last executing test programs: 21.481088383s ago: executing program 3 (id=192): unshare(0x24020400) socket$inet_smc(0x2b, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 16.969219434s ago: executing program 3 (id=205): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9831cac58abe3e77, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="0800b685f75b2313db000000000000000000000000000800", 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES64, @ANYRESOCT=r1, @ANYBLOB="000000008000000000000000000000000049d513adaa6eb5f6fba6d1bc4cb3472813328e8e876d6809963bdd7746d4fae7a9648a57e306c246d54c81c209d22ffbf9b2a9d9b8de149c090bf32a499c95f028af1592c1e391a40e4f32c908e6151406d467be3300558e3246f0795a2ecaebdc8e916bbb458e41b692b3cdd283a84b40b588b49f5800ddc5f872397fc4020c91eca479ead80e6afaac995338042c89bdae48767006c319223205a3ebe9e649221ed923e90e31e4c15d352dc0d3f187ebf2378a58737de1481ffd2abe80ca05832e4b3ae26c50b22671272eb8ac6673d0dbde03e3dba18c49740f96f03b71e227f0", @ANYBLOB="e7abb169abe8e2ca5bc0ca8949caf5c63c1da0e89b28082e7ccdc5f8e4c719cdcf8ab4a1c3dc3e6389463a6b87efe844045f878ed7e5f5e4052ea0bfba118b5bec4e2b3203331bce9186ed94bfaca811a36efff1333a1664d04ee28a743667aee7ca269a0f62e4520faa0cdc6f5e004d77d76240d0623a148e912cc777c3f72d786c906c05df71aa45e26278a9d4bdc277243d49e03bef4a780e9b9a4fba1a00e8dbc224756c8310cab91ff9865bff071b6fa08f0c20f7bc7623501a038b7c44039fef291ca8e4d26bb42c49f388c8d9b9fb783980b3bc9a47b07b0a14e88599ffee7ff195e7834f889733cfa730797b1fbe3539c3c608f22c"], 0x48) r3 = socket$inet6(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000080)=""/19, &(0x7f00000000c0)=0x13) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000140), 0x4) 14.555052023s ago: executing program 1 (id=207): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2) r3 = syz_io_uring_setup(0xd0, 0x0, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000044) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$user(&(0x7f0000000300), 0x0, &(0x7f0000000500)="c97c3a905bdab3c12d5e5bb09363069e18db0a083ff2a8eff6bb4eb4301c7345c952b452772599895b87dbbdab00e5eadcdf07b3ab7d5969dae540f496b25c958aa391594aad29ea83d958775d7b8436654bed0f51103e7fe5df4c214a1d26238161abf8ac94ad675df24880728156bb0fd24eaa677eae46e7", 0x79, 0xfffffffffffffffd) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0xffffffff, 0x400, 0x0, 0x0, 0x6, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) getsockopt$SO_COOKIE(r1, 0x1, 0x47, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendmsg$inet_sctp(r0, &(0x7f00000027c0)={&(0x7f0000001380)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000026c0)=[{&(0x7f00000013c0)="5db699c12c48", 0x6}], 0x1, &(0x7f0000002740)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x30, 0x801}, 0x40) pipe(&(0x7f0000000000)) 12.793730486s ago: executing program 3 (id=210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) poll(0x0, 0x0, 0xffffffffffbffff8) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1}, 0x6e) close(0xffffffffffffffff) r4 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000440), &(0x7f0000000700)=0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2}, 0x38) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e24, 0x90, 0x4e22, 0x0, 0xa, 0x10, 0x20, 0x2b}, {0x10, 0x1, 0xa173, 0x2000000000000006, 0xfffffffffffffffb, 0x7b, 0xeb, 0xb9d}, {0x8d, 0x7, 0xa4, 0x101}, 0x5, 0x6e6bbf, 0x1, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x34ff, 0x5, 0x0, 0xc7, 0x4, 0x10000}}, 0xe8) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x3}, 0x18) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) write$sequencer(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x10) shutdown(r2, 0x1) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) 12.435026085s ago: executing program 1 (id=211): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="00003c000000f2f77f424dc819df3f772a7ab28ec3465a4f86babe119b9e7d6faa138863683317bb147dacbeb941d8ca28d2"], 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x28, 0xf4, 0x0, 0xfffff034}]}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0xffffffffffffffff, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.081253028s ago: executing program 2 (id=213): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) dup(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r4, 0x1, 0x0, 0x2000000, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000300), 0x4) 11.250266629s ago: executing program 0 (id=214): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {0xfff2}, {0xffee, 0x3d}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11.200515969s ago: executing program 1 (id=215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x41) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010260fda020d5160165f49f010203010902240001360ee000090474e00208", @ANYRES32=r0], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x5e0, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@connlabel={{0x28}, {0x4, 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x101, 0x0, 0x1, [0x8, 0xc, 0x8001, 0x8, 0x5, 0x2, 0x9, 0x4, 0xfff4, 0xf7fd, 0x6, 0xfff8, 0x6, 0x1, 0x2, 0x9], 0x10}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24000080) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, 0x0, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x0, 0x0, &(0x7f0000000180)={0x1f, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x1b01}}, './file0\x00'}) ioctl$TIOCGISO7816(r5, 0x80285442, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 10.998647918s ago: executing program 2 (id=216): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) syz_emit_ethernet(0xc9, &(0x7f0000000700)=ANY=[@ANYBLOB="0180c2000000aaaa25bb53411811d78847000000000000000000000000000000000000070000000f006c0044ea24496e20c03ee4800d44a48276060a9ce074bc48ee2941d78c88b2e8c63304834c9eeae32b86e16a4fd29869e15c4af1972e4e3ebdd5f9e60aac8ea145d09e17650e90469371260482c45832d7453a45fd556314ef985513168f5ad451f5c6d397e04b37ddde818c9a3a04e99e29465ad76539263b7c9708bc9850cbc4ff3bdcb14c7fc06f97df5d2350c14e"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x2963, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000580), &(0x7f0000000180)=""/11, 0x2}, 0x20) shutdown(r7, 0x0) ppoll(&(0x7f0000000280)=[{r7, 0x8088}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @mcast1, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 10.854086418s ago: executing program 0 (id=217): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xcb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r6 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r6, 0x402, 0x2b) mkdirat(r6, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x90, &(0x7f0000000580)=""/144, 0x41100, 0xc, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0xd, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r6], 0x0, 0x10, 0x2cc}, 0x1e) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x40, 0x15, 0x49, "5ebfca646a017afd44a1694bb8c4a76169c6f83bd52d2dccc7ddc6b59a097c27d394315b93baad9a8b8976f37cb0f7e2daae21a8bf3ab8fd07c09641958be66f6e095cfc7c681e2a74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) listen(r2, 0x0) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) 9.716473823s ago: executing program 2 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x9c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x8}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000240)=""/225, 0xe1}], 0x2, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000040)={0x6e, 0x7, r7, 0x0, 0x0, 0x0, 0x4000000000000000, 0x2}) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000e80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f0300000003000000010000000300000000000000000000000000000044942d000000000000000200000000000000000100000f0100"/98], 0x0, 0x6a, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) 9.698039429s ago: executing program 4 (id=219): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000100b00fc014000000000000000000000000000fe8000000000000000000000008000aa3b000000001090780200000000000000"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x23c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0x28, 0x8, "1db2a41f7204bb4c557631cc7ce0996855b94f8e81b9829aa017b68eeea09ee7695c56e9"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xff, 0x8, "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"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xbb, 0x8, "ec8badaa7496ee3fe070984368f97c5e5b9d45706602f17e642141de34f6e13accdb9571211052191201ebc37e0d61cf76aa78bda36e9e67f35c9f16ab99120cb4c9c31ae97852102179c6d07772f3dcfc3b6073d899a3aa2f4fabf04c5e651b2735f8b62987b7fc157722099927913e8782dd2a22e13d4c9d019ca445f4da9eb681bede7a52cbdbfd06f79c7faac4afbdcf533218bfcf8bb30c1a9f4120f0dcf2a5cec10f91800e78b22f0c40bf99afa5912c6d9d41ad"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x402, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELCHAIN={0xcc, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1c23932a}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELRULE={0x70, 0x8, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ca}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x138, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_HOOK={0xa0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELCHAIN={0x94, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58c}, 0x1, 0x0, 0x0, 0x11}, 0x4020040) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 7.693350965s ago: executing program 0 (id=220): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001"], 0x24}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4679000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 7.541579794s ago: executing program 1 (id=221): syz_usb_connect(0x0, 0x394, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x10, 0x3, 0xff, 0x5}, 0x48, &(0x7f0000000580)=ANY=[@ANYBLOB="050f4800060710020618ff0703100b0a1003020400ff090300141004056dd01ae2bf7a0e006f1718354e850710020026050014100a09021000000f0f0400cf00000000000000"], 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x459}}, {0x55, &(0x7f0000000280)=ANY=[@ANYBLOB="550393fa82f6a6d9b34e34bf4a74e5579d5fc95f2af9df52a6db9c2a19313769bf10e1d74ce204f2b5987934d12470e5de3c2c25ae1b60da6c5429f117f845d1e03d38cd207e7cafb548b9bb7417a0135c1896bd7a"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44d}}, {0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="06034a9e24fccb61d1cdefb31b370eef325b11178368ca64cd80b850591ca5365be45d2e4878c4b4bfffa7e01908e5222a6b125790f5f2479b1492d6b938b295636757805797d5f5c831ce3b4607c55641404684e4ebb050a6f5067b7aafaa2c898b43a2283167c04ecdd81d0ecd0b8426afe0d7f321ee885ae56a3e09ff51d67bd7fa550a6e5f410a8db580f0d8f31dccfbd8ff7fcd93f15e47"]}, {0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c034f76b21b97040007000000000000003b5f24dc26b6c252e91bfa"]}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @remote}, 0x10) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x9, 0x20, 0x8f, 0xff, 0x0, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x5}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r4], 0xfffffe95, 0x4001}], 0x1, 0x0) recvfrom$rxrpc(r5, 0x0, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1c02, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x80000002}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="94dc0987683ad599b283b1be0cc4e476acf5aee3be4651efbdbeda0ffb2e78627917878cc3e6a3ae853bd9c8e657f5e0d65052e4899c615b03001000", 0x3c}, {0x0}], 0x2) sendfile(r1, r0, 0x0, 0x20000023893) 7.41934057s ago: executing program 2 (id=222): connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e2a, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000500)={0x0, 0x9, 0xd, {0x2, 0xcac}, {0x8000, 0x7}, @cond=[{0xeeb, 0x405, 0x5, 0x610b, 0x8, 0x2cf2}, {0x2, 0x2, 0x5, 0xfff9, 0x6, 0x3b7e}]}) io_submit(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') write(r3, &(0x7f00000000c0)="4b0003000000", 0x6) 7.326589557s ago: executing program 4 (id=223): r0 = socket$netlink(0x10, 0x3, 0x12) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x8, 0x7f, 0x10000000, 0x0, [0x0], [0x0, 0x29, 0x2], [], [0x0, 0x0, 0xfffffffffffffffd, 0x8000]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={r4, 0xc1, 0xf, 0x34325241, 0x3, [0x2, 0x0, r5], [0x80ffff, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x3], [0xfff]}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x6}]}}}]}, 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 6.610086979s ago: executing program 3 (id=224): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c", 0x16) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x300}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) epoll_create1(0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) r9 