}, {@permit_directio}, {@subj_user={'subj_user', 0x3d, '-&[[,'}}, {@dont_measure}, {@appraise_type}]}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000580001804400040020000112f2fa860000000000ff01000000000000000000000000100101ffffff200002000a00000000000000ff020000000000000000000000000001000000000d000100"], 0x6c}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x2e24, @empty}, 0x10) close(r6) syz_genetlink_get_family_id$devlink(0x0, r3) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000087300fec00000000000000000000000000000ff0200"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380), 0x0, 0x34000, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000043c0)=""/4097, &(0x7f00000000c0)=0x1001) 9m23.836338255s ago: executing program 4 (id=534): openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x240100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000380)={0x2, @vbi={0x97, 0x3, 0x105, 0x30314752, [0x6, 0x3], [0x2, 0x10002], 0x1}}) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2, 0x10000, 0xff, 0x80000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000500)=ANY=[], 0x3, 0x224, &(0x7f0000001c40)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x702, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x802}, &(0x7f00000000c0), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 9m20.394960515s ago: executing program 4 (id=537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x80) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$SIOCAX25OPTRT(r4, 0x89e7, 0x0) 9m4.333018007s ago: executing program 37 (id=537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x80) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$SIOCAX25OPTRT(r4, 0x89e7, 0x0) 8m41.941052058s ago: executing program 8 (id=577): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x2810000, &(0x7f0000000180), 0x1, 0x54f, &(0x7f0000000b00)="$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") r2 = socket(0x848000000015, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x20044080) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) io_uring_setup(0x2f41, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) 8m36.740601775s ago: executing program 8 (id=585): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0xf, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r3, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="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", 0x351}], 0x1}}], 0x1, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 8m32.505782693s ago: executing program 8 (id=590): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRES8=r3, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x11, 0x10012, r4, 0x654b3000) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000380)='./bus\x00') setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x2, 0x4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000400)=0xf) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200002, &(0x7f0000000200)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRES8], 0x11, 0x2d2, &(0x7f0000000bc0)="$eJzs3U1rE1scx/HfmaRteht6pw+XC3fZa0E3UutG3KRIXoS4ELWJUAwVbQV1YxVXIrp371vwLQhuFN+Arlz5AiIII+fMZJJJJzMxNDMNfj9gmMycM+d/Mg/n/AfsCMAf60rzy9uL3+w/I1VUkV5cljxJNakq6R/9W3uwf7h32Gm3MvbTDRxbyyisaY4V2t1vp9WtKaoR8e23quqD6zAdQRDsfJV0UHYgKJW7+lN40kJ0dbrttcIjy/Z0wnpHJxzHrDFddfVQy2XHAQAoVzT+e9E4X4/m754nbUbD/qkc/yfVLTuAqQsytw6M/y7LCow9vn+7Tf18z6VwdrvXyxLHaXlu6Pu8wjMrMcE0eVmli8VbvL3XaZ/fvdtpeXqmRmSg2Lr7bIWnbk9OtBspuWmGMfpu0meUS64Pc7YP2yPiX5uwxYmZD+aTuW58vVErnv9VA2MPkztS/tCRCuPfGr1H10vfllJ022g0Gl6iyIpr5L+ohUhOL2vpGYl6Z9SKkg8I/Lw4Xa3VoVph7y7k1FoLa+0sJmpt976NqLWeaMv2Jj6bR7c3beaVuWo29F3v1ByY/3s2vk1lXpn9q8ZshkOB+8XD/synN1d1+/SPjRxHulZProl/xYVRof/IvqdhyJOMbS91S5e0fPDo8Z1Kp9O+bxdupizcq8dr5p5LqWVKWPDUX6Oj/qYFhQ8ij9XqDUpFhnruRHdo7x+5he1VVkgHT82ZUMZC82OxJ1IZCwXdo1Cq/kHPLfq+kIBQNDfvCvO/gXxly0327IefMU/PnZBFewzsHDvOgGqJ+qtu6a/fyuCWRmdw4+Zc/5+VzsSrfgY5LfpRnLMhyJr6Waapz7rB838AAAAAAAAAAAAAAAAAAIBZU8R/Jyi7jwAAAAAAAAAAAAAAAAAAAAAAzLr4/b/qvf9X473/d/gvf1fCN7ycyPt/X++L9/8C0/crAAD//zZmik0=") socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040), 0xfea0) 8m27.086834339s ago: executing program 8 (id=593): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x10) dup2(r2, r2) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000440)={'\x00', 0x0, 0x7fff, 0xffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) close(r3) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0xf7, 0x1, 0x20000}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="2c385aa3", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x80000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000280)=0xc) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0xe, 0x5, 0x3, 0x4, 0xd9, r6}) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=@newchain={0x24, 0x64, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7ff2}, {0x9, 0xd}, {0xe, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044451}, 0x801) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 8m21.821143471s ago: executing program 8 (id=601): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x10001, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) unshare(0x4000400) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000100)={0x20, r5, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x1, 0x0, &(0x7f00000001c0)=[{0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r5, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLL', 0xe, 0x1c}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000340)={0x18, r5, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r5, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f00000003c0)={0x18, r5}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r5, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r6, r5, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000500)={0x18, r6, 0x3, 0x1c}) 8m19.524418108s ago: executing program 8 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000"], 0x48) io_setup(0x9, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) getdents(r5, 0x0, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x3c, r7, 0xc31, 0x0, 0x1, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4021}, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0x0, 0x0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0xc8, 0x2}) 8m2.003681603s ago: executing program 38 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000"], 0x48) io_setup(0x9, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) getdents(r5, 0x0, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x3c, r7, 0xc31, 0x0, 0x1, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4021}, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0x0, 0x0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0xc8, 0x2}) 3m44.391640886s ago: executing program 6 (id=1308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x13) 3m42.183180521s ago: executing program 6 (id=1313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00d478378611"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x400d4) 3m41.187050872s ago: executing program 6 (id=1316): r0 = syz_clone3(&(0x7f0000000200)={0x184060100, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 3m39.173765358s ago: executing program 6 (id=1321): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r1) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 3m38.289896833s ago: executing program 6 (id=1323): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3m35.052528498s ago: executing program 6 (id=1330): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x4, 0x1}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x6c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioperm(0x8, 0x7, 0x1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) read$msr(r4, &(0x7f00000002c0)=""/215, 0xd7) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000200)=0x4) close_range(r3, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x4) accept4(r2, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0x40585414, &(0x7f0000000280)={0x1, 0x0, 0x2, 0xb7d375beb1f4ba0d, 0x7d}) syz_open_dev$sg(0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 3m19.505524068s ago: executing program 39 (id=1330): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x4, 0x1}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x6c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioperm(0x8, 0x7, 0x1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) read$msr(r4, &(0x7f00000002c0)=""/215, 0xd7) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000200)=0x4) close_range(r3, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x4) accept4(r2, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0x40585414, &(0x7f0000000280)={0x1, 0x0, 0x2, 0xb7d375beb1f4ba0d, 0x7d}) syz_open_dev$sg(0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1m46.590453091s ago: executing program 3 (id=1572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r0, 0x400454cd, 0xf) 1m43.148425253s ago: executing program 3 (id=1577): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m36.747289104s ago: executing program 3 (id=1586): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m33.40112108s ago: executing program 3 (id=1592): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000400000008000000080000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d3, &(0x7f0000000100)) setregid(0xffffffffffffffff, r0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') lseek(r7, 0x3, 0x0) getdents64(r7, 0xffffffffffffffff, 0x43) 1m30.789361061s ago: executing program 3 (id=1598): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m22.45451477s ago: executing program 3 (id=1615): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008045) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="147b0000d8e017885b0e76c1238b403b33d7c3030000ce31df21d865fd1589764980c44cf76c1ed4f96417", @ANYRES16=r4, @ANYBLOB="310428bd70000000000016000000"], 0x14}}, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r3, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="f4c44888112286b0fcc69bd757ce93cb07d0fc06a737181e6d631bd33a045797a61ef10ed40bacc74ba22a30e95fee563e80a7b72785c9228135c08735074fa67b37265ed7c02c4ef3daa92203a132a03495015e1851e0c1ae6dbc065e5ce1a13628125962461d87568872f86754722903d8ea82ad4cc576bf23aa3c6e7698d4b1782e73437f4d3764fa218a906fece5ac822b235c663e8bab4b2a97d17de35fed53d6c3975d49c1b70a818a3b4b0b817611fd3e35cb404fbae19a2ccd774555fa4114264ee3f816868884152efbe74d74e848d99bcd3dadb274deb9dc820c78eaf983dfc234154e0b719c1e0a07710ffed4e0b283973e0d045ba23381c5ece9a52bec1937d95cec17e6ea7c387eef4a3412c18a78678283c97d20cd5860f0bd35e629cb541a965d5c1437f2580abdc1153e58614d2e8fd41478a5ee9aca37864e0a9f918c95e5dc45e011d60e53fed228f181f9fa80b1c9737c484298652b92ef7a0508fde423e178c6acfc33b67fcf516c4d93475715e908451ecc559152b20ac01da50697da05effe671f960a5b4b5392a95dd99fbf0b7fb0bd9d8077dad3a5e268dd8a013ef4014b4f1c11e0072d8f537fd6590317c3e9435ef43a7093d87694d7cbf0a35edca939294e580f2a7b04dd2884186c0e5977b7c836749d00c6ffa8c0796a4be2db5b14d83f843b7df9dc8bd7d09b24ac70221284042898b1c60b863a3ee69a8d78c7c5f851beef3fb7f33a0556eac8156d78e9b4945fa403cd84d1da7617daa4e8007f3a8acd9f442d8b3a7f4900a9358c0bb195d713a63a7d74b353606789d5737ab41e20743341d63d62e3aa272b37af8cb203f165eb24f397707a931c8131ae900e53a0112c313363ec80ad3f150390459399e7018b4e25ee427a219ef31f618b3375082c43e89132b277452bcfba5c3ab0859c27e6b1d6827af1811e06eeb2e528d3c13fb3180f69a741802e6bc2ec61be51ae78f3813d56a1ade11d778b6e4c5c3bc648ad9a96b060178518b6191eff547597c4f0e4dbf332516b0366a37254994258a66182ad492bcb1cdfa8d68d2685acaabc679b6a4db24e6f2de5e5647ba49cbf4f331927d709c56f0927e9485961f1c6c8044439f80860533ae2de9bf5fdffe28f46f278b6ccab75445488565ddf38170cda172f270e19417e16f840fea8d09fdf85b53951", 0x351}], 0x1}}], 0x1, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1m14.174932348s ago: executing program 2 (id=1635): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x4c, r1, 0x801, 0x70bd25, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5a080039084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x228c755bd72ca5cf}, 0x0) 1m13.815337609s ago: executing program 2 (id=1636): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000006c0)) 1m12.854564816s ago: executing program 2 (id=1639): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 1m12.495549969s ago: executing program 2 (id=1641): openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_neg_reply={{0xc}, {0x80, @none}}}}, 0xd) 1m12.142256666s ago: executing program 2 (id=1643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000001bc0)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x2}, @llc={@llc={0x80, 0x8e, 'm'}}}, 0x11) 1m7.051874884s ago: executing program 40 (id=1615): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008045) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="147b0000d8e017885b0e76c1238b403b33d7c3030000ce31df21d865fd1589764980c44cf76c1ed4f96417", @ANYRES16=r4, @ANYBLOB="310428bd70000000000016000000"], 0x14}}, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r3, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="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", 0x351}], 0x1}}], 0x1, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1m4.873704741s ago: executing program 2 (id=1649): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 47.676500833s ago: executing program 41 (id=1649): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 15.115750453s ago: executing program 0 (id=1725): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3373526a01e35"], 0x1c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14.649675653s ago: executing program 9 (id=1727): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000100)) setregid(0xffffffffffffffff, r0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') lseek(r6, 0x3, 0x0) getdents64(r6, 0xffffffffffffffff, 0x43) 9.803103143s ago: executing program 9 (id=1735): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 9.464131949s ago: executing program 5 (id=1736): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d", 0x12) 9.265273407s ago: executing program 0 (id=1737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @rand_addr, 0x1}, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 9.036112298s ago: executing program 7 (id=1738): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb77b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xfffffffd]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 8.912149954s ago: executing program 5 (id=1739): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x5, 0x4, 0x5, {0x2, 0x5, 0x5, 0xa, 0xa, 0x9, 0x2, 0x5, 0x8001, 0xd25, 0x9, 0x60b, 0x2, 0x10001, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 8.709162964s ago: executing program 0 (id=1740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r2, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x401}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10048805}, 0x0) 8.448228013s ago: executing program 9 (id=1741): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x48000) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)='Y', 0x1}], 0x1) 8.30369854s ago: executing program 5 (id=1742): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.271383569s ago: executing program 7 (id=1743): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x200, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000240)=[0x1], &(0x7f0000000200), 0x0}) 7.668219396s ago: executing program 9 (id=1744): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x2a, 0x85, 0x72}, 0x2c) 7.058898832s ago: executing program 7 (id=1745): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmod(r0, 0x20049549e2a2d659) 6.851940823s ago: executing program 0 (id=1746): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000100)) setregid(0xffffffffffffffff, r0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') lseek(r6, 0x3, 0x0) getdents64(r6, 0xffffffffffffffff, 0x43) 6.19401762s ago: executing program 9 (id=1747): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) 5.654823575s ago: executing program 5 (id=1748): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r1, 0xfffffffc}}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) 4.837903452s ago: executing program 0 (id=1749): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.964146052s ago: executing program 7 (id=1750): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000001240)=ANY=[@ANYBLOB="636f6465706167653d69736f383835392d352c756d61736b3d30303030303030303030303030303030303030303737372c696f636861727365743d63703836392c00593e6b66dbda701c6930c62a968870c671f6477cb145c6d89cc4842eb0720eecdf2ebd09f8dbf643b0adace8211effc59b60800919356a988fc72124c74383345cffd7c56ca293570c91cd0a246a89578c98a5d7adce29637c1181f1683d5b3c231fc700f5a4d5ade92e536e6d48a33c8fe7196d3c21f85102d71c4a757c811f270651dd6cfe2890f2650fbaa112ebd9f2a722f5811fbfc1b06807a0e87b42b6cc7bbb2fd495cdcb77aaef069c174193a8350150f86d32b86d93bb71ff0af70dd240bdf600dca52899a1f64a3cf2350dd993a702353ce0d906412f6301a961fec3049536174a7cadd6be69704ff9c8e45bc92f4ccdfc7626ebd4ad65aa3778bb6797cb9e25f80325f1fa5903d4e6cde04bb0bef07c4fc5a02fa21e6a0a2a"], 0x4, 0x339, &(0x7f0000000140)="$eJzs3U9P1EwcB/DvtLtL94EHK2BIPBmUxBMBPGi8QAzxNXgwRIQlIayYKCZKTETPxngzMfHIzbPRt6AX4xvQEwfjSS/EgzUzne5Ol5m2C7iF7PeTuHbb+fObttPO7GYpiKhvXVv4unNpV/4TVQA+gKuAByAAKgDOYDx4sLGZW5DfWhKIc4p9aZY3GrasAXQOLZTvKhgy19G/EUVR9C031c+exELlEWYPNnjAgO6danvQ88gObc62cjtuV38xjrDYwx4eYrjMcIiIqHz6/u/pu8SQHr97HjCpx+En9f6fSI1v9sqL41ho3f+9+H0k5P45pTbJ+d7aZrOxEk/h5NH3klmirSzrORG1d3cN8ZnlDxpDLqMWOxWLV19dazamtlUBzzCnGcnG1OsKkoYormhrwAyACcvcNENW27MNqjZUZRtmHfGPZtVonQB/+I5X9uoWPxWISXwUn8WiCPEaK63xXyUScueoIxV2dJU4/ml3iaqVYZwq1cp2+KdVJWd1DXj/tt3Kumu/BvBlLDayFNE5fg+TOF/W3LkwgvTHCnHrZtytU7lGgYpQswYz12wr0W9rrrHOuuqr1WZjavlu03XSHy3rjE68EDfEBH7gHRaM8b8nU0/C3TNTvVyolPrMyGxPRaV0HMcU1YHvdNUzSbmeuvgV8xy3cQXD9x9trS81m4175S8kXeWA2c8dcTzxiahPR7lG/m+kQSAXqgCc5VTdm6wLf6Iosm6qoBeHoKqaevlNu8lb60tCX/MOV4W8cnZsmncnBjAPQK9JrggHqf1JK9dAu8BC2X/Jo63W2E/IJKoedJCkqtQmHwOFekp935qdnFyP/z/YVYhOoPbRx/jNsoOhMsixg4jnf8Z8ZVpddeRLmDH/ifIKN0qcccyARtTrf8VmcK1inePEwWQhZ851/iJwoaNGD0mNTzuLDXWcOI7fSnb/VYZYwBfc4uf/REREREREREREREREREREREREREQnTbe/Rtj/c4L8hXSNu334hzeIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiA7HeP4v4KsnxtRsz//NelKT4sdPiAmO4vm/foHn/4rtLlpJRDZ/AwAA//9eD1xQ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x3, 0x2) 2.472350387s ago: executing program 5 (id=1751): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xc1f, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 2.335229672s ago: executing program 7 (id=1752): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000001c0)={0xff22, 0x100, 0x4, 0x95c, 0x16, "5b96407d7a27a872"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) 1.945027549s ago: executing program 5 (id=1753): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) 1.775374276s ago: executing program 7 (id=1754): r0 = io_uring_setup(0x5f64, &(0x7f00000002c0)={0x0, 0x0, 0x800, 0x4, 0x398}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r2], 0x38}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 242.346µs ago: executing program 0 (id=1755): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0x0, 0xc, {"7d735931001800007f004103ff0100"}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 0s ago: executing program 9 (id=1756): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0 1 [ 689.300998][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 689.310711][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 689.321762][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 689.339661][ T5844] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 689.345965][ T8487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.349864][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 689.390091][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 689.399413][ T5847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 689.408365][ T5847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 689.416826][ T5847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 689.424485][ T5847] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 689.431802][ T5847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 689.703113][ T35] hsr_slave_0: left promiscuous mode [ 689.721965][ T35] hsr_slave_1: left promiscuous mode [ 689.750900][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.066548][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.588728][ T9747] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 691.024497][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.055554][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.570439][ T5847] Bluetooth: hci7: command tx timeout [ 691.577674][ T5847] Bluetooth: hci6: command tx timeout [ 692.276384][ T9754] xt_bpf: check failed: parse error [ 693.407099][ T9756] loop7: detected capacity change from 0 to 32768 [ 693.840603][ T5844] Bluetooth: hci6: command tx timeout [ 693.840658][ T5847] Bluetooth: hci7: command tx timeout [ 694.120208][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 694.120261][ T29] audit: type=1800 audit(1739782691.142:224): pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.703" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 695.868650][ T5847] Bluetooth: hci6: command tx timeout [ 695.874182][ T5847] Bluetooth: hci7: command tx timeout [ 697.492966][ T35] team0 (unregistering): Port device team_slave_1 removed [ 697.966103][ T5844] Bluetooth: hci7: command tx timeout [ 697.971613][ T5844] Bluetooth: hci6: command tx timeout [ 698.695929][ T35] team0 (unregistering): Port device team_slave_0 removed [ 700.898978][ T9784] loop7: detected capacity change from 0 to 512 [ 700.906512][ T9784] EXT4-fs: Ignoring removed bh option [ 701.788788][ T9784] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 702.008248][ T9784] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 702.010823][ T9784] EXT4-fs: failed to create workqueue [ 702.025798][ T9784] EXT4-fs (loop7): mount failed [ 703.947281][ T9767] tipc: Started in network mode [ 703.952542][ T9767] tipc: Node identity 7f000001, cluster identity 4711 [ 703.960585][ T9767] tipc: Enabled bearer , priority 10 [ 704.007157][ T9769] tipc: Enabled bearer , priority 0 [ 705.805488][ T8] tipc: Node number set to 2130706433 [ 708.597765][ T9736] chnl_net:caif_netlink_parms(): no params data found [ 708.886059][ T9828] loop9: detected capacity change from 0 to 2048 [ 708.904869][ T9734] chnl_net:caif_netlink_parms(): no params data found [ 711.309832][ T9832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.317246][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.638190][ T9832] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 712.161607][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.014723][ T9849] input: syz0 as /devices/virtual/input/input15 [ 715.095782][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.139873][ T9736] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.147067][ T9736] bridge_slave_0: entered allmulticast mode [ 715.272560][ T9736] bridge_slave_0: entered promiscuous mode [ 716.236934][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.313165][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.339375][ T9736] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.363844][ T9736] bridge_slave_1: entered allmulticast mode [ 716.389789][ T9736] bridge_slave_1: entered promiscuous mode [ 716.556252][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.579035][ T5898] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 717.612057][ T9736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.592690][ T9736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.718880][ T5898] usb 8-1: Using ep0 maxpacket: 32 [ 718.908233][ T9734] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.926232][ T9734] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.993226][ T5898] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.040067][ T9734] bridge_slave_0: entered allmulticast mode [ 719.052698][ T5898] usb 8-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 719.063261][ T9734] bridge_slave_0: entered promiscuous mode [ 719.092349][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.105993][ T9734] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.139188][ T5898] usb 8-1: Product: syz [ 719.149059][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.176701][ T5898] usb 8-1: Manufacturer: syz [ 719.188273][ T9734] bridge_slave_1: entered allmulticast mode [ 719.196762][ T5898] usb 8-1: SerialNumber: syz [ 719.236571][ T5898] usb 8-1: config 0 descriptor?? [ 719.248009][ T9734] bridge_slave_1: entered promiscuous mode [ 719.314436][ T5898] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 719.642295][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.658435][ T5937] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 719.689399][ T8913] usb 8-1: USB disconnect, device number 2 [ 720.603108][ T5937] usb 10-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 8 [ 720.640430][ T5937] usb 10-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.701636][ T5937] usb 10-1: config 1 interface 0 has no altsetting 0 [ 720.734390][ T5937] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 720.764283][ T5937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.798633][ T5937] usb 10-1: Product: syz [ 720.802957][ T5937] usb 10-1: Manufacturer: syz [ 720.807658][ T5937] usb 10-1: SerialNumber: syz [ 720.825416][ T9734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.843578][ T9885] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 720.878297][ T9736] team0: Port device team_slave_0 added [ 720.891972][ T9734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.934786][ T9736] team0: Port device team_slave_1 added [ 721.018210][ T9736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.026015][ T8913] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 721.043998][ T9736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.091207][ T9736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.108956][ T5902] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 721.156337][ T9736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.174165][ T9736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.222828][ T9736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.249016][ T8913] usb 8-1: Using ep0 maxpacket: 16 [ 721.260746][ T8913] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 721.290647][ T5937] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 721.294628][ T8913] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 721.305675][ T5937] usb 10-1: USB disconnect, device number 2 [ 721.316041][ T9734] team0: Port device team_slave_0 added [ 721.328696][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 721.351327][ T5902] usb 4-1: config 0 has an invalid interface number: 131 but max is 0 [ 721.365041][ T8913] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.378899][ T5902] usb 4-1: config 0 has no interface number 0 [ 721.403859][ T5902] usb 4-1: config 0 interface 131 has no altsetting 0 [ 721.411998][ T8913] usb 8-1: Product: syz [ 721.416188][ T8913] usb 8-1: Manufacturer: syz [ 721.428852][ T8913] usb 8-1: SerialNumber: syz [ 721.440106][ T5902] usb 4-1: New USB device found, idVendor=046d, idProduct=d001, bcdDevice=cd.8a [ 721.468687][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.479794][ T8913] usb 8-1: config 0 descriptor?? [ 721.484108][ T9734] team0: Port device team_slave_1 added [ 721.487232][ T5902] usb 4-1: Product: syz [ 721.498362][ T8913] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 721.506506][ T5902] usb 4-1: Manufacturer: syz [ 721.512229][ T5902] usb 4-1: SerialNumber: syz [ 721.522570][ T8913] usb 8-1: Detected FT232R [ 721.530525][ T5902] usb 4-1: config 0 descriptor?? [ 721.544106][ T5902] gspca_main: nw80x-2.14.0 probing 046d:d001 [ 721.632282][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.648541][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.689577][ T9734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.718748][ T8913] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 721.752455][ T5902] gspca_nw80x: reg_w err -71 [ 721.757966][ T8913] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 721.775935][ T5902] nw80x 4-1:0.131: probe with driver nw80x failed with error -71 [ 721.809699][ T8913] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 721.823980][ T9736] hsr_slave_0: entered promiscuous mode [ 721.849234][ T5902] usb 4-1: USB disconnect, device number 5 [ 721.859961][ T8913] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 721.871165][ T9736] hsr_slave_1: entered promiscuous mode [ 721.877285][ T9736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 721.928970][ T8913] usb 8-1: USB disconnect, device number 3 [ 721.949308][ T9736] Cannot create hsr debugfs directory [ 721.965051][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.980208][ T8913] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 721.984333][ T5847] Bluetooth: hci4: unexpected event for opcode 0x080c [ 721.996628][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.040114][ T8913] ftdi_sio 8-1:0.0: device disconnected [ 722.045898][ T9734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.144725][ T35] bridge_slave_1: left allmulticast mode [ 722.158573][ T35] bridge_slave_1: left promiscuous mode [ 722.164310][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.202690][ T35] bridge_slave_0: left allmulticast mode [ 722.208360][ T35] bridge_slave_0: left promiscuous mode [ 722.241878][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.303533][ T35] bridge_slave_1: left allmulticast mode [ 722.332246][ T35] bridge_slave_1: left promiscuous mode [ 722.358698][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.501093][ T29] audit: type=1326 audit(1739782719.552:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9916 comm="syz.7.743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb0518cde9 code=0x0 [ 