last executing test programs: 25.000401675s ago: executing program 1 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) truncate(0x0, 0x400000f030) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x153b, &(0x7f0000001f80)="$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") r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3f}) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r6) exit(0xffff) r7 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) getdents(r7, 0x0, 0x0) 22.421625154s ago: executing program 1 (id=302): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_open_procfs(0x0, 0x0) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x14, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_clone3(0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 18.900065167s ago: executing program 0 (id=304): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000800) sendmsg$nl_route_sched(r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null-generic)\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x24020400) sync_file_range(0xffffffffffffffff, 0x200, 0xfff, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) listen(r5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) accept4(r5, 0x0, 0x0, 0x80800) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 15.746800409s ago: executing program 0 (id=309): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r11, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x20004040) setsockopt$inet_udp_encap(r9, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, 0x0) 14.780348001s ago: executing program 0 (id=310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r1, 0x4) unshare(0x8000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x487, 0x0, 0x9}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 13.667267746s ago: executing program 0 (id=312): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1214080, &(0x7f00000000c0)=ANY=[@ANYBLOB="756d61736b3d3000000000011167a16d303030303030303030303132362c636f6465706167653d69736f3833342c6769643d00000000", @ANYRESHEX=0x0, @ANYBLOB="2c6469725f756d61736b3d30303030303030303030303030303030303030303030342c696f636861727365743d63703835322c706172743d3078303030303030303030303030303830302c63726561746f723d5863953a2c00"], 0x11, 0x31c, &(0x7f0000000940)="$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") syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20c28, 0x0, 0x3, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) rename(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 13.629447568s ago: executing program 3 (id=313): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000300)={0xc, 0xb9, 0x4, 0x7, 0x7}, 0x14) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x4000844) write$tun(r5, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r7], 0x1259) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 12.141822629s ago: executing program 1 (id=314): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![&\\^\'$)\x00', 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000680)=@IORING_OP_MKDIRAT={0x25, 0x21, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, &(0x7f0000004380)) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)) 11.725582618s ago: executing program 3 (id=316): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}], 0x1, 0x60010020, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0xd}], 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$binfmt_script(r4, 0x0, 0xd9) write(r2, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = socket$l2tp6(0xa, 0x2, 0x73) dup3(r6, r5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000010000000000000400000000850002826b574f9c7723c62cc1cbff"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) r9 = dup3(r8, r7, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x190a, 0x1}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 11.563961952s ago: executing program 4 (id=317): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) r3 = socket(0x2b, 0x80801, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r5}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r5}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r6, 0x0, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.446745365s ago: executing program 3 (id=318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x721701, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a", 0x11) recvmmsg(r6, &(0x7f00000021c0), 0x5b, 0x40, 0x0) write(r2, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4800}, 0x5) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r9, &(0x7f0000000640), 