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x7079, 0x1000, 0x14, 0x28b}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x3af6, 0xbebb, 0x0, 0x0, 0xfffffea9) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) 6.592897513s ago: executing program 0 (id=225): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x20000000) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket(0x40000000015, 0x5, 0x0) close(r4) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r6, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002100210100000000286c9b000000000a0000000000000110000000"], 0x1c}}, 0x0) 6.273902747s ago: executing program 2 (id=226): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "690ce289fad778da", "af9e6d188ba7d8d9e95df478a021616c", "43f1a00d", "fd33716e8b2075d0"}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xb, 0x29, 0x1, {0x1}}, 0xb) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_open_dev$MSR(0x0, 0x10001, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00005df000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@redirect_dir_nofollow}, {@nfs_export_on}]}) 6.194319447s ago: executing program 4 (id=227): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {0xfff2}, {0xffee, 0x3d}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.48148581s ago: executing program 0 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x6c}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 4.43881364s ago: executing program 2 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000008c4000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x0, 0x5}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x7}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={[{'\x01\x00\x00\x00&'}], [{@audit}, {@audit}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_role}]}) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000013c0)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="0200060059645c0fcbe5dff3e6ba0b653b7633a17adf90ff246b8a6419f879e23dd4de11a22c15d67d4cde4d2135ef83f35025b32316acc37d9e02ad62848b5ae8af80caeab9b41a3abfe30930f32488f3a690f7d559e51d96bed0d69da3bf7425d0325a87ccece17567854bc89ec9ce0a8587035cc25987c385845b6bcc3ca3a4800d5a3aaa58226f", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB="040002000000000008000400", @ANYRES32=0x0, @ANYBLOB="0800b57b", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080097cf", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="10000200000000002000000000000000"], 0xa4, 0x3) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x2b, 0x3, 0x4, 0x0, 0x0, [{{r0}, 0x735}, {{r0}, 0x3}, {{r0}}, {{r0}, 0x5}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000000000000d6ee776f0011ba6a", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000001380)=ANY=[@ANYRES8=r4], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB="401201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.358189361s ago: executing program 3 (id=230): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000300)="5d0f588df1de20f0e7e10cbfc790efe7c88960be65495bb830ccfcec7066170ac2ad0cde7e71e196b54c6d3a244a63f3d24082c5e7e4571e776682be23224070f24f95f856f8187e36261259b0bb831c8b3a9deb4e279125006abd2030ac73df80b6fd55f5dd2f11e6d50bbac81e9055a688e9756280efeca49c5419f22fcf0d29b19325e65989376915b0019c79d835a559a66e14187ce2fd43e51f83407c9b1b2016442ebe2fca4b37fe8420b6edf89de187e936bc5bfc668af1769379b4de1735c58b75db59416b694e4d1fb7747bea93a707c35adb00cac41c90323a7c29668bfa5b53a8b90f6dc60529dab93f32a5379e9a827773", 0xf7}, {&(0x7f00000000c0)="21000afe6604050f2efa3a56a181c0b19134733f7799", 0x16}, {&(0x7f0000000440)="7b148a5623b13d9dd609ed218009ffae261e7fcf1ca89877ecc2f04988239cd391d01a559169992f3eef5a46e1646cbcb508ce5ce2ebd4d55671d122145d5a22fcec2d59ca900718592f5e953c0584aa248e78914864e543cea5b66e01ecfee406663e23738338570ae6c72dae812712eaac1d770febafac5b44cfd40f28ec65f2376ff57ee10b4e7d3f85aae5e46e57c305955faea027ca0f079a9f7f6d48f85bd576200a47b655cc7535877a254fdaa6711e52e061", 0xb6}, {&(0x7f0000000100)="bf96d86c819e5c992ee0ebab39a0713f49b874c9772e225f016fed8180460a37e0837180c794a9b6ded81b07e8b0d98c0dc099dfb02d58909846720b4a62b5", 0x3f}, {&(0x7f0000000200)="597ea57e51cbebee11fe52e71fc28b940395024f2b1486be9733", 0x1a}, {&(0x7f0000002780)="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", 0x1000}], 0x6) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.357252741s ago: executing program 1 (id=231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x41) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010260fda020d5160165f49f010203010902240001360ee000090474e00208", @ANYRES32=r0], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x5e0, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@connlabel={{0x28}, {0x4, 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x101, 0x0, 0x1, [0x8, 0xc, 0x8001, 0x8, 0x5, 0x2, 0x9, 0x4, 0xfff4, 0xf7fd, 0x6, 0xfff8, 0x6, 0x1, 0x2, 0x9], 0x10}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24000080) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, 0x0, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x0, 0x0, &(0x7f0000000180)={0x1f, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x1b01}}, './file0\x00'}) ioctl$TIOCGISO7816(r5, 0x80285442, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.939899225s ago: executing program 4 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x44, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}]}, 0x44}, 0x1, 0x0, 0x200000000000000, 0x4}, 0x0) 3.040823368s ago: executing program 4 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x9c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x8}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000240)=""/225, 0xe1}], 0x2, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000040)={0x6e, 0x7, r7, 0x0, 0x0, 0x0, 0x4000000000000000, 0x2}) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000e80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f0300000003000000010000000300000000000000000000000000000044942d000000000000000200000000000000000100000f0100"/98], 0x0, 0x6a, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) 2.219691045s ago: executing program 0 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0xf6, @none, 0x0, 0x2}, 0xe) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 307.839852ms ago: executing program 3 (id=235): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa0000000000007110110057000000950000d797000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = io_uring_setup(0x3291, &(0x7f00000001c0)={0x0, 0x6462, 0x2, 0x1, 0x6b}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f00000021c0)=[{0x3, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f00000007c0)=""/231, 0xe7}, {&(0x7f00000008c0)=""/189, 0xbd}], &(0x7f0000000240)=[0x1, 0x7b64]}, {0x1, 0x671b338b4f886c72, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/30, 0x1e}], &(0x7f0000000400)=[0x814b, 0x260f, 0x2, 0x3, 0x9deb]}, {0x3, 0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/23, 0x17}, {&(0x7f00000004c0)=""/118, 0x76}, {&(0x7f0000000980)=""/165, 0xa5}], 0x0}, {0x4, 0x1, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a40)=""/115, 0x73}, {&(0x7f0000000ac0)=""/63, 0x3f}, {&(0x7f0000000b00)=""/222, 0xde}, {&(0x7f0000000c00)=""/223, 0xdf}], &(0x7f0000000d40)=[0x5, 0x100000000, 0x81cd, 0x104b5107, 0x5, 0x80]}, {0x6, 0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/97, 0x61}, {&(0x7f0000001e00)=""/162, 0xa2}, {&(0x7f0000001ec0)=""/197, 0xc5}, {&(0x7f0000001fc0)=""/141, 0x8d}, {&(0x7f0000002080)=""/89, 0x59}], &(0x7f0000002180)=[0x7]}], 0x5) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = syz_io_uring_setup(0x6963, &(0x7f0000002c40)={0x0, 0xda53, 0x85a856b41e2bd79f, 0x2, 0x3bf, 0x0, r1}, &(0x7f0000002cc0), &(0x7f0000002d00)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f00000003c0)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x13}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) r7 = fsopen(&(0x7f00000000c0)='cramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x10, 0x0, 0x0, 0x0, &(0x7f000039a000/0x4000)=nil, 0x4000, 0xf, 0x0, {0x0, r11}}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb, 0x110, r8, 0x3fb4a000) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r14 = syz_usb_connect$cdc_ncm(0x4, 0x77, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x9, 0xf0, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "bb120fad"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xdb58, 0xde0, 0xff}, {0x6, 0x24, 0x1a, 0x938, 0x20}, [@obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x33, 0x4, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x4, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x40, 0x2}}}}}}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002300)={0xa, 0x6, 0x310, 0x5, 0x4, 0x8, 0x0, 0xf}, 0xf, &(0x7f0000002340)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x7, 0x6}]}, 0x3, [{0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x4c47}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x4c0a}}]}) syz_usb_control_io(r14, &(0x7f0000002700)={0x2c, &(0x7f0000002480)={0x40, 0xc, 0xe9, {0xe9, 0x21, "ddafe901a87941f0b54e9bfaaf254968f69c5df0d6016fe35ae73c2f5326bf5c980a6d7d2aa581169f90cc8a7b1a33b7ce03b8d4c9dd69f7d2ed5c450b9e6ed0fdc4932d63a55d8cecdf900b6be6dae4bb278394ed27a65008b300a7d3697b93d2c909ed12c8033cfbadd02b05161aad0f6f2fde2595d1194b5e9572963a3a69388ff6b45c826653a62262a008c5be0e5bac299a8edb23e4d1c8b8a023a877fffcae8e2a6e24a3cd26465b8a9e64a14b40dc21301b0865b63e92bc116e056d1a4fecea9890b0a607d4a92f25eb469e81dc1c6b247ce507088f355dff587fe13a8733a05d7d5e08"}}, &(0x7f0000002580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, &(0x7f00000025c0)={0x0, 0xf, 0xa0, {0x5, 0xf, 0xa0, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "f50d5e1f5101dfccdbeffc4a4348f5c8"}, @ptm_cap={0x3}, @generic={0x81, 0x10, 0x3, "9f577bfaf1c2d5ebcfceb78660052e272de226cd1ceef6f74f2f9ecd9b97c2690ffa776a3366d9d1f4c3b5ba01b417524ee7579e12aad60a704ede7ee2a85d5b9ca15e6e57d9913d0e933d2dbe1cbe6f5b128fe81e1ef640e0e1e74d444705178c920600ebd1f4a78b3e14c3eb917cf09ecce24536c88b9309df64558b32"}, @ptm_cap={0x3}]}}, &(0x7f0000002680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0x7, 0xc5, "8a55d535", "f26ae072"}}, &(0x7f00000026c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0x4, 0x80, 0x4, 0x27, 0x1ff}}}, &(0x7f0000002b80)={0x84, &(0x7f0000002740)={0x40, 0x12, 0x58, "1f416d30e21fa1242acdd6c8c1ec64d860028e350f9553962e33194a6f309c6dc8ee87513dbc52630f16ec354d7ec94ea5a8ea1f8017132ed495386fe2c5adc81b44557172b82507702d7ec61245343ccd318ccfdf2d9cde"}, &(0x7f00000027c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002800)={0x0, 0x8, 0x1, 0xa8}, &(0x7f0000002840)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000002880)={0x20, 0x0, 0x8, {0x0, 0x1, [0xf00]}}, &(0x7f00000028c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000002900)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002940)={0x40, 0xb, 0x2, 'JP'}, &(0x7f0000002980)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000029c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000002a00)={0x40, 0x17, 0x6}, &(0x7f0000002a40)={0x40, 0x19, 0x2, ':r'}, &(0x7f0000002a80)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000002ac0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000002b00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000002b40)={0x40, 0x21, 0x1, 0x8}}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r13, 0x900, 0x2010}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x4050) io_uring_enter(r8, 0x47f6, 0x0, 0x2, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 129.768007ms ago: executing program 1 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000008c4000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x0, 0x5}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x7}}, 0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={[{'\x01\x00\x00\x00&'}], [{@audit}, {@audit}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_role}]}) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) fsetxattr$system_posix_acl(r3, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000013c0)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="0200060059645c0fcbe5dff3e6ba0b653b7633a17adf90ff246b8a6419f879e23dd4de11a22c15d67d4cde4d2135ef83f35025b32316acc37d9e02ad62848b5ae8af80caeab9b41a3abfe30930f32488f3a690f7d559e51d96bed0d69da3bf7425d0325a87ccece17567854bc89ec9ce0a8587035cc25987c385845b6bcc3ca3a4800d5a3aaa58226f", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB="040002000000000008000400", @ANYRES32=0x0, @ANYBLOB="0800b57b", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080097cf", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="10000200000000002000000000000000"], 