723.669375][ T35] bridge_slave_0: left allmulticast mode [ 723.688608][ T35] bridge_slave_0: left promiscuous mode [ 724.048072][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.273083][ T35] bridge_slave_1: left allmulticast mode [ 724.361017][ T35] bridge_slave_1: left promiscuous mode [ 724.443185][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.603131][ T35] bridge_slave_0: left allmulticast mode [ 724.628694][ T35] bridge_slave_0: left promiscuous mode [ 724.658608][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.862955][ T8913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 725.299486][ T8913] usb 4-1: Using ep0 maxpacket: 8 [ 725.310003][ T8913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 725.348589][ T8913] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 725.357657][ T8913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.401386][ T8913] usb 4-1: config 0 descriptor?? [ 725.448970][ T5890] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 725.626030][ T5890] usb 8-1: unable to get BOS descriptor or descriptor too short [ 725.638692][ T8913] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 725.666624][ T5890] usb 8-1: config 81 has an invalid interface number: 13 but max is 0 [ 725.685671][ T5890] usb 8-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 725.699942][ T5890] usb 8-1: config 81 has no interface number 0 [ 725.706149][ T5890] usb 8-1: config 81 interface 13 has no altsetting 0 [ 725.758761][ T5890] usb 8-1: New USB device found, idVendor=12d1, idProduct=0ec1, bcdDevice=29.23 [ 725.778696][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.786713][ T5890] usb 8-1: Product: syz [ 725.835341][ T5890] usb 8-1: Manufacturer: syz [ 725.962209][ T5890] usb 8-1: SerialNumber: syz [ 726.211526][ T5890] qmi_wwan 8-1:81.13: bogus CDC Union: master=0, slave=1 [ 726.224693][ T9944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.236954][ T5890] qmi_wwan 8-1:81.13: probe with driver qmi_wwan failed with error -22 [ 726.567171][ T51] usb 4-1: USB disconnect, device number 6 [ 727.208905][ T5890] usb 8-1: USB disconnect, device number 4 [ 728.800397][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.822831][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.839886][ T35] bond0 (unregistering): Released all slaves [ 730.471471][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.838721][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.901478][ T29] audit: type=1326 audit(1739782727.962:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.2.757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f882238cde9 code=0x0 [ 730.923142][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.929014][ T35] bond0 (unregistering): Released all slaves [ 731.433227][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.485904][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.757920][ T35] bond0 (unregistering): Released all slaves [ 732.914489][ T9734] hsr_slave_0: entered promiscuous mode [ 732.929398][ T9734] hsr_slave_1: entered promiscuous mode [ 732.935518][ T9734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 732.956805][ T9734] Cannot create hsr debugfs directory [ 740.274159][ T5847] Bluetooth: hci4: unexpected event for opcode 0x0c38 [ 741.329310][T10047] overlayfs: failed to clone lowerpath [ 743.948825][ T5847] Bluetooth: min 158 > max 0 [ 744.761029][ T35] hsr_slave_0: left promiscuous mode [ 745.298618][ T35] hsr_slave_1: left promiscuous mode [ 745.309268][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.316716][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.339363][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.357969][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.644153][ T35] veth1_macvtap: left promiscuous mode [ 745.670766][ T35] veth0_macvtap: left promiscuous mode [ 745.698882][ T35] veth1_vlan: left promiscuous mode [ 745.704212][ T35] veth0_vlan: left promiscuous mode [ 746.101845][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 747.290989][ T35] team0 (unregistering): Port device team_slave_1 removed [ 748.578183][ T35] team0 (unregistering): Port device team_slave_0 removed [ 748.595209][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 748.605317][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 748.613837][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 748.622394][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 748.661548][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 748.668893][ T51] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 748.676706][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 748.841977][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 748.853733][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 748.862522][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 748.878627][ T51] usb 10-1: Using ep0 maxpacket: 8 [ 748.890446][ T51] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 748.903977][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 748.916550][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 748.924002][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 748.963657][ T51] usb 10-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 748.978719][ T51] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.997026][ T51] usb 10-1: Product: syz [ 749.007144][ T51] usb 10-1: Manufacturer: syz [ 749.012083][ T51] usb 10-1: SerialNumber: syz [ 749.037270][ T51] appletouch 10-1:1.0: Could not find int-in endpoint [ 749.048699][ T51] appletouch 10-1:1.0: probe with driver appletouch failed with error -5 [ 749.088646][ T51] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 749.257824][ T51] usb 10-1: USB disconnect, device number 3 [ 749.607732][ T35] team0 (unregistering): Port device team_slave_1 removed [ 749.687722][ T35] team0 (unregistering): Port device team_slave_0 removed [ 750.748931][ T5847] Bluetooth: hci1: command tx timeout [ 750.830390][T10086] loop9: detected capacity change from 0 to 2048 [ 750.848000][T10086] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 750.918694][T10086] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 2048) [ 750.939379][T10031] udevd[10031]: incorrect nilfs2 checksum on /dev/loop9 [ 750.965041][T10087] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 750.990817][ T5847] Bluetooth: hci5: command tx timeout [ 751.874232][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.880675][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.305338][T10075] chnl_net:caif_netlink_parms(): no params data found [ 752.528660][T10073] chnl_net:caif_netlink_parms(): no params data found [ 752.582866][T10075] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.590875][T10075] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.598120][T10075] bridge_slave_0: entered allmulticast mode [ 752.605392][T10075] bridge_slave_0: entered promiscuous mode [ 752.622539][T10075] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.641653][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.649336][T10075] bridge_slave_1: entered allmulticast mode [ 752.656169][T10075] bridge_slave_1: entered promiscuous mode [ 752.743169][T10075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.787453][T10075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.814861][T10073] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.822700][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.829954][T10073] bridge_slave_0: entered allmulticast mode [ 752.837754][T10073] bridge_slave_0: entered promiscuous mode [ 752.838724][ T5847] Bluetooth: hci1: command tx timeout [ 752.846893][T10073] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.858633][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.865816][T10073] bridge_slave_1: entered allmulticast mode [ 752.873099][T10073] bridge_slave_1: entered promiscuous mode [ 752.935648][T10075] team0: Port device team_slave_0 added [ 752.944065][T10073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.964725][T10073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.993410][T10075] team0: Port device team_slave_1 added [ 753.080054][ T5847] Bluetooth: hci5: command tx timeout [ 753.102721][T10075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.114349][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.144354][T10075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.164830][T10073] team0: Port device team_slave_0 added [ 753.173340][T10073] team0: Port device team_slave_1 added [ 753.201875][T10075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.209124][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.236754][T10075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.288193][T10073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.304889][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.332869][T10073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.349676][T10073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.356631][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.383144][T10073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.400031][ T35] bridge_slave_1: left allmulticast mode [ 753.405695][ T35] bridge_slave_1: left promiscuous mode [ 753.412940][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.421939][ T35] bridge_slave_0: left allmulticast mode [ 753.427592][ T35] bridge_slave_0: left promiscuous mode [ 753.433742][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.447726][ T35] bridge_slave_1: left allmulticast mode [ 753.453572][ T35] bridge_slave_1: left promiscuous mode [ 753.459668][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.468334][ T35] bridge_slave_0: left allmulticast mode [ 753.474956][ T35] bridge_slave_0: left promiscuous mode [ 753.480940][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.693421][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.704543][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.720000][ T35] bond0 (unregistering): Released all slaves [ 753.741631][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.757067][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.767436][ T35] bond0 (unregistering): Released all slaves [ 753.912507][T10075] hsr_slave_0: entered promiscuous mode [ 753.927307][T10075] hsr_slave_1: entered promiscuous mode [ 753.933581][T10075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 753.941605][T10075] Cannot create hsr debugfs directory [ 753.969675][T10073] hsr_slave_0: entered promiscuous mode [ 753.976139][T10073] hsr_slave_1: entered promiscuous mode [ 753.983061][T10073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 753.990877][T10073] Cannot create hsr debugfs directory [ 754.024374][ T35] hsr_slave_0: left promiscuous mode [ 754.030388][ T35] hsr_slave_1: left promiscuous mode [ 754.036132][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.044562][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.056301][ T35] hsr_slave_0: left promiscuous mode [ 754.068286][ T35] hsr_slave_1: left promiscuous mode [ 754.074552][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.082634][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.237598][ T35] team0 (unregistering): Port device team_slave_1 removed [ 754.267278][ T35] team0 (unregistering): Port device team_slave_0 removed [ 754.543224][ T35] team0 (unregistering): Port device team_slave_1 removed [ 754.587225][ T35] team0 (unregistering): Port device team_slave_0 removed [ 754.921926][ T5847] Bluetooth: hci1: command tx timeout [ 755.166140][ T5847] Bluetooth: hci5: command tx timeout [ 755.627693][T10073] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 755.659174][T10073] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 755.687936][T10073] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 755.714036][T10073] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 755.762664][T10075] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 755.797084][T10075] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 755.822428][T10075] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 755.842597][T10075] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 756.024046][T10073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.082725][T10073] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.109989][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.117186][ T6058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.145565][T10075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.163013][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.170137][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.211330][T10075] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.261304][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.268411][ T5931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.281730][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.288862][ T5931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.332860][T10073] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 756.356701][T10073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.377798][T10075] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 756.389259][T10075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.702271][T10073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.808015][T10075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.831746][T10073] veth0_vlan: entered promiscuous mode [ 756.846856][T10073] veth1_vlan: entered promiscuous mode [ 756.949730][T10073] veth0_macvtap: entered promiscuous mode [ 756.959699][T10073] veth1_macvtap: entered promiscuous mode [ 757.003913][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.009132][ T5847] Bluetooth: hci1: command tx timeout [ 757.028829][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.050277][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.068741][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.090725][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.115293][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.134562][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.145515][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.157461][T10073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.185111][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.208576][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.218404][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.238829][ T5847] Bluetooth: hci5: command tx timeout [ 757.258565][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.276653][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.288713][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.318559][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.334144][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.345859][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.356839][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.368135][T10073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.410989][T10073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.421939][T10073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.431444][T10073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.442071][T10073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.500785][T10075] veth0_vlan: entered promiscuous mode [ 757.542804][T10075] veth1_vlan: entered promiscuous mode [ 757.636617][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.639002][T10075] veth0_macvtap: entered promiscuous mode [ 757.664821][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.683905][T10075] veth1_macvtap: entered promiscuous mode [ 757.718466][ T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.725307][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.728245][ T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.739238][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.765833][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.776367][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.786408][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.796966][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.806895][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.817605][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.835659][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.846161][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.860143][T10075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.887135][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.897652][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.909193][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.919703][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.930117][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.941036][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.952572][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.963711][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.973701][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.984415][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.994483][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.005158][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.016307][T10075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.054558][T10075] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.073244][T10075] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.082996][T10075] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.092563][T10075] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.767913][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.709296][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.996499][T10180] loop9: detected capacity change from 0 to 4096 [ 760.066189][T10180] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 760.082238][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.140074][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.150180][T10180] ntfs3(loop9): $Volume is corrupted. [ 764.534913][ T5847] Bluetooth: hci4: unexpected event for opcode 0x200d [ 766.398363][ T5937] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 769.138654][ T5937] usb 8-1: Using ep0 maxpacket: 32 [ 769.209465][ T5937] usb 8-1: device descriptor read/all, error -71 [ 771.495313][ T5847] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 772.351136][ T5937] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 773.215155][T10283] netlink: 'syz.0.824': attribute type 10 has an invalid length. [ 773.291922][ T5937] usb 8-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 8 [ 773.302504][ T5937] usb 8-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.317569][ T5937] usb 8-1: config 1 interface 0 has no altsetting 0 [ 773.946376][ T5937] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 774.158610][ T5937] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.197592][ T5937] usb 8-1: Product: syz [ 774.207055][ T5937] usb 8-1: Manufacturer: syz [ 774.268006][ T5937] usb 8-1: SerialNumber: syz [ 774.679003][ T5937] usb 8-1: can't set config #1, error -71 [ 774.756736][ T5937] usb 8-1: USB disconnect, device number 6 [ 775.559512][ T5847] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 775.598907][ T5847] Bluetooth: hci4: Injecting HCI hardware error event [ 775.609136][ T5844] Bluetooth: hci4: hardware error 0x00 [ 776.781164][T10334] loop6: detected capacity change from 0 to 512 [ 776.883995][T10334] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.839: casefold flag without casefold feature [ 776.980897][T10334] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.839: couldn't read orphan inode 15 (err -117) [ 777.082530][T10334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.135363][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 778.442068][T10075] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.698569][ T5898] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 779.867342][ T5898] usb 8-1: config 0 has an invalid interface number: 197 but max is 0 [ 779.875623][ T5898] usb 8-1: config 0 has no interface number 0 [ 779.883957][ T5898] usb 8-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=35.a5 [ 779.902846][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.030874][T10373] loop9: detected capacity change from 0 to 64 [ 780.328575][ T5898] usb 8-1: Product: syz [ 780.334418][ T5898] usb 8-1: Manufacturer: syz [ 780.347772][ T5898] usb 8-1: SerialNumber: syz [ 780.483709][T10373] Trying to free block not in datazone [ 780.620485][ T5898] usb 8-1: config 0 descriptor?? [ 780.651009][ T5898] ftdi_sio 8-1:0.197: FTDI USB Serial Device converter detected [ 780.930052][ T5898] ftdi_sio ttyUSB0: unknown device type: 0x35a5 [ 781.543371][ T5898] usb 8-1: USB disconnect, device number 7 [ 781.586705][ T5898] ftdi_sio 8-1:0.197: device disconnected [ 783.718740][ T5166] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 783.904178][ T5902] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 783.930380][ T5166] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.588296][T10416] tipc: Started in network mode [ 784.593479][T10416] tipc: Node identity 7f000001, cluster identity 4711 [ 784.603354][T10416] tipc: Enabled bearer , priority 10 [ 784.653226][T10416] tipc: Enabled bearer , priority 0 [ 784.935246][ T5166] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 785.181836][ T5166] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 785.194563][ T5166] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 785.207816][ T5166] usb 10-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 785.217088][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 785.223026][ T5166] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.250962][ T5166] usb 10-1: config 0 descriptor?? [ 785.256836][ T5902] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.303880][ T5902] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 785.361839][ T5902] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 785.397013][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.431174][ T5902] usb 4-1: Product: syz [ 785.435370][ T5902] usb 4-1: Manufacturer: syz [ 785.474894][ T5902] usb 4-1: SerialNumber: syz [ 785.739585][ T5937] tipc: Node number set to 2130706433 [ 785.981978][ T5902] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 786.013327][ T5902] usb 4-1: MIDIStreaming interface descriptor not found [ 786.023763][ T5166] usb 10-1: USB disconnect, device number 4 [ 786.404490][ T5902] usb 4-1: USB disconnect, device number 7 [ 787.645153][ T9970] udevd[9970]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 787.878766][T10451] loop7: detected capacity change from 0 to 64 [ 788.178986][ T5902] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 788.948976][ T5902] usb 10-1: Using ep0 maxpacket: 32 [ 788.971073][ T5902] usb 10-1: unable to get BOS descriptor or descriptor too short [ 789.112611][ T5902] usb 10-1: config 7 has an invalid interface number: 187 but max is 0 [ 789.168795][ T5902] usb 10-1: config 7 has no interface number 0 [ 789.174998][ T5902] usb 10-1: config 7 interface 187 has no altsetting 0 [ 789.239921][ T5902] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 789.259122][ T5902] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.267234][ T5902] usb 10-1: Product: syz [ 789.318850][ T5902] usb 10-1: Manufacturer: syz [ 789.338823][ T5902] usb 10-1: SerialNumber: syz [ 789.341453][T10479] netlink: 'syz.6.876': attribute type 4 has an invalid length. [ 789.393613][T10479] netlink: 'syz.6.876': attribute type 11 has an invalid length. [ 789.421985][T10479] netlink: 224 bytes leftover after parsing attributes in process `syz.6.876'. [ 789.606476][ T5902] usb 10-1: Limiting number of CPorts to U8_MAX [ 789.621994][ T5902] usb 10-1: Not enough endpoints found in device, aborting! [ 789.697236][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.7.881'. [ 789.722213][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.7.881'. [ 789.782828][T10491] geneve2: entered promiscuous mode [ 789.898275][ T5902] usb 10-1: USB disconnect, device number 5 [ 792.001656][T10531] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.034850][T10531] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.146098][ T29] audit: type=1326 audit(1739782789.192:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.3.899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ddcd8cde9 code=0x0 [ 793.912744][T10560] geneve2: entered promiscuous mode [ 793.917999][T10560] geneve2: entered allmulticast mode [ 794.238377][ T5166] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 794.418711][ T5166] usb 4-1: Using ep0 maxpacket: 16 [ 794.442691][ T5166] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 794.469692][ T5166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.477714][ T5166] usb 4-1: Product: syz [ 794.522826][ T5166] usb 4-1: Manufacturer: syz [ 794.527455][ T5166] usb 4-1: SerialNumber: syz [ 794.564518][ T5166] usb 4-1: config 0 descriptor?? [ 794.591297][ T5166] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 794.659840][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.911'. [ 795.052220][ T5166] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 795.114147][ T5166] visor 4-1:0.0: probe with driver visor failed with error -71 [ 795.193982][ T5166] usb 4-1: USB disconnect, device number 8 [ 797.668873][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.6.923'. [ 797.677785][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.6.923'. [ 798.108819][ T5166] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 798.290789][ T5166] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 798.317059][ T5166] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 798.398328][ T5166] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 798.440115][ T5166] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.487070][ T5166] usb 10-1: Product: syz [ 798.514553][ T5166] usb 10-1: Manufacturer: syz [ 798.541363][ T5166] usb 10-1: SerialNumber: syz [ 798.589165][ T5166] usb 10-1: config 0 descriptor?? [ 798.650764][ T5166] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 798.996559][T10647] netlink: 'syz.6.934': attribute type 10 has an invalid length. [ 799.075993][ T5166] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 799.363691][T10647] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 799.991934][ T5166] usb 10-1: USB disconnect, device number 6 [ 800.382720][T10453] udevd[10453]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.724649][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.7.942'. [ 803.455833][T10694] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 803.474851][T10695] netlink: 56 bytes leftover after parsing attributes in process `syz.9.949'. [ 803.517405][T10695] netlink: 56 bytes leftover after parsing attributes in process `syz.9.949'. [ 803.756358][T10702] tipc: Started in network mode [ 803.761521][T10702] tipc: Node identity 7f000001, cluster identity 4711 [ 803.770221][T10702] tipc: Enabled bearer , priority 10 [ 803.816546][T10702] tipc: Enabled bearer , priority 0 [ 804.852200][ T25] tipc: Node number set to 2130706433 [ 806.788797][T10724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.958'. [ 806.888793][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 808.227897][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 808.245944][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 809.215806][T10763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 809.832482][T10766] loop6: detected capacity change from 0 to 512 [ 809.903397][T10766] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 809.999248][T10766] EXT4-fs (loop6): 1 truncate cleaned up [ 810.013340][T10766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.200874][T10768] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.313667][T10768] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.359027][T10075] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.480248][T10786] overlayfs: failed to clone upperpath [ 810.517058][ T5844] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 810.525860][ T5844] Bluetooth: hci1: Injecting HCI hardware error event [ 810.535141][T10776] tipc: Started in network mode [ 810.540271][T10776] tipc: Node identity 7f000001, cluster identity 4711 [ 810.546629][ T5844] Bluetooth: hci1: hardware error 0x00 [ 810.547553][T10776] tipc: Enabled bearer , priority 10 [ 810.560260][T10784] tipc: Enabling of bearer rejected, failed to enable media [ 811.468646][ T5900] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 811.558842][ T25] tipc: Node number set to 2130706433 [ 811.658541][ T5900] usb 10-1: Using ep0 maxpacket: 16 [ 811.700228][ T5900] usb 10-1: config 0 has an invalid interface number: 237 but max is 0 [ 811.748582][ T5900] usb 10-1: config 0 has no interface number 0 [ 811.754789][ T5900] usb 10-1: config 0 interface 237 has no altsetting 0 [ 811.777945][ T5900] usb 10-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 811.810972][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.875763][ T5900] usb 10-1: Product: syz [ 811.897868][ T5900] usb 10-1: Manufacturer: syz [ 811.938641][ T5900] usb 10-1: SerialNumber: syz [ 811.971808][ T5900] usb 10-1: config 0 descriptor?? [ 812.036758][ T5900] snd_usb_podhd 10-1:0.237: Line 6 POD HD300 found [ 812.250196][ T5900] snd_usb_podhd 10-1:0.237: cannot get proper max packet size [ 812.291973][ T5900] snd_usb_podhd 10-1:0.237: Line 6 POD HD300 now disconnected [ 812.327900][ T5900] snd_usb_podhd 10-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 812.418608][ T5937] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 812.505726][ T5900] usb 10-1: USB disconnect, device number 7 [ 812.850362][ T5937] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.863467][ T5937] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 0.00 [ 812.873183][ T5937] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.884627][ T5937] usb 8-1: config 0 descriptor?? [ 812.913949][ T5844] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 813.198665][ T5902] usb 8-1: USB disconnect, device number 8 [ 813.350960][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.357347][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.979630][T10865] netlink: 'syz.3.1010': attribute type 21 has an invalid length. [ 815.242611][T10874] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1001'. [ 815.292604][T10874] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1001'. [ 819.435865][ T5900] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 819.647797][ T5900] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.658044][ T5900] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.712099][ T5900] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 819.741755][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 819.762956][ T29] audit: type=1326 audit(1739782816.822:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.9.1022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa84af8cde9 code=0x0 [ 819.798600][ T5900] usb 8-1: SerialNumber: syz [ 820.086688][ T5900] usb 8-1: 0:2 : does not exist [ 821.283207][ T5900] usb 8-1: USB disconnect, device number 9 [ 821.503298][ T5844] Bluetooth: hci5: Malformed LE Event: 0x0b [ 821.828719][ T5900] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 822.059231][ T5900] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 822.413747][ T5900] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 822.425962][ T5900] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 27312, setting to 1023 [ 822.437695][ T5900] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 823.144309][ T5900] usb 8-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 823.168544][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.350202][ T5900] usb 8-1: Product: syz [ 823.354495][ T5900] usb 8-1: Manufacturer: syz [ 823.370631][ T5900] usb 8-1: SerialNumber: syz [ 823.437207][ T5900] usb 8-1: config 0 descriptor?? [ 823.507855][ T5900] em28xx 8-1:0.0: New device syz syz @ 12 Mbps (2304:021a, interface 0, class 0) [ 823.552903][ T5900] em28xx 8-1:0.0: Device initialization failed. [ 823.572116][ T5900] em28xx 8-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 823.885711][T10391] udevd[10391]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 823.913641][ T5937] usb 8-1: USB disconnect, device number 10 [ 832.397546][T11070] loop9: detected capacity change from 0 to 32768 [ 832.456898][T11104] loop7: detected capacity change from 0 to 4096 [ 832.792438][T11104] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 834.545322][T11140] futex_wake_op: syz.2.1081 tries to shift op by -1; fix this program [ 834.965684][ T5902] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 835.783533][ T29] audit: type=1326 audit(1739782832.842:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882238cde9 code=0x7ffc0000 [ 835.881499][ T29] audit: type=1326 audit(1739782832.842:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882238cde9 code=0x7ffc0000 [ 835.978764][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.008558][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.018366][ T5902] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 836.028262][ T29] audit: type=1326 audit(1739782832.872:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f882238cde9 code=0x7ffc0000 [ 836.093307][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.107361][ T29] audit: type=1326 audit(1739782832.872:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882238cde9 code=0x7ffc0000 [ 836.157833][ T5902] usb 7-1: config 0 descriptor?? [ 836.211085][ T29] audit: type=1326 audit(1739782832.872:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f882238cde9 code=0x7ffc0000 [ 836.295741][ T29] audit: type=1326 audit(1739782832.872:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882238cde9 code=0x7ffc0000 [ 836.417789][ T29] audit: type=1326 audit(1739782832.872:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.2.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882238cde9 code=0x7ffc0000 [ 836.613085][ T5902] hid-led 0003:0FC5:B080.0001: unknown main item tag 0x1 [ 836.744260][T11173] loop3: detected capacity change from 0 to 4096 [ 836.804438][T11173] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 836.818727][ T5902] hid-led 0003:0FC5:B080.0001: probe with driver hid-led failed with error -71 [ 836.872567][ T5902] usb 7-1: USB disconnect, device number 2 [ 838.385117][T11209] netlink: 'syz.6.1106': attribute type 2 has an invalid length. [ 839.591734][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 840.434944][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'. [ 840.449765][T11238] loop3: detected capacity change from 0 to 512 [ 840.464985][T11241] loop7: detected capacity change from 0 to 512 [ 840.480892][T11238] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 840.501169][T11241] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 840.540198][T11238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 840.548197][T11238] System zones: 1-12 [ 840.662593][T11238] EXT4-fs (loop3): 1 truncate cleaned up [ 840.672848][T11241] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #16: comm syz.7.1118: invalid indirect mapped block 4294967295 (level 0) [ 840.711001][T11238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.768606][T11241] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #16: comm syz.7.1118: invalid indirect mapped block 4294967295 (level 1) [ 840.877483][T11241] EXT4-fs (loop7): 1 orphan inode deleted [ 841.703457][T11250] can0: slcan on ptm0. [ 841.748581][T11241] EXT4-fs (loop7): 1 truncate cleaned up [ 841.799714][T11241] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 841.910494][T11241] EXT4-fs error (device loop7): htree_dirblock_to_tree:1109: inode #2: block 13: comm syz.7.1118: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 843.000047][ T8411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.058280][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.194224][T11248] can0 (unregistered): slcan off ptm0. [ 843.422782][T11284] loop3: detected capacity change from 0 to 256 [ 843.628332][T11284] FAT-fs (loop3): Directory bread(block 64) failed [ 843.741931][T11284] FAT-fs (loop3): Directory bread(block 65) failed [ 844.409614][T11284] FAT-fs (loop3): Directory bread(block 66) failed [ 844.416209][T11284] FAT-fs (loop3): Directory bread(block 67) failed [ 844.460858][T11284] FAT-fs (loop3): Directory bread(block 68) failed [ 844.484268][T11284] FAT-fs (loop3): Directory bread(block 69) failed [ 844.523505][T11292] vlan2: entered promiscuous mode [ 844.560059][T11284] FAT-fs (loop3): Directory bread(block 70) failed [ 844.570245][ T5902] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 844.577060][T11284] FAT-fs (loop3): Directory bread(block 71) failed [ 844.597154][T11292] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 844.604669][T11284] FAT-fs (loop3): Directory bread(block 72) failed [ 844.638665][T11284] FAT-fs (loop3): Directory bread(block 73) failed [ 844.753324][ T5902] usb 7-1: Using ep0 maxpacket: 8 [ 844.808708][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.838904][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.898663][ T5902] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 844.907732][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.959627][ T5902] usb 7-1: config 0 descriptor?? [ 845.004860][T11303] loop7: detected capacity change from 0 to 256 [ 846.209335][ T5902] steelseries 0003:1038:1410.0002: not enough fields in HID_OUTPUT_REPORT 0 [ 846.231397][ T5902] usb 7-1: USB disconnect, device number 3 [ 846.723163][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 846.775030][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 846.784210][ T25] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 847.049338][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 847.349977][ T25] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 847.358268][ T25] usb 8-1: config 0 has no interface number 0 [ 847.367662][T11307] syz.3.1138 (11307): drop_caches: 2 [ 847.378706][ T25] usb 8-1: config 0 interface 184 has no altsetting 0 [ 847.390574][ T25] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 847.408500][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.428510][ T25] usb 8-1: Product: syz [ 847.432935][ T25] usb 8-1: Manufacturer: syz [ 847.438646][ T25] usb 8-1: SerialNumber: syz [ 848.238288][ T25] usb 8-1: config 0 descriptor?? [ 848.309073][ T25] smsc75xx v1.0.0 [ 848.320336][ T25] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 848.366613][ T25] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -22 [ 848.534918][ T5166] usb 8-1: USB disconnect, device number 11 [ 848.802461][T11339] loop9: detected capacity change from 0 to 512 [ 848.858822][T11339] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 848.861966][T11339] EXT4-fs error (device loop9): ext4_clear_blocks:874: inode #13: comm syz.9.1151: attempt to clear invalid blocks 2 len 1 [ 848.869473][T11339] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 848.870846][T11339] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #13: comm syz.9.1151: invalid indirect mapped block 1819239214 (level 0) [ 848.900870][T11339] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #13: comm syz.9.1151: invalid indirect mapped block 1819239214 (level 1) [ 849.068313][T11339] EXT4-fs (loop9): 1 truncate cleaned up [ 849.078706][T11339] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.236372][T11339] EXT4-fs (loop9): Quota file not on filesystem root. Journaled quota will not work [ 849.406243][ T8487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.883059][T11372] vcan0: entered allmulticast mode [ 851.203860][T11385] tipc: Started in network mode [ 851.220580][T11389] dccp_invalid_packet: P.Data Offset(100) too large [ 851.278962][T11385] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 851.287076][T11385] tipc: Enabled bearer , priority 29 [ 852.288571][ T25] tipc: Node number set to 8432298 [ 852.525679][T11397] block device autoloading is deprecated and will be removed. [ 853.067305][T11418] loop6: detected capacity change from 0 to 4096 [ 853.261310][ T29] audit: type=1800 audit(1739782850.322:236): pid=11418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1175" name="file0" dev="loop6" ino=0 res=0 errno=0 [ 853.310993][T11433] warning: `syz.0.1181' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 854.618615][ T5166] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 855.469719][ T5166] usb 10-1: Using ep0 maxpacket: 16 [ 855.528577][ T5166] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.604591][ T5166] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.698010][ T5166] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 855.784291][ T5166] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 855.844191][ T5166] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.903329][ T5166] usb 10-1: config 0 descriptor?? [ 856.309091][T11495] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1201'. [ 856.349057][T11495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1201'. [ 856.375155][ T5166] input: HID 0955:7214 Haptics as /devices/virtual/input/input16 [ 856.384334][T11495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1201'. [ 856.467722][T11495] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1201'. [ 856.553720][ T5166] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 856.587857][ T5166] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 856.682077][ T5900] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 856.729867][ T5166] usb 10-1: USB disconnect, device number 8 [ 856.759703][ T5900] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 856.835604][ T5900] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 856.896131][ T5900] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 856.942756][T11512] xt_hashlimit: size too large, truncated to 1048576 [ 857.010849][T11515] input: syz0 as /devices/virtual/input/input17 [ 859.603181][T11538] (syz.7.1213,11538,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 860.790192][T11566] netlink: 'syz.7.1221': attribute type 12 has an invalid length. [ 860.798053][T11566] netlink: 'syz.7.1221': attribute type 29 has an invalid length. [ 860.851421][T11566] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1221'. [ 860.899337][T11566] netlink: 59 bytes leftover after parsing attributes in process `syz.7.1221'. [ 864.139431][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 864.348645][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 864.376415][ T25] usb 7-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=99.81 [ 864.408483][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.449839][ T25] usb 7-1: Product: syz [ 864.454035][ T25] usb 7-1: Manufacturer: syz [ 864.491063][ T25] usb 7-1: SerialNumber: syz [ 864.520661][ T25] usb 7-1: config 0 descriptor?? [ 864.559424][ T25] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 864.598621][ T25] ftdi_sio ttyUSB0: unknown device type: 0x9981 [ 864.812110][ T5937] usb 7-1: USB disconnect, device number 4 [ 864.821279][ T5937] ftdi_sio 7-1:0.0: device disconnected [ 864.849885][T11642] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1247'. [ 867.279261][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1256'. [ 868.772118][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 869.430321][ T29] audit: type=1326 audit(1739782866.492:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11712 comm="syz.0.1267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ef518cde9 code=0x0 [ 871.717820][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 874.198871][T11761] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1282'. [ 874.768939][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.775390][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.508869][T11779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1285'. [ 876.656457][T11781] Device name cannot be null; rc = [-22] [ 876.838954][ T8] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 877.622681][ T8] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 877.671632][ T8] usb 4-1: config 0 has no interface number 0 [ 877.722330][ T8] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 877.779062][ T8] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 877.964780][T11812] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 878.109240][ T8] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 878.120609][ T8] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 878.131743][ T8] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 878.144800][ T8] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 878.153913][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.174400][ T8] usb 4-1: config 0 descriptor?? [ 878.192595][T11783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 878.328964][ T8] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 