0xa4, 0x3) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x2b, 0x3, 0x4, 0x0, 0x0, [{{r0}, 0x735}, {{r0}, 0x3}, {{r0}}, {{r0}, 0x5}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000000000000d6ee776f0011ba6a", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000001380)=ANY=[@ANYRES8=r5], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB="401201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=237): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000010100"], 0x50) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x3f, 0x0) (fail_nth: 9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 82.953724][ T5807] cgroup: Unknown subsys name 'net' [ 83.068239][ T5807] cgroup: Unknown subsys name 'cpuset' [ 83.077453][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.776510][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.540287][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.548757][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.556883][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.565179][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.573032][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.603961][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.614881][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.634707][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.643092][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.651726][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.666143][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.675208][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.682886][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.691560][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.699333][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.760061][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.768312][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.777259][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.786385][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.796442][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.796656][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.805263][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.813629][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.820453][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.839070][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.344434][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 90.480790][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 90.631507][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 90.665950][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.673575][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.682039][ T5824] bridge_slave_0: entered allmulticast mode [ 90.689394][ T5824] bridge_slave_0: entered promiscuous mode [ 90.747188][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.754954][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.762513][ T5824] bridge_slave_1: entered allmulticast mode [ 90.769799][ T5824] bridge_slave_1: entered promiscuous mode [ 90.777094][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 90.938032][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.967942][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 90.986699][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.994308][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.002107][ T5821] bridge_slave_0: entered allmulticast mode [ 91.009350][ T5821] bridge_slave_0: entered promiscuous mode [ 91.019594][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.066115][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.073572][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.080811][ T5821] bridge_slave_1: entered allmulticast mode [ 91.088274][ T5821] bridge_slave_1: entered promiscuous mode [ 91.137547][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.144866][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.152821][ T5828] bridge_slave_0: entered allmulticast mode [ 91.160124][ T5828] bridge_slave_0: entered promiscuous mode [ 91.214210][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.222140][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.229382][ T5828] bridge_slave_1: entered allmulticast mode [ 91.237014][ T5828] bridge_slave_1: entered promiscuous mode [ 91.262026][ T5824] team0: Port device team_slave_0 added [ 91.316567][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.330376][ T5824] team0: Port device team_slave_1 added [ 91.373701][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.399051][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.409043][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.416515][ T5817] bridge_slave_0: entered allmulticast mode [ 91.424837][ T5817] bridge_slave_0: entered promiscuous mode [ 91.439917][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.454172][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.489466][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.496906][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.504320][ T5817] bridge_slave_1: entered allmulticast mode [ 91.512870][ T5817] bridge_slave_1: entered promiscuous mode [ 91.574926][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.582606][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.609945][ T5820] Bluetooth: hci0: command tx timeout [ 91.615649][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.649704][ T5828] team0: Port device team_slave_0 added [ 91.658754][ T5828] team0: Port device team_slave_1 added [ 91.669055][ T5821] team0: Port device team_slave_0 added [ 91.677038][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.686110][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.712621][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.738416][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.745847][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.753413][ T5829] bridge_slave_0: entered allmulticast mode [ 91.760704][ T5829] bridge_slave_0: entered promiscuous mode [ 91.767142][ T5820] Bluetooth: hci2: command tx timeout [ 91.770458][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.773321][ T5820] Bluetooth: hci1: command tx timeout [ 91.786025][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.793367][ T5829] bridge_slave_1: entered allmulticast mode [ 91.800704][ T5829] bridge_slave_1: entered promiscuous mode [ 91.821945][ T5821] team0: Port device team_slave_1 added [ 91.838226][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.852120][ T51] Bluetooth: hci3: command tx timeout [ 91.855622][ T977] cfg80211: failed to load regulatory.db [ 91.921383][ T51] Bluetooth: hci4: command tx timeout [ 91.934854][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.942353][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.968944][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.985534][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.998912][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.009262][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.016486][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.042803][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.072089][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.079084][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.105250][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.142321][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.167240][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.177189][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.206483][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.271086][ T5829] team0: Port device team_slave_0 added [ 92.292550][ T5824] hsr_slave_0: entered promiscuous mode [ 92.299064][ T5824] hsr_slave_1: entered promiscuous mode [ 92.326307][ T5817] team0: Port device team_slave_0 added [ 92.334933][ T5829] team0: Port device team_slave_1 added [ 92.342962][ T5817] team0: Port device team_slave_1 added [ 92.459556][ T5821] hsr_slave_0: entered promiscuous mode [ 92.466683][ T5821] hsr_slave_1: entered promiscuous mode [ 92.473263][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.480989][ T5821] Cannot create hsr debugfs directory [ 92.487608][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.495254][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.521326][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.555718][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.562988][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.593794][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.607273][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.614466][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.640754][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.653876][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.660886][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.687139][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.717416][ T5828] hsr_slave_0: entered promiscuous mode [ 92.723893][ T5828] hsr_slave_1: entered promiscuous mode [ 92.730014][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.737661][ T5828] Cannot create hsr debugfs directory [ 92.892753][ T5817] hsr_slave_0: entered promiscuous mode [ 92.899171][ T5817] hsr_slave_1: entered promiscuous mode [ 92.906542][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.914367][ T5817] Cannot create hsr debugfs directory [ 92.927319][ T5829] hsr_slave_0: entered promiscuous mode [ 92.934217][ T5829] hsr_slave_1: entered promiscuous mode [ 92.940352][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.948002][ T5829] Cannot create hsr debugfs directory [ 93.503224][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.537886][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.557169][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.575650][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.595295][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.623729][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.643092][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.665695][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.681786][ T51] Bluetooth: hci0: command tx timeout [ 93.737496][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.757854][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.785065][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.816808][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.853330][ T51] Bluetooth: hci1: command tx timeout [ 93.853416][ T5820] Bluetooth: hci2: command tx timeout [ 93.926260][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.931533][ T5820] Bluetooth: hci3: command tx timeout [ 93.948780][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.979474][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.992200][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.001736][ T5820] Bluetooth: hci4: command tx timeout [ 94.092470][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.104383][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.116858][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.128772][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.206628][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.224716][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.334943][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.345308][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.361240][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.408100][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.415580][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.429096][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.436381][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.448497][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.455659][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.498337][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.528583][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.535799][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.546884][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.554120][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.588155][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.595395][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.610512][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.678436][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.701207][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.762970][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.770111][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.819922][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.866829][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.874135][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.914499][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.921740][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.936598][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.943841][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.150505][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.299797][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.454374][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.585634][ T5821] veth0_vlan: entered promiscuous mode [ 95.654264][ T5821] veth1_vlan: entered promiscuous mode [ 95.680989][ T5817] veth0_vlan: entered promiscuous mode [ 95.717693][ T5817] veth1_vlan: entered promiscuous mode [ 95.761659][ T5820] Bluetooth: hci0: command tx timeout [ 95.783266][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.809771][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.832768][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.876357][ T5821] veth0_macvtap: entered promiscuous mode [ 95.915682][ T5817] veth0_macvtap: entered promiscuous mode [ 95.921900][ T5820] Bluetooth: hci2: command tx timeout [ 95.926342][ T51] Bluetooth: hci1: command tx timeout [ 95.935558][ T5821] veth1_macvtap: entered promiscuous mode [ 95.959751][ T5817] veth1_macvtap: entered promiscuous mode [ 95.994807][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.002361][ T51] Bluetooth: hci3: command tx timeout [ 96.022290][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.080770][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.092768][ T51] Bluetooth: hci4: command tx timeout [ 96.104130][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.113155][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.121967][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.136083][ T5829] veth0_vlan: entered promiscuous mode [ 96.150962][ T5828] veth0_vlan: entered promiscuous mode [ 96.183933][ T5828] veth1_vlan: entered promiscuous mode [ 96.205847][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.259622][ T5829] veth1_vlan: entered promiscuous mode [ 96.288725][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.333527][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.344813][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.354029][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.362871][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.487505][ T5828] veth0_macvtap: entered promiscuous mode [ 96.524697][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.526460][ T5828] veth1_macvtap: entered promiscuous mode [ 96.537966][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.555302][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.555526][ T5829] veth0_macvtap: entered promiscuous mode [ 96.569656][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.608223][ T5829] veth1_macvtap: entered promiscuous mode [ 96.671059][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.679227][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.690995][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.706115][ T5824] veth0_vlan: entered promiscuous mode [ 96.731937][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.747161][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.788535][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.801232][ T5824] veth1_vlan: entered promiscuous mode [ 96.823484][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.846720][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.855840][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.866696][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.874346][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.884558][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.893620][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.907479][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.921424][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.930286][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.943251][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.166646][ T5824] veth0_macvtap: entered promiscuous mode [ 97.219770][ T5824] veth1_macvtap: entered promiscuous mode [ 97.220812][ T30] audit: type=1326 audit(1751226429.835:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.2.6" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb53c78e929 code=0x0 [ 97.292522][ T30] audit: type=1326 audit(1751226429.835:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.2.6" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb53c78e929 code=0x0 [ 97.335425][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.345206][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.410473][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.537871][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.579462][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.618826][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.648684][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.660117][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.684966][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.700273][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.715701][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.725186][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.841649][ T51] Bluetooth: hci0: command tx timeout [ 97.960146][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.001397][ T51] Bluetooth: hci1: command tx timeout [ 98.002099][ T5820] Bluetooth: hci2: command tx timeout [ 98.017440][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.082203][ T5820] Bluetooth: hci3: command tx timeout [ 98.162546][ T5820] Bluetooth: hci4: command tx timeout [ 98.328796][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.353493][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.048125][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.073203][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.461986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.631860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.635425][ T5975] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.672393][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 101.778989][ T10] usb 2-1: device descriptor read/64, error -71 [ 102.041518][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 102.083042][ T5902] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.207023][ T10] usb 2-1: device descriptor read/64, error -71 [ 102.271412][ T5902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.401014][ T10] usb usb2-port1: attempt power cycle [ 102.487876][ T5902] usb 1-1: config 0 has no interfaces? [ 102.713944][ T5902] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.903976][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.931077][ T5902] usb 1-1: Product: syz [ 102.938544][ T5902] usb 1-1: Manufacturer: syz [ 102.945169][ T5902] usb 1-1: SerialNumber: syz [ 102.951481][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 102.980698][ T5902] usb 1-1: config 0 descriptor?? [ 103.182153][ T10] usb 2-1: device not accepting address 4, error -71 [ 103.300509][ T5988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.482915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.522086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.530418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.674514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.683488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 103.776892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.786156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.879321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.261450][ T6012] Context (ID=0x4db) not attached to queue pair (handle=0x0:0x9) [ 104.643281][ T5820] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 104.652431][ T5820] Bluetooth: hci0: Injecting HCI hardware error event [ 104.660249][ T5820] Bluetooth: hci0: hardware error 0x00 [ 104.668023][ T5940] usb 1-1: USB disconnect, device number 2 [ 104.809668][ T6021] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 105.438725][ T6031] overlayfs: missing 'lowerdir' [ 105.767357][ T44] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.910849][ T6045] FAULT_INJECTION: forcing a failure. [ 105.910849][ T6045] name failslab, interval 1, probability 0, space 0, times 1 [ 105.931486][ T6045] CPU: 0 UID: 0 PID: 6045 Comm: syz.2.33 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 105.931518][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.931536][ T6045] Call Trace: [ 105.931548][ T6045] [ 105.931558][ T6045] dump_stack_lvl+0x189/0x250 [ 105.931602][ T6045] ? __pfx____ratelimit+0x10/0x10 [ 105.931633][ T6045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.931663][ T6045] ? __pfx__printk+0x10/0x10 [ 105.931691][ T6045] ? __pfx___might_resched+0x10/0x10 [ 105.931720][ T6045] ? fs_reclaim_acquire+0x7d/0x100 [ 105.931754][ T6045] should_fail_ex+0x414/0x560 [ 105.931785][ T6045] should_failslab+0xa8/0x100 [ 105.931815][ T6045] __kmalloc_noprof+0xcb/0x4f0 [ 105.931839][ T6045] ? io_cache_alloc_new+0x40/0x100 [ 105.931867][ T6045] ? percpu_ref_get_many+0x21/0x1e0 [ 105.931903][ T6045] io_cache_alloc_new+0x40/0x100 [ 105.931935][ T6045] io_msg_alloc_async+0x1b2/0x2d0 [ 105.931966][ T6045] io_send_zc_prep+0x42e/0xdd0 [ 105.932012][ T6045] io_submit_sqes+0x90f/0x1c50 [ 105.932067][ T6045] __se_sys_io_uring_enter+0x2df/0x2b20 [ 105.932112][ T6045] ? ksys_write+0x1cb/0x250 [ 105.932140][ T6045] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 105.932161][ T6045] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 105.932200][ T6045] ? __pfx_vfs_write+0x10/0x10 [ 105.932227][ T6045] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.932263][ T6045] ? __fget_files+0x3a0/0x420 [ 105.932300][ T6045] ? fput+0xa0/0xd0 [ 105.932331][ T6045] ? ksys_write+0x22a/0x250 [ 105.932357][ T6045] ? __pfx_ksys_write+0x10/0x10 [ 105.932382][ T6045] ? rcu_is_watching+0x15/0xb0 [ 105.932419][ T6045] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 105.932445][ T6045] do_syscall_64+0xfa/0x3b0 [ 105.932475][ T6045] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.932503][ T6045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.932524][ T6045] ? clear_bhb_loop+0x60/0xb0 [ 105.932550][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.932570][ T6045] RIP: 0033:0x7fb53c78e929 [ 105.932596][ T6045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.932613][ T6045] RSP: 002b:00007fb53d6a2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 105.932636][ T6045] RAX: ffffffffffffffda RBX: 00007fb53c9b5fa0 RCX: 00007fb53c78e929 [ 105.932650][ T6045] RDX: 0000000000000020 RSI: 00000000000047bc RDI: 0000000000000003 [ 105.932662][ T6045] RBP: 00007fb53d6a2090 R08: 0000000000000000 R09: 0000000000000000 [ 105.932675][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.932688][ T6045] R13: 0000000000000000 R14: 00007fb53c9b5fa0 R15: 00007ffd7a367b48 [ 105.932720][ T6045] [ 105.951405][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 106.354567][ T44] usb 1-1: no configurations [ 106.359421][ T44] usb 1-1: can't read configurations, error -22 [ 106.512034][ T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.548251][ T5940] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 106.791446][ T5940] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 106.831577][ T5820] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 106.914925][ T6057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.939107][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.067435][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 107.212122][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 107.231441][ T44] usb 1-1: no configurations [ 107.236116][ T44] usb 1-1: can't read configurations, error -22 [ 107.245774][ T44] usb usb1-port1: attempt power cycle [ 107.337722][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 107.348990][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.599959][ T5940] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 107.732106][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.848294][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.867196][ T5940] usb 5-1: Product: syz [ 107.940028][ T5940] usb 5-1: Manufacturer: syz [ 108.031802][ T5940] usb 5-1: SerialNumber: syz [ 108.340354][ T5940] usb 5-1: config 