878.434555][T11819] netlink: 536 bytes leftover after parsing attributes in process `syz.0.1297'. [ 879.467491][T11841] input: syz1 as /devices/virtual/input/input18 [ 879.616126][ T5902] usb 4-1: USB disconnect, device number 9 [ 879.681472][ T5902] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 882.514026][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1313'. [ 882.591598][T11881] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.600435][T11881] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.537504][T11935] Cannot find del_set index 0 as target [ 889.621680][ T29] audit: type=1326 audit(1739782886.662:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.6.1330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febaa98cde9 code=0x0 [ 892.808866][ T5166] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 893.018780][ T5166] usb 10-1: Using ep0 maxpacket: 16 [ 893.068746][ T5166] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 893.151671][ T5166] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 893.190208][ T5166] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.235792][ T5166] usb 10-1: Product: syz [ 893.261098][ T5166] usb 10-1: Manufacturer: syz [ 893.293435][ T5166] usb 10-1: SerialNumber: syz [ 893.374945][ T5166] usb 10-1: config 0 descriptor?? [ 893.442577][ T5166] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 893.509309][ T5166] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 894.060237][T11992] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 894.530110][ T5166] em28xx 10-1:0.0: chip ID is em2884 [ 894.831565][ T5166] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 894.910932][ T5166] em28xx 10-1:0.0: board has no eeprom [ 895.018599][ T5166] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 895.087646][ T5166] em28xx 10-1:0.0: dvb set to bulk mode. [ 895.158761][ T5166] usb 10-1: USB disconnect, device number 9 [ 895.216336][ T5166] em28xx 10-1:0.0: Disconnecting em28xx [ 895.223095][ T8] em28xx 10-1:0.0: Binding DVB extension [ 895.671765][ T8] em28xx 10-1:0.0: Registering input extension [ 896.101078][T12013] loop9: detected capacity change from 0 to 1024 [ 896.110314][ T8] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 896.116847][ T8] Registered IR keymap rc-empty [ 896.215778][ T8] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 896.379307][ T8] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input19 [ 896.527489][ T8] em28xx 10-1:0.0: Input extension successfully initialized [ 896.662225][ T5166] em28xx 10-1:0.0: Closing input extension [ 897.051452][ T5166] em28xx 10-1:0.0: Freeing device [ 898.098575][ T5900] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 898.555199][ T5890] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 898.621610][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.690079][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.744282][ T5900] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 898.779744][ T5890] usb 10-1: Using ep0 maxpacket: 8 [ 898.820458][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.849748][ T5890] usb 10-1: unable to get BOS descriptor or descriptor too short [ 898.910626][ T5890] usb 10-1: config 0 has an invalid interface number: 125 but max is 2 [ 898.950343][ T5900] usb 4-1: config 0 descriptor?? [ 898.964183][ T5890] usb 10-1: config 0 has an invalid descriptor of length 172, skipping remainder of the config [ 899.052911][ T5890] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 899.126789][ T5890] usb 10-1: config 0 has no interface number 0 [ 899.191482][ T5890] usb 10-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 899.322528][ T5890] usb 10-1: config 0 interface 125 has no altsetting 0 [ 899.865162][ T5900] arvo 0003:1E7D:30D4.0004: ignoring exceeding usage max [ 899.892754][ T5890] usb 10-1: string descriptor 0 read error: -22 [ 899.901167][ T5890] usb 10-1: Dual-Role OTG device on HNP port [ 899.940249][ T5900] arvo 0003:1E7D:30D4.0004: item fetching failed at offset 5/7 [ 899.971761][ T5890] usb 10-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 899.999144][ T5900] arvo 0003:1E7D:30D4.0004: parse failed [ 900.028822][ T5890] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.069855][ T5900] arvo 0003:1E7D:30D4.0004: probe with driver arvo failed with error -22 [ 900.110606][ T5890] usb 10-1: config 0 descriptor?? [ 900.180099][ T5890] hub 10-1:0.125: bad descriptor, ignoring hub [ 900.197912][ T5900] usb 4-1: USB disconnect, device number 10 [ 900.247488][ T5890] hub 10-1:0.125: probe with driver hub failed with error -5 [ 900.372971][ T5890] usb 10-1: Found UVC 15.ff device (17dc:0202) [ 900.443674][ T5890] usb 10-1: No valid video chain found. [ 900.548814][ T5890] usb 10-1: USB disconnect, device number 10 [ 902.966717][ T5900] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 903.183926][ T5900] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.224951][ T5900] usb 10-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 903.289055][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.390263][ T5900] usb 10-1: config 0 descriptor?? [ 903.612216][ T5890] usb 10-1: USB disconnect, device number 11 [ 905.417533][ T29] audit: type=1326 audit(1739782902.472:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.7.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0518cde9 code=0x7ffc0000 [ 905.641996][T12071] loop7: detected capacity change from 0 to 1024 [ 905.767199][ T29] audit: type=1326 audit(1739782902.472:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.7.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0518cde9 code=0x7ffc0000 [ 905.775371][T12071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 906.019592][T12071] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 906.098571][ T29] audit: type=1326 audit(1739782902.562:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.7.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffb0518cde9 code=0x7ffc0000 [ 906.292795][ T29] audit: type=1326 audit(1739782902.562:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.7.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffb0518ce23 code=0x7ffc0000 [ 906.487429][ T29] audit: type=1326 audit(1739782902.602:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.7.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffb0518b89f code=0x7ffc0000 [ 906.744484][ T29] audit: type=1326 audit(1739782902.702:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.7.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffb0518ce77 code=0x7ffc0000 [ 906.958612][ T29] audit: type=1326 audit(1739782902.702:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.7.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb0518b750 code=0x7ffc0000 [ 907.064483][ T8411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.160804][ T29] audit: type=1326 audit(1739782902.702:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.7.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb0518c9eb code=0x7ffc0000 [ 907.409884][ T29] audit: type=1326 audit(1739782902.832:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.7.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffb0518ba4a code=0x7ffc0000 [ 907.622090][ T29] audit: type=1326 audit(1739782902.832:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.7.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffb0518ba4a code=0x7ffc0000 [ 907.753355][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 907.769531][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 907.777545][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 907.786767][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 907.794812][ T5847] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 907.802962][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 909.697313][T12088] chnl_net:caif_netlink_parms(): no params data found [ 909.878630][ T5847] Bluetooth: hci5: command tx timeout [ 910.452126][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.498823][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.545330][T12088] bridge_slave_0: entered allmulticast mode [ 910.584424][T12088] bridge_slave_0: entered promiscuous mode [ 910.643587][T12088] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.688923][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.734541][T12088] bridge_slave_1: entered allmulticast mode [ 910.782494][T12088] bridge_slave_1: entered promiscuous mode [ 910.985728][T12088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.063069][T12088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.327691][T12088] team0: Port device team_slave_0 added [ 911.391373][T12088] team0: Port device team_slave_1 added [ 911.621057][T12088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.655700][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.748551][T12088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.810052][T12088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.837680][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.926221][T12088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.948660][ T5847] Bluetooth: hci5: command tx timeout [ 912.131914][T12088] hsr_slave_0: entered promiscuous mode [ 912.154926][T12088] hsr_slave_1: entered promiscuous mode [ 912.177154][T12088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 912.205380][T12088] Cannot create hsr debugfs directory [ 913.248454][ C1] sched: DL replenish lagged too much [ 914.031086][ T5847] Bluetooth: hci5: command tx timeout [ 916.102472][T12178] loop9: detected capacity change from 0 to 2048 [ 916.112591][ T5847] Bluetooth: hci5: command tx timeout [ 916.156170][T12178] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 916.214543][T12178] UDF-fs: Scanning with blocksize 512 failed [ 916.334336][T12178] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.461523][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 916.461545][ T29] audit: type=1800 audit(1739782913.522:262): pid=12178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1379" name="file1" dev="loop9" ino=818 res=0 errno=0 [ 918.154785][ T8] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 918.362882][ T8] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 918.409434][ T8] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.486008][ T8] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 918.556260][ T8] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.655084][ T8] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 918.751876][ T8] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 918.813933][ T8] usb 10-1: Product: syz [ 918.818223][ T8] usb 10-1: Manufacturer: syz [ 918.919590][ T8] cdc_wdm 10-1:1.0: skipping garbage [ 918.966567][ T8] cdc_wdm 10-1:1.0: skipping garbage [ 919.043630][ T8] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 919.098572][ T8] cdc_wdm 10-1:1.0: Unknown control protocol [ 919.203014][ T8] usb 10-1: USB disconnect, device number 12 [ 922.414249][T12246] loop7: detected capacity change from 0 to 64 [ 923.227263][T12088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 923.336596][T12088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 924.366862][T12088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 924.502022][T12088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 925.460234][T12088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.642592][T12088] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.705172][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.712374][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.953300][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.960483][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.174809][T12088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 926.299424][T12088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 928.143272][T12088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.388760][ T8] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 929.640491][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 929.681941][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.733924][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.798521][ T8] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 929.877447][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.918956][T12088] veth0_vlan: entered promiscuous mode [ 929.963334][ T8] usb 8-1: config 0 descriptor?? [ 930.004806][ T8] hub 8-1:0.0: USB hub found [ 930.015665][T12088] veth1_vlan: entered promiscuous mode [ 930.194458][T12088] veth0_macvtap: entered promiscuous mode [ 930.233136][ T8] hub 8-1:0.0: 1 port detected [ 930.301134][T12088] veth1_macvtap: entered promiscuous mode [ 930.943006][ T8] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 930.965349][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.029250][ T8] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 931.088663][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.152014][ T8] usbhid 8-1:0.0: can't add hid device: -71 [ 931.185822][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.206656][ T8] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 931.308902][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.422071][ T8] usb 8-1: USB disconnect, device number 12 [ 931.443410][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.564450][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.650772][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.737694][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.803748][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.865196][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.998552][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.069527][T12346] syz.9.1421 (12346) used greatest stack depth: 21168 bytes left [ 932.118557][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.222064][T12088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.310892][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.460284][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.566383][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.662558][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.738484][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.854259][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.933543][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.053267][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.131864][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.218058][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.295179][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.378694][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.458533][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.537090][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.622769][T12088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.756765][T12088] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.846646][T12088] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.938782][T12088] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.008554][T12088] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.816662][ T6078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.903466][ T6078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.166698][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.270148][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.193239][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.203874][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 953.392527][T12536] netlink: 'syz.5.1465': attribute type 10 has an invalid length. [ 953.449323][T12536] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1465'. [ 953.507140][T12536] team0: entered promiscuous mode [ 953.572587][T12536] team_slave_0: entered promiscuous mode [ 953.598765][T12536] team_slave_1: entered promiscuous mode [ 953.628776][T12536] team0: entered allmulticast mode [ 953.689176][T12536] team_slave_0: entered allmulticast mode [ 953.728748][T12536] team_slave_1: entered allmulticast mode [ 953.764990][T12536] bridge0: port 3(team0) entered blocking state [ 953.806148][T12536] bridge0: port 3(team0) entered disabled state [ 953.860004][T12536] bridge0: port 3(team0) entered blocking state [ 953.866395][T12536] bridge0: port 3(team0) entered forwarding state [ 954.923148][ T5890] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 955.108494][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 955.181007][ T5890] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 955.207151][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 955.268647][ T5890] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 955.353821][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 955.436926][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 955.524512][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1471'. [ 955.534296][ T5890] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 955.555079][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 955.567623][T12560] bridge0: port 2(bridge_slave_1) entered learning state [ 955.608377][ T5890] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 955.690910][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 955.751206][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 955.833308][ T5890] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 955.877096][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 955.938503][ T5890] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 956.022034][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 956.100716][ T5890] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 957.355570][ T5890] usb 4-1: string descriptor 0 read error: -71 [ 957.376598][ T5890] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 957.448517][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.491101][ T5890] usb 4-1: can't set config #168, error -71 [ 957.568930][ T5890] usb 4-1: USB disconnect, device number 11 [ 959.558670][T12606] loop9: detected capacity change from 0 to 512 [ 960.834060][T12606] EXT4-fs (loop9): 1 orphan inode deleted [ 960.848879][ T62] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 960.921049][T12606] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.980666][ T62] EXT4-fs error (device loop9): ext4_release_dquot:6948: comm kworker/u8:4: Failed to release dquot type 1 [ 961.047827][T12606] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 961.594155][ T8487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.642046][T12625] loop5: detected capacity change from 0 to 256 [ 961.827182][T12625] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 966.915629][T12688] loop7: detected capacity change from 0 to 4096 [ 967.403813][T12694] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 968.156205][T12688] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 968.270542][T12688] Remounting filesystem read-only [ 968.368656][T12699] NILFS (loop7): mounting fs with errors [ 971.541122][T12741] xt_hashlimit: max too large, truncated to 1048576 [ 971.582415][T12741] No such timeout policy "syz1" [ 978.089802][ T6038] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.622062][ T6038] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.209270][T12844] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1538'. [ 981.293941][ T6038] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.921159][ T6038] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.613825][T12880] loop3: detected capacity change from 0 to 131072 [ 984.682473][T12880] F2FS-fs (loop3): invalid crc value [ 984.712665][T12880] F2FS-fs (loop3): Found nat_bits in checkpoint [ 984.798992][T12880] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 985.895386][T12896] dlm: non-version read from control device 2147479552 [ 986.468862][ T6038] bridge_slave_1: left allmulticast mode [ 986.822960][ T6038] bridge_slave_1: left promiscuous mode [ 986.878937][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.655040][ T6038] bridge_slave_0: left allmulticast mode [ 989.702949][ T6038] bridge_slave_0: left promiscuous mode [ 990.418830][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.587342][T12950] loop3: detected capacity change from 0 to 512 [ 994.738627][ T6038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.782950][T12953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 994.797318][T12947] loop7: detected capacity change from 0 to 4096 [ 994.830863][T12950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 994.874288][ T6038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.011574][ T6038] bond0 (unregistering): Released all slaves [ 995.103484][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.945723][ T6038] tipc: Disabling bearer [ 996.985583][ T6038] tipc: Disabling bearer [ 997.041508][ T6038] tipc: Left network mode [ 997.646872][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.658247][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.917137][T12979] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1571'. [ 1002.060134][ T6038] hsr_slave_0: left promiscuous mode [ 1002.109187][ T6038] hsr_slave_1: left promiscuous mode [ 1002.146633][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.243747][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.329499][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.410832][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.644336][ T6038] veth1_macvtap: left promiscuous mode [ 1002.692162][ T6038] veth0_macvtap: left promiscuous mode [ 1002.729856][ T6038] veth1_vlan: left promiscuous mode [ 1002.771233][ T6038] veth0_vlan: left promiscuous mode [ 1007.519277][T13042] loop6: detected capacity change from 0 to 524287999 [ 1007.530843][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1007.540040][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1007.607754][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1007.638511][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1007.650082][ T6078] loop: Write error at byte offset 1, length 4096. [ 1007.684323][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1007.693818][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1007.702276][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1007.711459][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 1007.719540][T13042] Dev loop6: unable to read RDB block 8 [ 1007.740761][ C0] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1007.750076][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 1007.758208][T13042] loop6: unable to read partition table [ 1007.764184][T13042] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1008.266077][ C1] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 1008.273733][ T6038] team0 (unregistering): Port device team_slave_1 removed [ 1008.530095][ T6038] team0 (unregistering): Port device team_slave_0 removed [ 1008.936635][T13055] netlink: 'syz.2.1590': attribute type 4 has an invalid length. [ 1011.484268][T13026] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1011.536802][T13026] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1011.566247][T13026] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1011.592531][T13026] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1011.638866][T13026] geneve2: entered promiscuous mode [ 1011.669608][T13026] geneve2: entered allmulticast mode [ 1014.288813][ T5902] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1014.508556][ T5902] usb 8-1: Using ep0 maxpacket: 8 [ 1014.568645][ T5902] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1014.630823][ T5902] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1014.758035][ T5902] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1014.835863][ T5902] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1014.921635][ T5902] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.031641][ T5902] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1015.113293][ T5902] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.396346][ T5902] usb 8-1: usb_control_msg returned -32 [ 1015.428441][ T5902] usbtmc 8-1:16.0: can't read capabilities [ 1017.348989][ T5902] usb 8-1: USB disconnect, device number 13 [ 1017.699126][T13121] netlink: 'syz.7.1605': attribute type 4 has an invalid length. [ 1017.737362][T13121] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1605'. [ 1017.788167][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1605'. [ 1018.309297][T13123] loop7: detected capacity change from 0 to 128 [ 1021.049023][T13140] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1610'. [ 1022.515287][ T29] audit: type=1326 audit(1739783019.572:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.9.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84af8cde9 code=0x7fc00000 [ 1023.338079][ T29] audit: type=1326 audit(1739783020.392:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef518cde9 code=0x7ffc0000 [ 1023.519267][ T29] audit: type=1326 audit(1739783020.392:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef518cde9 code=0x7ffc0000 [ 1023.698515][ T29] audit: type=1326 audit(1739783020.482:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ef518cde9 code=0x7ffc0000 [ 1023.946009][ T29] audit: type=1326 audit(1739783020.482:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef518cde9 code=0x7ffc0000 [ 1025.148240][ T29] audit: type=1326 audit(1739783020.482:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ef518cde9 code=0x7ffc0000 [ 1025.336081][ T29] audit: type=1326 audit(1739783020.482:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef518cde9 code=0x7ffc0000 [ 1025.466173][ T29] audit: type=1326 audit(1739783020.482:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ef518cde9 code=0x7ffc0000 [ 1025.672296][ T29] audit: type=1326 audit(1739783020.482:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef518cde9 code=0x7ffc0000 [ 1025.909647][ T29] audit: type=1326 audit(1739783020.482:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f2ef518cde9 code=0x7ffc0000 [ 1030.198640][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1030.198665][ T29] audit: type=1326 audit(1739783027.252:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.0.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef518cde9 code=0x7fc00000 [ 1030.917730][ T29] audit: type=1326 audit(1739783027.972:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13237 comm="syz.0.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ef518cde9 code=0x7fc00000 [ 1039.728636][ T9732] syz_tun (unregistering): left allmulticast mode [ 1041.152036][T13378] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1041.164112][T13378] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1041.173050][T13378] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1041.183186][T13378] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1041.192186][T13378] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1041.200526][T13378] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1041.660975][ T8363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.332522][ T8363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.472922][T13378] Bluetooth: hci2: command tx timeout [ 1046.159801][T13407] Bluetooth: hci5: command 0x0406 tx timeout [ 1046.707571][T13407] Bluetooth: hci2: command tx timeout [ 1048.938681][ T5844] Bluetooth: hci2: command tx timeout [ 1051.547841][T13407] Bluetooth: hci2: command tx timeout [ 1052.595040][ T8363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.044915][ T8363] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.343709][T13438] syzkaller1: entered promiscuous mode [ 1056.378478][T13438] syzkaller1: entered allmulticast mode [ 1057.664340][T13375] chnl_net:caif_netlink_parms(): no params data found [ 1057.866184][ T8363] bridge_slave_1: left allmulticast mode [ 1057.905607][ T8363] bridge_slave_1: left promiscuous mode [ 1057.981276][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.127471][ T8363] bridge_slave_0: left allmulticast mode [ 1058.183850][ T8363] bridge_slave_0: left promiscuous mode [ 1058.211782][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.395511][T13468] loop7: detected capacity change from 0 to 512 [ 1058.429746][T13468] ext4: Unknown parameter 'seclabel' [ 1059.087747][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.094350][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.190971][T13407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1059.201265][T13407] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1059.217029][T13407] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1059.225268][T13407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1059.252574][T13407] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1059.264099][T13407] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1061.308683][T13407] Bluetooth: hci3: command tx timeout [ 1062.003959][ T8363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.116295][ T8363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.183868][ T8363] bond0 (unregistering): Released all slaves [ 1063.389445][T13407] Bluetooth: hci3: command tx timeout [ 1064.826798][T13375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.848759][T13375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.890720][T13375] bridge_slave_0: entered allmulticast mode [ 1064.911744][T13375] bridge_slave_0: entered promiscuous mode [ 1064.967244][T13375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.988711][T13375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.016388][T13375] bridge_slave_1: entered allmulticast mode [ 1065.041145][T13375] bridge_slave_1: entered promiscuous mode [ 1065.213364][T13375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.357840][ T8363] hsr_slave_0: left promiscuous mode [ 1065.386199][ T8363] hsr_slave_1: left promiscuous mode [ 1065.405504][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1065.428599][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.469086][T13407] Bluetooth: hci3: command tx timeout [ 