0 descriptor?? [ 108.761774][ T5940] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 110.064666][ T5940] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 110.091374][ T44] usb 1-1: device not accepting address 5, error -71 [ 110.286066][ T5940] usb 5-1: USB disconnect, device number 2 [ 111.102194][ T5940] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 111.271480][ T5940] usb 2-1: device descriptor read/64, error -71 [ 111.512968][ T5940] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 111.738506][ T6106] netlink: 132 bytes leftover after parsing attributes in process `syz.3.48'. [ 112.023719][ T5940] usb 2-1: device descriptor read/64, error -71 [ 112.262327][ T5940] usb usb2-port1: attempt power cycle [ 112.372412][ T6109] netlink: 60 bytes leftover after parsing attributes in process `syz.3.50'. [ 112.493981][ T6109] netlink: 60 bytes leftover after parsing attributes in process `syz.3.50'. [ 112.510651][ T6109] netlink: 60 bytes leftover after parsing attributes in process `syz.3.50'. [ 112.665472][ T5940] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 112.707283][ T5940] usb 2-1: device descriptor read/8, error -71 [ 112.767673][ T6114] FAULT_INJECTION: forcing a failure. [ 112.767673][ T6114] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.794523][ T6114] CPU: 0 UID: 0 PID: 6114 Comm: syz.3.52 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 112.794554][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.794567][ T6114] Call Trace: [ 112.794576][ T6114] [ 112.794584][ T6114] dump_stack_lvl+0x189/0x250 [ 112.794620][ T6114] ? __pfx____ratelimit+0x10/0x10 [ 112.794650][ T6114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.794681][ T6114] ? __pfx__printk+0x10/0x10 [ 112.794702][ T6114] ? __might_fault+0xb0/0x130 [ 112.794740][ T6114] should_fail_ex+0x414/0x560 [ 112.794769][ T6114] _copy_from_iter+0x1db/0x16f0 [ 112.794802][ T6114] ? rcu_is_watching+0x15/0xb0 [ 112.794834][ T6114] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 112.794861][ T6114] ? __pfx__copy_from_iter+0x10/0x10 [ 112.794892][ T6114] ? __build_skb_around+0x257/0x3e0 [ 112.794918][ T6114] ? netlink_sendmsg+0x642/0xb30 [ 112.794939][ T6114] ? skb_put+0x11b/0x210 [ 112.794974][ T6114] netlink_sendmsg+0x6b2/0xb30 [ 112.795015][ T6114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.795047][ T6114] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.795072][ T6114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.795096][ T6114] __sock_sendmsg+0x219/0x270 [ 112.795130][ T6114] ____sys_sendmsg+0x505/0x830 [ 112.795161][ T6114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.795196][ T6114] ? import_iovec+0x74/0xa0 [ 112.795231][ T6114] ___sys_sendmsg+0x21f/0x2a0 [ 112.795257][ T6114] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.795320][ T6114] ? __fget_files+0x2a/0x420 [ 112.795348][ T6114] ? __fget_files+0x3a0/0x420 [ 112.795387][ T6114] __x64_sys_sendmsg+0x19b/0x260 [ 112.795415][ T6114] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.795450][ T6114] ? __pfx_ksys_write+0x10/0x10 [ 112.795472][ T6114] ? rcu_is_watching+0x15/0xb0 [ 112.795508][ T6114] ? do_syscall_64+0xbe/0x3b0 [ 112.795543][ T6114] do_syscall_64+0xfa/0x3b0 [ 112.795572][ T6114] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.795601][ T6114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.795622][ T6114] ? clear_bhb_loop+0x60/0xb0 [ 112.795648][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.795668][ T6114] RIP: 0033:0x7f94c3f8e929 [ 112.795687][ T6114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.795705][ T6114] RSP: 002b:00007f94c4d8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.795728][ T6114] RAX: ffffffffffffffda RBX: 00007f94c41b5fa0 RCX: 00007f94c3f8e929 [ 112.795743][ T6114] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 112.795757][ T6114] RBP: 00007f94c4d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 112.795770][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.795782][ T6114] R13: 0000000000000000 R14: 00007f94c41b5fa0 R15: 00007ffcca21d8d8 [ 112.795814][ T6114] [ 113.473368][ T6122] Can't find a SQUASHFS superblock on nullb0 [ 113.484946][ T6122] netlink: 32 bytes leftover after parsing attributes in process `syz.0.53'. [ 113.498516][ T5940] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 113.526428][ T5940] usb 2-1: device descriptor read/8, error -71 [ 113.657699][ T5940] usb usb2-port1: unable to enumerate USB device [ 114.068892][ T6129] overlayfs: failed to resolve './file1': -2 [ 114.831739][ T5940] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.015808][ T5940] usb 4-1: device descriptor read/64, error -71 [ 115.515243][ T6142] syz.1.59 uses obsolete (PF_INET,SOCK_PACKET) [ 115.751881][ T5940] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.141784][ T5940] usb 4-1: device descriptor read/64, error -71 [ 116.503326][ T5940] usb usb4-port1: attempt power cycle [ 117.017928][ T6149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.025515][ T6149] IPv6: NLM_F_CREATE should be set when creating new route [ 117.032930][ T6149] IPv6: NLM_F_CREATE should be set when creating new route [ 117.256590][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'. [ 117.571201][ T6158] netlink: 'syz.2.62': attribute type 4 has an invalid length. [ 117.626276][ T6159] netlink: 'syz.2.62': attribute type 4 has an invalid length. [ 118.365779][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 118.779671][ T977] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 119.413457][ T6174] Zero length message leads to an empty skb [ 119.735331][ T6180] overlayfs: failed to resolve './file1': -2 [ 120.177228][ T5902] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.430139][ T6183] capability: warning: `syz.3.69' uses deprecated v2 capabilities in a way that may be insecure [ 120.470933][ T5902] usb 5-1: device descriptor read/64, error -71 [ 120.706708][ T977] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.730734][ T977] usb 2-1: not running at top speed; connect to a high speed hub [ 120.783494][ T977] usb 2-1: config 54 has an invalid interface number: 116 but max is 0 [ 120.801811][ T977] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 120.852870][ T5902] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.872864][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 120.883170][ T6181] netlink: 48 bytes leftover after parsing attributes in process `syz.3.69'. [ 120.894731][ T977] usb 2-1: config 54 has no interface number 0 [ 120.900988][ T977] usb 2-1: config 54 interface 116 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 120.947660][ T977] usb 2-1: config 54 interface 116 has no altsetting 0 [ 120.967277][ T977] usb 2-1: New USB device found, idVendor=16d5, idProduct=6501, bcdDevice=9f.f4 [ 120.978093][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.341543][ T5902] usb 5-1: device descriptor read/64, error -71 [ 121.488861][ T977] usb 2-1: Product: syz [ 121.786373][ T5902] usb usb5-port1: attempt power cycle [ 122.335346][ T977] usb 2-1: Manufacturer: syz [ 122.340121][ T977] usb 2-1: SerialNumber: syz [ 122.350040][ T977] usb 2-1: can't set config #54, error -71 [ 122.358124][ T977] usb 2-1: USB disconnect, device number 10 [ 122.418654][ T5902] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.327820][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 123.355570][ T5902] usb 5-1: device descriptor read/8, error -32 [ 123.611223][ T6194] syz.0.71 (6194) used greatest stack depth: 15520 bytes left [ 123.612417][ T6193] sctp: failed to load transform for md5: -2 [ 123.749054][ T6211] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 123.880775][ T6205] FAULT_INJECTION: forcing a failure. [ 123.880775][ T6205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.044412][ T6218] netlink: 132 bytes leftover after parsing attributes in process `syz.1.74'. [ 124.621707][ T6205] CPU: 1 UID: 0 PID: 6205 Comm: syz.3.72 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 124.621738][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.621751][ T6205] Call Trace: [ 124.621759][ T6205] [ 124.621768][ T6205] dump_stack_lvl+0x189/0x250 [ 124.621804][ T6205] ? __pfx____ratelimit+0x10/0x10 [ 124.621834][ T6205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.621865][ T6205] ? __pfx__printk+0x10/0x10 [ 124.621900][ T6205] should_fail_ex+0x414/0x560 [ 124.621929][ T6205] _copy_to_user+0x31/0xb0 [ 124.621963][ T6205] simple_read_from_buffer+0xe1/0x170 [ 124.621995][ T6205] proc_fail_nth_read+0x1df/0x250 [ 124.622029][ T6205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.622063][ T6205] ? rw_verify_area+0x258/0x650 [ 124.622084][ T6205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.622116][ T6205] vfs_read+0x200/0x980 [ 124.622145][ T6205] ? __pfx___mutex_lock+0x10/0x10 [ 124.622177][ T6205] ? __pfx_vfs_read+0x10/0x10 [ 124.622211][ T6205] ? __fget_files+0x2a/0x420 [ 124.622243][ T6205] ? __fget_files+0x3a0/0x420 [ 124.622270][ T6205] ? __fget_files+0x2a/0x420 [ 124.622308][ T6205] ksys_read+0x145/0x250 [ 124.622330][ T6205] ? __fget_files+0x3a0/0x420 [ 124.622359][ T6205] ? __pfx_ksys_read+0x10/0x10 [ 124.622388][ T6205] ? do_syscall_64+0xbe/0x3b0 [ 124.622422][ T6205] do_syscall_64+0xfa/0x3b0 [ 124.622450][ T6205] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.622477][ T6205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.622497][ T6205] ? clear_bhb_loop+0x60/0xb0 [ 124.622522][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.622542][ T6205] RIP: 0033:0x7f94c3f8d33c [ 124.622560][ T6205] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.622577][ T6205] RSP: 002b:00007f94c4d8c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.622599][ T6205] RAX: ffffffffffffffda RBX: 00007f94c41b5fa0 RCX: 00007f94c3f8d33c [ 124.622614][ T6205] RDX: 000000000000000f RSI: 00007f94c4d8c0a0 RDI: 0000000000000005 [ 124.622626][ T6205] RBP: 00007f94c4d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 124.622639][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.622650][ T6205] R13: 0000000000000000 R14: 00007f94c41b5fa0 R15: 00007ffcca21d8d8 [ 124.622682][ T6205] [ 125.357852][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 125.428158][ T6232] overlayfs: missing 'lowerdir' [ 126.319058][ T6243] overlayfs: missing 'lowerdir' [ 126.671379][ T5940] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 126.754836][ T6237] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.846956][ T6249] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 126.896109][ T5940] usb 4-1: unable to get BOS descriptor or descriptor too short [ 126.914642][ T5940] usb 4-1: not running at top speed; connect to a high speed hub [ 126.962430][ T5940] usb 4-1: config 54 has an invalid interface number: 116 but max is 0 [ 126.981072][ T5940] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 127.001329][ T5940] usb 4-1: config 54 has no interface number 0 [ 127.027103][ T5940] usb 4-1: config 54 interface 116 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.076421][ T5940] usb 4-1: config 54 interface 116 has no altsetting 0 [ 127.112967][ T5940] usb 4-1: New USB device found, idVendor=16d5, idProduct=6501, bcdDevice=9f.f4 [ 127.163419][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.188391][ T5940] usb 4-1: Product: syz [ 127.201346][ T5940] usb 4-1: Manufacturer: syz [ 127.210027][ T5940] usb 4-1: SerialNumber: syz [ 128.009448][ T6267] process 'syz.4.91' launched '/dev/fd/3' with NULL argv: empty string added [ 128.552437][ T6275] overlayfs: missing 'lowerdir' [ 128.733522][ T6280] netlink: 'syz.4.94': attribute type 10 has an invalid length. [ 128.806642][ T6280] team0: Port device wlan1 added [ 130.003032][ T5940] usb-storage 4-1:54.116: USB Mass Storage device detected [ 130.270150][ T5940] usb 4-1: USB disconnect, device number 5 [ 130.453639][ T6297] Bluetooth: MGMT ver 1.23 [ 132.771395][ T6309] input: syz1 as /devices/virtual/input/input6 [ 132.807582][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.814736][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.893129][ T6309] Bluetooth: MGMT ver 1.23 [ 133.408517][ T6314] netlink: 60 bytes leftover after parsing attributes in process `syz.3.105'. [ 133.624169][ T6319] syz.1.107 (6319): attempted to duplicate a private mapping with mremap. This is not supported. [ 133.639945][ T6320] FAULT_INJECTION: forcing a failure. [ 133.639945][ T6320] name failslab, interval 1, probability 0, space 0, times 0 [ 133.697339][ T30] audit: type=1326 audit(1751226466.305:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbdb8e929 code=0x7ffc0000 [ 133.738747][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz.2.106 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 133.738779][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.738793][ T6320] Call Trace: [ 133.738801][ T6320] [ 133.738811][ T6320] dump_stack_lvl+0x189/0x250 [ 133.738852][ T6320] ? __pfx____ratelimit+0x10/0x10 [ 133.738883][ T6320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.738916][ T6320] ? __pfx__printk+0x10/0x10 [ 133.738945][ T6320] ? ref_tracker_alloc+0x318/0x460 [ 133.738976][ T6320] should_fail_ex+0x414/0x560 [ 133.739007][ T6320] should_failslab+0xa8/0x100 [ 133.739037][ T6320] kmem_cache_alloc_noprof+0x73/0x3c0 [ 133.739062][ T6320] ? skb_clone+0x212/0x3a0 [ 133.739095][ T6320] skb_clone+0x212/0x3a0 [ 133.739126][ T6320] __netlink_deliver_tap+0x404/0x850 [ 133.739163][ T6320] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.739189][ T6320] netlink_deliver_tap+0x19c/0x1b0 [ 133.739236][ T6320] netlink_unicast+0x72f/0x8d0 [ 133.739285][ T6320] netlink_sendmsg+0x805/0xb30 [ 133.739325][ T6320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.739352][ T6320] ? __lock_acquire+0xab9/0xd20 [ 133.739385][ T6320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.739410][ T6320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.739435][ T6320] __sock_sendmsg+0x219/0x270 [ 133.739471][ T6320] sock_write_iter+0x258/0x330 [ 133.739503][ T6320] ? __pfx_sock_write_iter+0x10/0x10 [ 133.739545][ T6320] ? bpf_lsm_file_permission+0x9/0x20 [ 133.739573][ T6320] ? security_file_permission+0x75/0x290 [ 133.739610][ T6320] vfs_write+0x54b/0xa90 [ 133.739639][ T6320] ? __pfx_sock_write_iter+0x10/0x10 [ 133.739669][ T6320] ? __pfx_vfs_write+0x10/0x10 [ 133.739704][ T6320] ? __fget_files+0x2a/0x420 [ 133.739742][ T6320] ksys_write+0x145/0x250 [ 133.739769][ T6320] ? __pfx_ksys_write+0x10/0x10 [ 133.739790][ T6320] ? rcu_is_watching+0x15/0xb0 [ 133.739827][ T6320] ? do_syscall_64+0xbe/0x3b0 [ 133.739863][ T6320] do_syscall_64+0xfa/0x3b0 [ 133.739892][ T6320] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.739921][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.739942][ T6320] ? clear_bhb_loop+0x60/0xb0 [ 133.739968][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.739989][ T6320] RIP: 0033:0x7fb53c78e929 [ 133.740007][ T6320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.740025][ T6320] RSP: 002b:00007fb53d6a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.740048][ T6320] RAX: ffffffffffffffda RBX: 00007fb53c9b5fa0 RCX: 00007fb53c78e929 [ 133.740064][ T6320] RDX: 00000000000000fc RSI: 00002000000002c0 RDI: 0000000000000005 [ 133.740077][ T6320] RBP: 00007fb53d6a2090 R08: 0000000000000000 R09: 0000000000000000 [ 133.740090][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.740102][ T6320] R13: 0000000000000000 R14: 00007fb53c9b5fa0 R15: 00007ffd7a367b48 [ 133.740135][ T6320] [ 133.800762][ T30] audit: type=1326 audit(1751226466.305:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6315 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbdb8e929 code=0x7ffc0000 [ 133.807290][ T6320] netlink: 'syz.2.106': attribute type 12 has an invalid length. [ 134.216584][ T5820] Bluetooth: Frame is too long (len 75, expected len 4) [ 134.591507][ T6332] capability: warning: `syz.2.110' uses 32-bit capabilities (legacy support in use) [ 134.920253][ T6335] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 135.358623][ T6346] FAULT_INJECTION: forcing a failure. [ 135.358623][ T6346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.372378][ T6346] CPU: 0 UID: 0 PID: 6346 Comm: syz.3.116 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 135.372403][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.372413][ T6346] Call Trace: [ 135.372420][ T6346] [ 135.372428][ T6346] dump_stack_lvl+0x189/0x250 [ 135.372459][ T6346] ? __pfx____ratelimit+0x10/0x10 [ 135.372484][ T6346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.372509][ T6346] ? __pfx__printk+0x10/0x10 [ 135.372526][ T6346] ? __might_fault+0xb0/0x130 [ 135.372555][ T6346] should_fail_ex+0x414/0x560 [ 135.372579][ T6346] _copy_from_iter+0x1db/0x16f0 [ 135.372606][ T6346] ? rcu_is_watching+0x15/0xb0 [ 135.372632][ T6346] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 135.372653][ T6346] ? __pfx__copy_from_iter+0x10/0x10 [ 135.372678][ T6346] ? __build_skb_around+0x257/0x3e0 [ 135.372700][ T6346] ? netlink_sendmsg+0x642/0xb30 [ 135.372718][ T6346] ? skb_put+0x11b/0x210 [ 135.372741][ T6346] netlink_sendmsg+0x6b2/0xb30 [ 135.372768][ T6346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.372788][ T6346] ? __lock_acquire+0xab9/0xd20 [ 135.372815][ T6346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.372836][ T6346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.372855][ T6346] __sock_sendmsg+0x219/0x270 [ 135.372884][ T6346] sock_write_iter+0x258/0x330 [ 135.372912][ T6346] ? __pfx_sock_write_iter+0x10/0x10 [ 135.372949][ T6346] ? bpf_lsm_file_permission+0x9/0x20 [ 135.372976][ T6346] ? security_file_permission+0x75/0x290 [ 135.373010][ T6346] vfs_write+0x54b/0xa90 [ 135.373040][ T6346] ? __pfx_sock_write_iter+0x10/0x10 [ 135.373067][ T6346] ? __pfx_vfs_write+0x10/0x10 [ 135.373101][ T6346] ? __fget_files+0x2a/0x420 [ 135.373138][ T6346] ksys_write+0x145/0x250 [ 135.373165][ T6346] ? __pfx_ksys_write+0x10/0x10 [ 135.373186][ T6346] ? rcu_is_watching+0x15/0xb0 [ 135.373242][ T6346] ? do_syscall_64+0xbe/0x3b0 [ 135.373268][ T6346] do_syscall_64+0xfa/0x3b0 [ 135.373289][ T6346] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.373309][ T6346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.373324][ T6346] ? clear_bhb_loop+0x60/0xb0 [ 135.373342][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.373357][ T6346] RIP: 0033:0x7f94c3f8e929 [ 135.373371][ T6346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.373388][ T6346] RSP: 002b:00007f94c4d8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.373404][ T6346] RAX: ffffffffffffffda RBX: 00007f94c41b5fa0 RCX: 00007f94c3f8e929 [ 135.373415][ T6346] RDX: 0000000000000024 RSI: 00002000000000c0 RDI: 0000000000000003 [ 135.373425][ T6346] RBP: 00007f94c4d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 135.373434][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.373442][ T6346] R13: 0000000000000000 R14: 00007f94c41b5fa0 R15: 00007ffcca21d8d8 [ 135.373464][ T6346] [ 135.811345][ T5940] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.941326][ T5940] usb 5-1: device descriptor read/64, error -71 [ 136.181542][ T5940] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.331667][ T5940] usb 5-1: device descriptor read/64, error -71 [ 136.356206][ T6361] overlayfs: missing 'lowerdir' [ 136.425281][ T6363] overlay: ./file0 is not a directory [ 136.453873][ T5940] usb usb5-port1: attempt power cycle [ 137.017794][ T5940] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 137.117200][ T5940] usb 5-1: device descriptor read/8, error -71 [ 137.351639][ T5882] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.463603][ T5940] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 137.732587][ T5940] usb 5-1: device descriptor read/8, error -71 [ 138.103998][ T5940] usb usb5-port1: unable to enumerate USB device [ 138.531947][ T6342] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 138.560925][ T6373] 9pnet_fd: Insufficient options for proto=fd [ 139.405053][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 139.934037][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.945461][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.955461][ T5882] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 139.964741][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.975720][ T5882] usb 4-1: config 0 descriptor?? [ 139.985088][ T5882] hub 4-1:0.0: USB hub found [ 140.222892][ T5882] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 140.311439][ T5882] usbhid 4-1:0.0: can't add hid device: -71 [ 140.341484][ T5882] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 140.422602][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 140.592129][ T5882] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 140.621407][ T5882] usb 4-1: device reset changed ep0 maxpacket size! [ 140.745052][ T5882] usb 4-1: USB disconnect, device number 6 [ 141.256688][ T6399] netlink: 44 bytes leftover after parsing attributes in process `syz.1.132'. [ 141.279770][ T6399] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.297370][ T6399] FAULT_INJECTION: forcing a failure. [ 141.297370][ T6399] name failslab, interval 1, probability 0, space 0, times 0 [ 141.310130][ T6399] CPU: 1 UID: 0 PID: 6399 Comm: syz.1.132 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 141.310161][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.310174][ T6399] Call Trace: [ 141.310182][ T6399] [ 141.310192][ T6399] dump_stack_lvl+0x189/0x250 [ 141.310229][ T6399] ? __pfx____ratelimit+0x10/0x10 [ 141.310259][ T6399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.310291][ T6399] ? __pfx__printk+0x10/0x10 [ 141.310315][ T6399] ? __pfx___might_resched+0x10/0x10 [ 141.310347][ T6399] ? fs_reclaim_acquire+0x7d/0x100 [ 141.310382][ T6399] should_fail_ex+0x414/0x560 [ 141.310412][ T6399] should_failslab+0xa8/0x100 [ 141.310441][ T6399] __kmalloc_noprof+0xcb/0x4f0 [ 141.310466][ T6399] ? sock_kmalloc+0xd6/0x160 [ 141.310497][ T6399] sock_kmalloc+0xd6/0x160 [ 141.310526][ T6399] ____sys_sendmsg+0x1b5/0x830 [ 141.310558][ T6399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.310593][ T6399] ? import_iovec+0x74/0xa0 [ 141.310629][ T6399] ___sys_sendmsg+0x21f/0x2a0 [ 141.310657][ T6399] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.310722][ T6399] ? __fget_files+0x2a/0x420 [ 141.310749][ T6399] ? __fget_files+0x3a0/0x420 [ 141.310796][ T6399] __x64_sys_sendmsg+0x19b/0x260 [ 141.310825][ T6399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.310860][ T6399] ? __pfx_ksys_write+0x10/0x10 [ 141.310891][ T6399] ? do_syscall_64+0xbe/0x3b0 [ 141.310927][ T6399] do_syscall_64+0xfa/0x3b0 [ 141.310959][ T6399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.310979][ T6399] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 141.311000][ T6399] ? clear_bhb_loop+0x60/0xb0 [ 141.311034][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.311055][ T6399] RIP: 0033:0x7fafbdb8e929 [ 141.311074][ T6399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.311092][ T6399] RSP: 002b:00007fafbb9b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.311114][ T6399] RAX: ffffffffffffffda RBX: 00007fafbddb6160 RCX: 00007fafbdb8e929 [ 141.311130][ T6399] RDX: 0000000020008001 RSI: 0000200000002280 RDI: 000000000000000a [ 141.311144][ T6399] RBP: 00007fafbb9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 141.311157][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.311169][ T6399] R13: 0000000000000000 R14: 00007fafbddb6160 R15: 00007ffe52ffacd8 [ 141.311202][ T6399] [ 141.554683][ T5882] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.907549][ T5882] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.933035][ T5882] usb 4-1: config 0 has no interface number 0 [ 141.973635][ T5882] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 142.386147][ T6404] overlayfs: missing 'lowerdir' [ 142.387003][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.430831][ T5882] usb 4-1: Product: syz [ 142.443596][ T5882] usb 4-1: Manufacturer: syz [ 142.455388][ T5882] usb 4-1: SerialNumber: syz [ 142.476464][ T5882] usb 4-1: config 0 descriptor?? [ 142.821714][ T5882] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 143.169622][ T6412] netlink: 44 bytes leftover after parsing attributes in process `syz.1.136'. [ 143.193163][ T5882] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 143.260084][ T5882] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 143.285796][ T5882] usb 4-1: media controller created [ 143.475218][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.998254][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'. [ 144.094111][ T6425] overlayfs: failed to resolve './file1': -2 [ 144.330871][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 144.372638][ T5882] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 144.403395][ T30] audit: type=1326 audit(1751226477.015:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aedd8e929 code=0x7ffc0000 [ 144.406469][ T6426] netlink: 196 bytes leftover after parsing attributes in process `syz.0.141'. [ 144.455572][ T5902] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.499288][ T30] audit: type=1326 audit(1751226477.025:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aedd8e929 