1067.325669][ T8363] veth1_macvtap: left promiscuous mode [ 1067.556283][T13407] Bluetooth: hci3: command tx timeout [ 1068.260791][ T8363] veth0_macvtap: left promiscuous mode [ 1068.266456][ T8363] veth1_vlan: left promiscuous mode [ 1068.326381][ T8363] veth0_vlan: left promiscuous mode [ 1073.983306][ T8363] team0 (unregistering): Port device team_slave_1 removed [ 1076.037259][ T8363] team0 (unregistering): Port device team_slave_0 removed [ 1078.015342][ T8363] vcan0 (unregistering): left allmulticast mode [ 1078.075707][T13375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.913720][T13375] team0: Port device team_slave_0 added [ 1079.102148][T13375] team0: Port device team_slave_1 added [ 1079.461995][T13474] chnl_net:caif_netlink_parms(): no params data found [ 1079.527765][T13375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.551953][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.720098][T13375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.788522][T13375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.830152][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.947024][T13375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.501678][T13375] hsr_slave_0: entered promiscuous mode [ 1080.540105][T13375] hsr_slave_1: entered promiscuous mode [ 1081.564045][T13375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1081.579710][T13375] Cannot create hsr debugfs directory [ 1082.214749][T13474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.242352][T13474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.264320][T13474] bridge_slave_0: entered allmulticast mode [ 1083.030199][T13474] bridge_slave_0: entered promiscuous mode [ 1083.200455][T13474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.207584][T13474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.318688][T13474] bridge_slave_1: entered allmulticast mode [ 1083.364584][T13474] bridge_slave_1: entered promiscuous mode [ 1083.637212][T13474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.705645][T13474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.716828][T13474] team0: Port device team_slave_0 added [ 1084.766972][T13474] team0: Port device team_slave_1 added [ 1085.266095][ T8363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.692226][ T8363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.754010][T13474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.778559][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.804481][ C0] vkms_vblank_simulate: vblank timer overrun [ 1085.948309][T13474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.019277][T13474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.026244][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.052195][ C0] vkms_vblank_simulate: vblank timer overrun [ 1086.181883][T13474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.386526][ T8363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.495759][T13684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1711'. [ 1086.570550][T13688] veth1_to_bond: entered allmulticast mode [ 1086.577164][T13688] veth1_to_bond: left allmulticast mode [ 1087.370670][ T8363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.613496][T13474] hsr_slave_0: entered promiscuous mode [ 1087.642137][T13474] hsr_slave_1: entered promiscuous mode [ 1087.689174][T13474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1087.748461][T13474] Cannot create hsr debugfs directory [ 1087.845935][T13706] loop9: detected capacity change from 0 to 16 [ 1087.907140][T13706] erofs (device loop9): mounted with root inode @ nid 36. [ 1088.528643][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1721'. [ 1089.678954][ T8363] bridge_slave_1: left allmulticast mode [ 1089.684651][ T8363] bridge_slave_1: left promiscuous mode [ 1089.737734][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.817285][ T8363] bridge_slave_0: left allmulticast mode [ 1089.870142][ T8363] bridge_slave_0: left promiscuous mode [ 1089.897252][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.994690][ T8] IPVS: starting estimator thread 0... [ 1090.011921][T13733] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1090.128725][T13738] IPVS: using max 16 ests per chain, 38400 per kthread [ 1090.668488][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1090.756641][ T29] audit: type=1326 audit(1739783087.812:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.7.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0518cde9 code=0x7ffc0000 [ 1090.877031][ T29] audit: type=1326 audit(1739783087.852:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.7.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0518cde9 code=0x7ffc0000 [ 1090.977303][ T29] audit: type=1326 audit(1739783087.862:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.7.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb0518cde9 code=0x7ffc0000 [ 1091.094041][ T29] audit: type=1326 audit(1739783087.862:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.7.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0518cde9 code=0x7ffc0000 [ 1091.173627][ T29] audit: type=1326 audit(1739783087.862:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.7.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb0518cde9 code=0x7ffc0000 [ 1091.303236][ T29] audit: type=1326 audit(1739783087.862:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.7.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0518cde9 code=0x7ffc0000 [ 1091.435135][ T29] audit: type=1326 audit(1739783087.862:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.7.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb0518cde9 code=0x7ffc0000 [ 1091.538728][ T29] audit: type=1326 audit(1739783087.872:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.7.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0518cde9 code=0x7ffc0000 [ 1091.632933][ T29] audit: type=1326 audit(1739783087.872:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.7.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ffb0518cde9 code=0x7ffc0000 [ 1091.706552][ T29] audit: type=1326 audit(1739783087.872:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.7.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0518cde9 code=0x7ffc0000 [ 1091.745953][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1092.751919][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1092.936031][ T8363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.969374][ T8363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.007443][ T8363] bond0 (unregistering): Released all slaves [ 1093.788548][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1094.631432][ T8363] tipc: Disabling bearer [ 1094.669511][ T8363] tipc: Left network mode [ 1094.828805][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1095.511798][T13768] input: syz1 as /devices/virtual/input/input22 [ 1095.868492][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1096.596216][T13375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1096.679987][T13375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1096.908707][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1097.405402][ T25] IPVS: starting estimator thread 0... [ 1097.422109][T13790] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1097.568904][T13792] IPVS: using max 16 ests per chain, 38400 per kthread [ 1097.628499][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1097.948496][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1098.672597][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1098.718487][T13375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1098.995544][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1099.708524][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1100.031172][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1100.748499][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1100.853159][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1100.862726][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1100.870958][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1100.890709][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1100.899349][ T5847] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1100.907409][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1101.068559][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1101.514983][T13813] loop7: detected capacity change from 0 to 64 [ 1101.676228][ T8363] hsr_slave_0: left promiscuous mode [ 1101.725512][ T8363] hsr_slave_1: left promiscuous mode [ 1101.785995][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1101.793592][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1101.851922][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1101.897424][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1101.930865][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.046230][ T8363] veth1_macvtap: left promiscuous mode [ 1102.117089][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1102.121128][ T8363] veth0_macvtap: left promiscuous mode [ 1102.155052][ T8363] veth1_vlan: left promiscuous mode [ 1102.183027][ T8363] veth0_vlan: left promiscuous mode [ 1102.828504][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1102.990655][ T5847] Bluetooth: hci6: command tx timeout [ 1103.168480][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1103.868702][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1104.188581][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1104.400284][T13827] ------------[ cut here ]------------ [ 1104.406092][T13827] kernel BUG at mm/hugetlb.c:2333! [ 1104.411233][T13827] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 1104.418370][T13827] CPU: 1 UID: 0 PID: 13827 Comm: syz.9.1756 Not tainted 6.14.0-rc3-syzkaller #0 [ 1104.427421][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1104.437489][T13827] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0 [ 1104.443943][T13827] Code: a3 d0 00 00 00 e8 44 1c a3 ff 48 c7 c7 40 56 e1 8d e8 98 ca 40 09 48 89 e8 5b 5d 41 5c 41 5d e9 95 86 f9 fe e8 25 1c a3 ff 90 <0f> 0b e8 2d 5c 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 1104.463578][T13827] RSP: 0018:ffffc9000492f900 EFLAGS: 00010083 [ 1104.469670][T13827] RAX: 0000000000000807 RBX: ffffffff9a8d4758 RCX: ffffc90016b8c000 [ 1104.477664][T13827] RDX: 0000000000080000 RSI: ffffffff8216ba7b RDI: 0000000000000007 [ 1104.485657][T13827] RBP: ffffea0002d10000 R08: 0000000000000007 R09: 0000000000000000 [ 1104.493647][T13827] R10: 0000000000000000 R11: 00000000000000c2 R12: 0000000000000000 [ 1104.501638][T13827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015 [ 1104.509628][T13827] FS: 00007fa84be096c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1104.518580][T13827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1104.525185][T13827] CR2: 0000400000000000 CR3: 000000006a07e000 CR4: 0000000000350ef0 [ 1104.533177][T13827] Call Trace: [ 1104.536464][T13827] [ 1104.539409][T13827] ? die+0x31/0x80 [ 1104.543176][T13827] ? do_trap+0x232/0x430 [ 1104.547455][T13827] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 1104.553306][T13827] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 1104.559144][T13827] ? do_error_trap+0xf4/0x230 [ 1104.563855][T13827] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 1104.569698][T13827] ? handle_invalid_op+0x34/0x40 [ 1104.574670][T13827] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 1104.580512][T13827] ? exc_invalid_op+0x2e/0x50 [ 1104.585234][T13827] ? asm_exc_invalid_op+0x1a/0x20 [ 1104.590315][T13827] ? alloc_hugetlb_folio_reserve+0xab/0xc0 [ 1104.596157][T13827] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 1104.602001][T13827] memfd_alloc_folio+0x16c/0x3b0 [ 1104.606973][T13827] memfd_pin_folios+0xe8c/0x1150 [ 1104.611968][T13827] ? __pfx_memfd_pin_folios+0x10/0x10 [ 1104.617391][T13827] ? __pfx___lock_acquire+0x10/0x10 [ 1104.622636][T13827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1104.628341][T13827] ? __pfx_down_read+0x10/0x10 [ 1104.633148][T13827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1104.638831][T13827] ? __fget_files+0x206/0x3a0 [ 1104.643557][T13827] udmabuf_create+0x641/0x11e0 [ 1104.648364][T13827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1104.654052][T13827] ? __pfx_udmabuf_create+0x10/0x10 [ 1104.659288][T13827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1104.664969][T13827] ? lock_acquire+0x2f/0xb0 [ 1104.669516][T13827] ? __might_fault+0xe3/0x190 [ 1104.674222][T13827] ? __might_fault+0xe3/0x190 [ 1104.678939][T13827] udmabuf_ioctl+0x193/0x310 [ 1104.683561][T13827] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1104.688708][T13827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1104.694390][T13827] ? __fget_files+0x206/0x3a0 [ 1104.699113][T13827] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1104.704257][T13827] __x64_sys_ioctl+0x193/0x200 [ 1104.709060][T13827] do_syscall_64+0xcd/0x250 [ 1104.713604][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.719539][T13827] RIP: 0033:0x7fa84af8cde9 [ 1104.723971][T13827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.743607][T13827] RSP: 002b:00007fa84be09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1104.752047][T13827] RAX: ffffffffffffffda RBX: 00007fa84b1a5fa0 RCX: 00007fa84af8cde9 [ 1104.760038][T13827] RDX: 0000400000000040 RSI: 0000000040187542 RDI: 0000000000000004 [ 1104.768027][T13827] RBP: 00007fa84b00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.776015][T13827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1104.784003][T13827] R13: 0000000000000000 R14: 00007fa84b1a5fa0 R15: 00007ffd141bd928 [ 1104.792002][T13827] [ 1104.795030][T13827] Modules linked in: [ 1104.798942][T13827] ---[ end trace 0000000000000000 ]--- [ 1104.804405][T13827] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0 [ 1104.810856][T13827] Code: a3 d0 00 00 00 e8 44 1c a3 ff 48 c7 c7 40 56 e1 8d e8 98 ca 40 09 48 89 e8 5b 5d 41 5c 41 5d e9 95 86 f9 fe e8 25 1c a3 ff 90 <0f> 0b e8 2d 5c 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 1104.830491][T13827] RSP: 0018:ffffc9000492f900 EFLAGS: 00010083 [ 1104.836582][T13827] RAX: 0000000000000807 RBX: ffffffff9a8d4758 RCX: ffffc90016b8c000 [ 1104.844571][T13827] RDX: 0000000000080000 RSI: ffffffff8216ba7b RDI: 0000000000000007 [ 1104.852557][T13827] RBP: ffffea0002d10000 R08: 0000000000000007 R09: 0000000000000000 [ 1104.860545][T13827] R10: 0000000000000000 R11: 00000000000000c2 R12: 0000000000000000 [ 1104.868536][T13827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015 [ 1104.876528][T13827] FS: 00007fa84be096c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1104.885482][T13827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1104.892086][T13827] CR2: 0000400000000000 CR3: 000000006a07e000 CR4: 0000000000350ef0 [ 1104.900078][T13827] Kernel panic - not syncing: Fatal exception [ 1104.906350][T13827] Kernel Offset: disabled [ 1104.910679][T13827] Rebooting in 86400 seconds..