code=0x7ffc0000 [ 144.553344][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 144.571068][ T9] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 144.574139][ T5882] usb 4-1: USB disconnect, device number 7 [ 144.589786][ T6426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'. [ 144.614053][ T9] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.630111][ T5902] usb 3-1: device descriptor read/64, error -71 [ 144.630997][ T30] audit: type=1326 audit(1751226477.025:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f2aedd8e929 code=0x7ffc0000 [ 144.641113][ T6426] netlink: 160 bytes leftover after parsing attributes in process `syz.0.141'. [ 144.747917][ T9] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.760303][ T6426] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 144.760301][ T9] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 144.760333][ T9] usb 2-1: config 7 interface 0 has no altsetting 0 [ 144.790819][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 144.802264][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.873061][ T30] audit: type=1326 audit(1751226477.025:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aedd8e929 code=0x7ffc0000 [ 144.921735][ T5902] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 144.979832][ T30] audit: type=1326 audit(1751226477.025:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aedd8e929 code=0x7ffc0000 [ 145.011831][ T30] audit: type=1326 audit(1751226477.025:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2aedd8e929 code=0x7ffc0000 [ 145.034341][ T30] audit: type=1326 audit(1751226477.025:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aedd8e929 code=0x7ffc0000 [ 145.059877][ T30] audit: type=1326 audit(1751226477.025:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2aedd8e929 code=0x7ffc0000 [ 145.084577][ T30] audit: type=1326 audit(1751226477.115:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aedd8e929 code=0x7ffc0000 [ 145.099960][ T5902] usb 3-1: device descriptor read/64, error -71 [ 145.125788][ T30] audit: type=1326 audit(1751226477.115:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aedd8e929 code=0x7ffc0000 [ 146.301932][ T5902] usb usb3-port1: attempt power cycle [ 146.928381][ T5902] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.333434][ T5902] usb 3-1: device descriptor read/8, error -71 [ 147.369424][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0001/input/input7 [ 147.490564][ T6449] input: syz0 as /devices/virtual/input/input8 [ 147.773473][ T9] kye 0003:0458:5010.0001: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 147.937780][ T6453] overlayfs: missing 'lowerdir' [ 148.552004][ T6449] futex_wake_op: syz.4.146 tries to shift op by 36; fix this program [ 148.562620][ T6449] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 148.624883][ T9] usb 2-1: USB disconnect, device number 11 [ 149.101000][ T6455] fido_id[6455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 149.732686][ T6463] overlayfs: missing 'lowerdir' [ 150.531050][ T6458] input: syz1 as /devices/virtual/input/input9 [ 151.001449][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 151.430598][ T9] usb 3-1: config 3 has an invalid interface number: 71 but max is 0 [ 151.451329][ T9] usb 3-1: config 3 has no interface number 0 [ 151.461802][ T9] usb 3-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 151.478722][ T9] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac [ 151.488209][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.533648][ T9] ati_remote 3-1:3.71: ati_remote_probe: Unexpected endpoint_in [ 151.795782][ T9] usb 3-1: USB disconnect, device number 7 [ 154.395382][ T6498] overlayfs: failed to resolve './file1': -2 [ 154.741666][ T977] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.891903][ T977] usb 3-1: device descriptor read/64, error -71 [ 155.411434][ T977] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 155.565889][ T977] usb 3-1: device descriptor read/64, error -71 [ 155.785165][ T977] usb usb3-port1: attempt power cycle [ 156.234740][ T977] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.961609][ T977] usb 3-1: device descriptor read/8, error -71 [ 157.060746][ T6531] FAULT_INJECTION: forcing a failure. [ 157.060746][ T6531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.083366][ T6534] input: syz1 as /devices/virtual/input/input10 [ 157.112009][ T6531] CPU: 1 UID: 0 PID: 6531 Comm: syz.1.168 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 157.112040][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.112053][ T6531] Call Trace: [ 157.112061][ T6531] [ 157.112070][ T6531] dump_stack_lvl+0x189/0x250 [ 157.112107][ T6531] ? __pfx____ratelimit+0x10/0x10 [ 157.112136][ T6531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.112168][ T6531] ? __pfx__printk+0x10/0x10 [ 157.112189][ T6531] ? __might_fault+0xb0/0x130 [ 157.112227][ T6531] should_fail_ex+0x414/0x560 [ 157.112257][ T6531] _copy_from_user+0x2d/0xb0 [ 157.112290][ T6531] restore_altstack+0x9d/0x4b0 [ 157.112313][ T6531] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 157.112344][ T6531] ? __pfx_restore_altstack+0x10/0x10 [ 157.112371][ T6531] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.112397][ T6531] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.112430][ T6531] __ia32_sys_rt_sigreturn+0x1ac/0x7b0 [ 157.112461][ T6531] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.112491][ T6531] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 157.112515][ T6531] ? _raw_spin_unlock_irq+0x2e/0x50 [ 157.112540][ T6531] ? signal_setup_done+0x230/0x310 [ 157.112573][ T6531] ? __lock_acquire+0xab9/0xd20 [ 157.112623][ T6531] ? __task_pid_nr_ns+0x28/0x470 [ 157.112664][ T6531] ? do_syscall_64+0xbe/0x3b0 [ 157.112700][ T6531] do_syscall_64+0xfa/0x3b0 [ 157.112734][ T6531] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.112762][ T6531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.112782][ T6531] ? clear_bhb_loop+0x60/0xb0 [ 157.112807][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.112827][ T6531] RIP: 0033:0x7fafbdb2ab19 [ 157.112846][ T6531] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 157.112863][ T6531] RSP: 002b:00007fafbb9f5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 157.112885][ T6531] RAX: ffffffffffffffda RBX: 00007fafbddb5fa0 RCX: 00007fafbdb2ab19 [ 157.112900][ T6531] RDX: 00007fafbb9f5a80 RSI: 00007fafbb9f5bb0 RDI: 0000000000000021 [ 157.112915][ T6531] RBP: 00007fafbb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.112928][ T6531] R10: 0000000000020100 R11: 0000000000000202 R12: 0000000000000001 [ 157.112941][ T6531] R13: 0000000000000000 R14: 00007fafbddb5fa0 R15: 00007ffe52ffacd8 [ 157.112973][ T6531] [ 157.601974][ T5930] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 157.718286][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 157.791433][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 157.799293][ T5930] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 157.808291][ T5930] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.818890][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.829392][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.977845][ T5930] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.991177][ T5930] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.000485][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.861850][ T5930] usb 5-1: GET_CAPABILITIES returned 0 [ 158.891522][ T5930] usbtmc 5-1:16.0: can't read capabilities [ 158.976986][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 159.289096][ T6559] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.179'. [ 160.791843][ T5902] usb 5-1: USB disconnect, device number 11 [ 161.953408][ T6625] input: syz1 as /devices/virtual/input/input11 [ 162.113768][ T6629] overlayfs: failed to resolve './file1': -2 [ 162.401667][ T5902] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.941474][ T5902] usb 4-1: device descriptor read/64, error -71 [ 163.801637][ T5902] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.815252][ T6639] overlayfs: missing 'lowerdir' [ 164.118533][ T5902] usb 4-1: device descriptor read/64, error -71 [ 164.446570][ T6643] overlayfs: failed to resolve './file1': -2 [ 165.328281][ T5902] usb usb4-port1: attempt power cycle [ 165.371544][ T6645] futex_wake_op: syz.1.189 tries to shift op by 32; fix this program [ 165.621475][ T5930] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.892703][ T5930] usb 1-1: device descriptor read/64, error -71 [ 166.131656][ T5930] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 166.533008][ T5930] usb 1-1: device descriptor read/64, error -71 [ 166.641792][ T5930] usb usb1-port1: attempt power cycle [ 168.523918][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 168.523939][ T30] audit: type=1326 audit(1751226501.145:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.0.195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2aedd8e929 code=0x0 [ 169.741343][ T5930] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 169.818657][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.200'. [ 170.088744][ T5930] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 170.253123][ T6687] overlayfs: missing 'lowerdir' [ 170.794879][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.882536][ T5930] usb 2-1: config 0 descriptor?? [ 171.113076][ T5930] cp210x 2-1:0.0: cp210x converter detected [ 171.668382][ T6697] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 172.081649][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 172.221872][ T6701] IPVS: length: 19 != 8 [ 172.261673][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 172.281121][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 38 [ 172.300062][ T9] usb 3-1: can't read configurations, error -22 [ 172.586086][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 173.777360][ T5930] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 173.913277][ T5930] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 173.951450][ T5930] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 174.002042][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 174.007621][ T5930] usb 2-1: cp210x converter now attached to ttyUSB0 [ 174.028227][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 38 [ 174.034357][ T5930] usb 2-1: USB disconnect, device number 12 [ 174.081959][ T6708] overlayfs: failed to resolve './file1': -2 [ 174.091012][ T5930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 174.102372][ T9] usb 3-1: can't read configurations, error -22 [ 174.334586][ T5930] cp210x 2-1:0.0: device disconnected [ 174.470361][ T9] usb usb3-port1: attempt power cycle [ 174.510599][ T5932] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 175.255510][ T6713] input: syz1 as /devices/virtual/input/input12 [ 175.314083][ T5932] usb 5-1: device descriptor read/64, error -71 [ 176.031641][ T5932] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 176.350915][ T6728] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 178.551201][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 178.769367][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 178.821597][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 178.861193][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 179.004165][ T9] usb 2-1: config 54 has an invalid interface number: 116 but max is 0 [ 179.166133][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.202978][ T9] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 179.324983][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.384748][ T9] usb 2-1: config 54 has no interface number 0 [ 179.485850][ T9] usb 2-1: config 54 interface 116 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 180.672452][ T10] usb 1-1: config 0 descriptor?? [ 180.699413][ T9] usb 2-1: config 54 interface 116 has no altsetting 0 [ 180.749822][ T10] usb 1-1: can't set config #0, error -71 [ 180.797504][ T9] usb 2-1: string descriptor 0 read error: -71 [ 180.838651][ T10] usb 1-1: USB disconnect, device number 10 [ 180.851525][ T9] usb 2-1: New USB device found, idVendor=16d5, idProduct=6501, bcdDevice=9f.f4 [ 180.896716][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.940075][ T9] usb 2-1: can't set config #54, error -71 [ 181.014945][ T9] usb 2-1: USB disconnect, device number 13 [ 181.826057][ T6762] input: syz1 as /devices/virtual/input/input14 [ 182.209159][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 182.212224][ T6767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.121203][ T9] usb 2-1: device descriptor read/64, error -71 [ 183.338031][ T6779] overlayfs: missing 'lowerdir' [ 183.401498][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 184.056485][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 184.529822][ T6792] overlayfs: failed to resolve './file1': -2 [ 184.841693][ T5930] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 184.981465][ T5930] usb 3-1: device descriptor read/64, error -71 [ 185.307920][ T9] usb usb2-port1: attempt power cycle [ 185.661560][ T9] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 185.864864][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 186.005703][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 186.231494][ T5930] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 186.731601][ T5930] usb 3-1: device descriptor read/64, error -71 [ 186.844697][ T5930] usb usb3-port1: attempt power cycle [ 187.104600][ T9] usb 2-1: config 54 has an invalid interface number: 116 but max is 0 [ 187.118052][ T9] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 187.851762][ T9] usb 2-1: config 54 has no interface number 0 [ 187.879317][ T9] usb 2-1: config 54 interface 116 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.931369][ T5930] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 188.080520][ T5930] usb 3-1: device descriptor read/8, error -71 [ 188.103836][ T9] usb 2-1: config 54 interface 116 has no altsetting 0 [ 188.164749][ T9] usb 2-1: string descriptor 0 read error: -71 [ 188.231588][ T9] usb 2-1: New USB device found, idVendor=16d5, idProduct=6501, bcdDevice=9f.f4 [ 188.349015][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.444225][ T5930] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 188.481365][ T9] usb 2-1: can't set config #54, error -71 [ 188.558918][ T9] usb 2-1: USB disconnect, device number 16 [ 188.558946][ T5930] usb 3-1: device descriptor read/8, error -71 [ 188.793651][ T5930] usb usb3-port1: unable to enumerate USB device [ 189.099783][ T6862] random: crng reseeded on system resumption [ 189.109037][ T6862] FAULT_INJECTION: forcing a failure. [ 189.109037][ T6862] name failslab, interval 1, probability 0, space 0, times 0 [ 189.122286][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: syz.4.237 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 189.122317][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.122329][ T6862] Call Trace: [ 189.122338][ T6862] [ 189.122348][ T6862] dump_stack_lvl+0x189/0x250 [ 189.122404][ T6862] ? __pfx____ratelimit+0x10/0x10 [ 189.122434][ T6862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.122467][ T6862] ? __pfx__printk+0x10/0x10 [ 189.122495][ T6862] ? preempt_schedule+0xae/0xc0 [ 189.122530][ T6862] should_fail_ex+0x414/0x560 [ 189.122561][ T6862] should_failslab+0xa8/0x100 [ 189.122592][ T6862] __kmalloc_cache_noprof+0x70/0x3d0 [ 189.122618][ T6862] ? async_schedule_node_domain+0x5b/0x120 [ 189.122647][ T6862] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 189.122682][ T6862] async_schedule_node_domain+0x5b/0x120 [ 189.122715][ T6862] dev_cache_fw_image+0x364/0x3e0 [ 189.122754][ T6862] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 189.122790][ T6862] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 189.122822][ T6862] dpm_for_each_dev+0x53/0xb0 [ 189.122855][ T6862] fw_pm_notify+0x200/0x2a0 [ 189.122883][ T6862] ? __pfx_fw_pm_notify+0x10/0x10 [ 189.122913][ T6862] ? __pfx_autoremove_wake_function+0x10/0x10 [ 189.122953][ T6862] notifier_call_chain+0x1b3/0x3e0 [ 189.122996][ T6862] blocking_notifier_call_chain_robust+0x85/0x100 [ 189.123037][ T6862] pm_notifier_call_chain_robust+0x2c/0x60 [ 189.123068][ T6862] snapshot_open+0x133/0x280 [ 189.123098][ T6862] ? __pfx_snapshot_open+0x10/0x10 [ 189.123125][ T6862] misc_open+0x2b9/0x330 [ 189.123157][ T6862] chrdev_open+0x4c9/0x5e0 [ 189.123190][ T6862] ? __pfx_chrdev_open+0x10/0x10 [ 189.123228][ T6862] ? __pfx_chrdev_open+0x10/0x10 [ 189.123256][ T6862] do_dentry_open+0xdf0/0x1970 [ 189.123309][ T6862] vfs_open+0x3b/0x340 [ 189.123337][ T6862] ? path_openat+0x2ecd/0x3830 [ 189.123368][ T6862] path_openat+0x2ee5/0x3830 [ 189.123388][ T6862] ? arch_stack_walk+0xfc/0x150 [ 189.123463][ T6862] ? __pfx_path_openat+0x10/0x10 [ 189.123482][ T6862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.123530][ T6862] do_filp_open+0x1fa/0x410 [ 189.123549][ T6862] ? __lock_acquire+0xab9/0xd20 [ 189.123580][ T6862] ? __pfx_do_filp_open+0x10/0x10 [ 189.123631][ T6862] ? _raw_spin_unlock+0x28/0x50 [ 189.123656][ T6862] ? alloc_fd+0x64c/0x6c0 [ 189.123699][ T6862] do_sys_openat2+0x121/0x1c0 [ 189.123736][ T6862] ? __pfx_do_sys_openat2+0x10/0x10 [ 189.123770][ T6862] ? ksys_write+0x22a/0x250 [ 189.123797][ T6862] ? __pfx_ksys_write+0x10/0x10 [ 189.123827][ T6862] __x64_sys_openat+0x138/0x170 [ 189.123868][ T6862] do_syscall_64+0xfa/0x3b0 [ 189.123901][ T6862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.123921][ T6862] ? asm_sysvec_call_function_single+0x1a/0x20 [ 189.123942][ T6862] ? clear_bhb_loop+0x60/0xb0 [ 189.123969][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.123990][ T6862] RIP: 0033:0x7fcdf538e929 [ 189.124015][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.124033][ T6862] RSP: 002b:00007fcdf31b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.124059][ T6862] RAX: ffffffffffffffda RBX: 00007fcdf55b6160 RCX: 00007fcdf538e929 [ 189.124075][ T6862] RDX: 000000000000003f RSI: 0000200000000040 RDI: ffffffffffffff9c [ 189.124089][ T6862] RBP: 00007fcdf31b4090 R08: 0000000000000000 R09: 0000000000000000 [ 189.124103][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.124115][ T6862] R13: 0000000000000000 R14: 00007fcdf55b6160 R15: 00007ffcda7288e8 [ 189.124151][ T6862] [ 189.491102][ T6862] [ 189.493518][ T6862] ============================================ [ 189.499689][ T6862] WARNING: possible recursive locking detected [ 189.505890][ T6862] 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 Not tainted [ 189.513055][ T6862] -------------------------------------------- [ 189.519242][ T6862] syz.4.237/6862 is trying to acquire lock: [ 189.525274][ T6862] ffffffff8eb030e8 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x52/0x890 [ 189.533272][ T6862] [ 189.533272][ T6862] but task is already holding lock: [ 189.540682][ T6862] ffffffff8eb030e8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x1e8/0x2a0 [ 189.549019][ T6862] [ 189.549019][ T6862] other info that might help us debug this: [ 189.557110][ T6862] Possible unsafe locking scenario: [ 189.557110][ T6862] [ 189.564604][ T6862] CPU0 [ 189.567924][ T6862] ---- [ 189.571219][ T6862] lock(fw_lock); [ 189.574972][ T6862] lock(fw_lock); [ 189.578710][ T6862] [ 189.578710][ T6862] *** DEADLOCK *** [ 189.578710][ T6862] [ 189.586866][ T6862] May be due to missing lock nesting notation [ 189.586866][ T6862] [ 189.595391][ T6862] 5 locks held by syz.4.237/6862: [ 189.600426][ T6862] #0: ffffffff8e9afd88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 189.608905][ T6862] #1: ffffffff8dfee228 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x4a/0x70 [ 189.619290][ T6862] #2: ffffffff8e012710 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0x65/0x100 [ 189.631160][ T6862] #3: ffffffff8eb030e8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x1e8/0x2a0 [ 189.639904][ T6862] #4: ffffffff8eafe168 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x29/0xb0 [ 189.649253][ T6862] [ 189.649253][ T6862] stack backtrace: [ 189.655168][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: syz.4.237 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 189.655192][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.655202][ T6862] Call Trace: [ 189.655210][ T6862] [ 189.655218][ T6862] dump_stack_lvl+0x189/0x250 [ 189.655249][ T6862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.655274][ T6862] ? __pfx__printk+0x10/0x10 [ 189.655291][ T6862] ? print_lock_name+0xde/0x100 [ 189.655330][ T6862] print_deadlock_bug+0x28b/0x2a0 [ 189.655359][ T6862] validate_chain+0x1a3f/0x2140 [ 189.655387][ T6862] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 189.655410][ T6862] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.655438][ T6862] __lock_acquire+0xab9/0xd20 [ 189.655463][ T6862] ? assign_fw+0x52/0x890 [ 189.655483][ T6862] lock_acquire+0x120/0x360 [ 189.655504][ T6862] ? assign_fw+0x52/0x890 [ 189.655524][ T6862] ? kasan_save_free_info+0x46/0x50 [ 189.655550][ T6862] ? kmem_cache_free+0x18f/0x400 [ 189.655570][ T6862] ? __async_dev_cache_fw_image+0x7f/0x280 [ 189.655596][ T6862] __mutex_lock+0x182/0xe80 [ 189.655625][ T6862] ? assign_fw+0x52/0x890 [ 189.655644][ T6862] ? path_openat+0x2ee5/0x3830 [ 189.655660][ T6862] ? do_filp_open+0x1fa/0x410 [ 189.655675][ T6862] ? __x64_sys_openat+0x138/0x170 [ 189.655701][ T6862] ? do_syscall_64+0xfa/0x3b0 [ 189.655724][ T6862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.655744][ T6862] ? assign_fw+0x52/0x890 [ 189.655765][ T6862] ? __pfx___mutex_lock+0x10/0x10 [ 189.655794][ T6862] ? kasan_quarantine_put+0xdd/0x220 [ 189.655812][ T6862] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.655836][ T6862] assign_fw+0x52/0x890 [ 189.655856][ T6862] ? _request_firmware+0xe57/0x15b0 [ 189.655876][ T6862] ? kmem_cache_free+0x18f/0x400 [ 189.655897][ T6862] _request_firmware+0xeea/0x15b0 [ 189.655918][ T6862] ? preempt_schedule+0xae/0xc0 [ 189.655948][ T6862] ? __pfx__request_firmware+0x10/0x10 [ 189.655971][ T6862] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 189.655992][ T6862] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 189.656013][ T6862] ? async_schedule_node_domain+0xa5/0x120 [ 189.656037][ T6862] __async_dev_cache_fw_image+0x7f/0x280 [ 189.656061][ T6862] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 189.656086][ T6862] async_schedule_node_domain+0xe1/0x120 [ 189.656110][ T6862] dev_cache_fw_image+0x364/0x3e0 [ 189.656135][ T6862] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 189.656160][ T6862] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 189.656183][ T6862] dpm_for_each_dev+0x53/0xb0 [ 189.656207][ T6862] fw_pm_notify+0x200/0x2a0 [ 189.656229][ T6862] ? __pfx_fw_pm_notify+0x10/0x10 [ 189.656251][ T6862] ? __pfx_autoremove_wake_function+0x10/0x10 [ 189.656275][ T6862] notifier_call_chain+0x1b3/0x3e0 [ 189.656303][ T6862] blocking_notifier_call_chain_robust+0x85/0x100 [ 189.656332][ T6862] pm_notifier_call_chain_robust+0x2c/0x60 [ 189.656357][ T6862] snapshot_open+0x133/0x280 [ 189.656380][ T6862] ? __pfx_snapshot_open+0x10/0x10 [ 189.656401][ T6862] misc_open+0x2b9/0x330 [ 189.656423][ T6862] chrdev_open+0x4c9/0x5e0 [ 189.656447][ T6862] ? __pfx_chrdev_open+0x10/0x10 [ 189.656472][ T6862] ? __pfx_chrdev_open+0x10/0x10 [ 189.656493][ T6862] do_dentry_open+0xdf0/0x1970 [ 189.656524][ T6862] vfs_open+0x3b/0x340 [ 189.656546][ T6862] ? path_openat+0x2ecd/0x3830 [ 189.656563][ T6862] path_openat+0x2ee5/0x3830 [ 189.656579][ T6862] ? arch_stack_walk+0xfc/0x150 [ 189.656623][ T6862] ? __pfx_path_openat+0x10/0x10 [ 189.656638][ T6862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.656664][ T6862] do_filp_open+0x1fa/0x410 [ 189.656679][ T6862] ? __lock_acquire+0xab9/0xd20 [ 189.656701][ T6862] ? __pfx_do_filp_open+0x10/0x10 [ 189.656727][ T6862] ? _raw_spin_unlock+0x28/0x50 [ 189.656746][ T6862] ? alloc_fd+0x64c/0x6c0 [ 189.656772][ T6862] do_sys_openat2+0x121/0x1c0 [ 189.656798][ T6862] ? __pfx_do_sys_openat2+0x10/0x10 [ 189.656824][ T6862] ? ksys_write+0x22a/0x250 [ 189.656843][ T6862] ? __pfx_ksys_write+0x10/0x10 [ 189.656864][ T6862] __x64_sys_openat+0x138/0x170 [ 189.656891][ T6862] do_syscall_64+0xfa/0x3b0 [ 189.656916][ T6862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.656932][ T6862] ? asm_sysvec_call_function_single+0x1a/0x20 [ 189.656950][ T6862] ? clear_bhb_loop+0x60/0xb0 [ 189.656968][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.656985][ T6862] RIP: 0033:0x7fcdf538e929 [ 189.657000][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.657015][ T6862] RSP: 002b:00007fcdf31b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.657032][ T6862] RAX: ffffffffffffffda RBX: 00007fcdf55b6160 RCX: 00007fcdf538e929 [ 189.657045][ T6862] RDX: 000000000000003f RSI: 0000200000000040 RDI: ffffffffffffff9c [ 189.657056][ T6862] RBP: 00007fcdf31b4090 R08: 0000000000000000 R09: 0000000000000000 [ 189.657067][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.657077][ T6862] R13: 0000000000000000 R14: 00007fcdf55b6160 R15: 00007ffcda7288e8 [ 189.657096][ T6862] [ 194.244216][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.250607][ T1302] ieee802154 phy1 wpan1: encryption failed: -22