0x0}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r7, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 9.274718487s ago: executing program 3 (id=319): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b00a84302911000ed3900090035000800060000001900150004000000000000dc1338d54400009b84136ef75a0184de4411001600c43ab8220000060cb211d2f994", 0x55}], 0x1}, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x800) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 8.603802393s ago: executing program 0 (id=320): futex(&(0x7f0000000040), 0xb, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x1, 0x9) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000000), 0xfc, 0x6e0, &(0x7f0000000580)="$eJzs3c1vHGcdB/Dv7K7fUtE4bdIWVImoEQURkfhFKQQJJSCEfKhQBAckbiZxGiubtLJdcCME4f3aQ/+A9pAbJyTuQeUMFwRHi1MlRC+cfFs0s7Prje111nESx/D5VLPzzDzvv52Z3dnUmgD/txbOpnU/RRbOvrlebm/cm29v3JufqLPbScp0I2l1VyluJ8XHyeV0l3y23FmXL4b188Hyxe/9/T8bn3S3WvVSlW/srPfzTpIvjD6Lu/WS00ma9XqnsW3bE8nkw9u7OrS9fit9u8+/6OeUATvTCxwcts4Od/dTfej5DhwdRb7xmd32TyfH0v2YrD7n6qtD4+mO7vHb11UOAAAADtnCv0/N7af8VL0+vpnNrB/523gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4qoqk2V1VS6OXPp2i9/z/8Xpf6vSRdv+wBwAAAAAAAAAAO4w9sDWeZKK3cWn3Gp/fzGbW83xvu1NU/+b/WrVxsnp9Lu9mNUtZybmsZzFrWctKZpNMD3a2vri2tjI7Qs25XWvOPTiu5mgTnhytGAAAAAAAAAD8z/tlFrb+/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4FRdLsrqrlZC89nUYryWSS8bLc3eSvvfQRUey28/7THwcAAAAcyOQj1Dm+mc2s5/nedqeo7vlfqu6XJ/Nubmcty1lLO0u5Vt9Dl3f9jY178+2Ne/O3yuXAQ69aTPe3h917fqUqMZXrWa72nMvVajDX0qhqlv6Z5FZvTDvH9YtPy7Yvdf1kxJFdq9dlZ+/3fkWYOPCEH4PppNXIWD8iM9XYugfBicEo7IzENz8d1ujl7qq1vacM9jSbRv+Xn5PdHsrkQ2N+acSZHavX5Xx+O+yXm8dtcqvTu0ML9SPRSBWJuYGj76W9Y5588Y+/f/9G+/bNG9dXzz6VKT1J24+J+YFIvDxCJH7wzEaitXd2Y/uOmWrnqd7mR88l+X7O5nSuZCXL+XEWs5alFPVMF+vjuXyd3jtSlx/YujJkAH3j9fvSrMv1x5SFfGfXMZ3Ot6vUYl6r6j6f5RR5O9eylDeq/+Yym6/mQi7k4sA7fGrouKu5VWd9Y39n/Zkv1YmpJL+r14ete1Eo43piIK6D19zpKm9rz9hAlF7Y+93deW18+JRbn6sTZR+/2vNoeNq2R2J2IBIv7h2Jjzrl62r79s2VG4vv7PLp2inGqvXfziSdTnff63VeecT95uFff/500Pk9xMB1rDxeXshkfSU5kbHu0Jq9vBf7V5kqXuOD9U728x78xB3PZHk+N7o9dc/U7w49U8fr73A7W5qr8l7eNW++yntlIG/w+1bydtr970MAPMOOffnY+NS/pv4y9eHUr6duTL05+a2Jr028Op6xP499vTXTfL3xavGHfJifbd3/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj271vTs3F9vtpZXdE43m0KwhiXTu3FzsPcln1FpZLeon6eyrr8NK9B/584yM54kkih17yhk/ni56Tz7aX62ZnUfU5cMM1D/2WyuTA1NuDi18rE50jnejtK8uprcfmcmQwhPdYDaHnKf1W/QoDxcFjoTza7feOb/63p2vLN9afGvpraXbYxcuXJy5eOGN+fPXl9tLM93Xwx4l8CRsfW8HAAAAAAAAAAAAjooR/67gyg9/VP0fgo/09xKHPUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaFs4m9b9FJmdOTdTbm/cm2+XSy+9VbKVpNFIip8mxcfJ5XSXTA80Vwzr54Pli80kn2y11eqVb+xRrzMx0izu1ktOJ2nW6wN4oL2rB26v6M+wDNiZXuDgsP03AAD//9ev6fg=") syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, '\a\x00', "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0xc0803, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x4c, r7, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xfe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1, 0xfffffffe, 0x2) 8.474390533s ago: executing program 4 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) 8.158546925s ago: executing program 3 (id=323): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r1, 0x4) unshare(0x8000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x487, 0x0, 0x9}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 8.139738706s ago: executing program 1 (id=324): mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x80, &(0x7f0000000100)={[{@subsystem='cpu'}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') mq_timedsend(r2, &(0x7f0000000600)="1a58a86ba5e9a080a0221e0d0a2b0648efa30b5ac9e26b5d6b45514f885c682d3cb8b5b146afa52b5dd58fb06280fa8e14c5f385b46f13fe8eb84fa5b317a70a78efe11da6e247ae2bfefa3a9976ca7a4a6184396f7c05d8b8a5cb2c03619f26c5da534dd55b402e557a5e7189ee2373509949448238f90d5202632e8eb751a70a", 0x81, 0x80, &(0x7f0000000240)) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r4) 6.078778006s ago: executing program 4 (id=325): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) r4 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xf) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000701, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000440)='%-5lx \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x7e1ee0b3, 0xfffff600, 0x8010, 0x1, 0xffff, '\x00', 0x0, r1, 0x2, 0x3, 0x2, 0x0, @value=r1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x759a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0x3, 0xf}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[r3, r0, r5, r6, r7], &(0x7f0000000580)=[{0x2, 0x4, 0x8, 0xc}, {0x5, 0x2, 0xf, 0xc}], 0x10, 0x100}, 0x94) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x602, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464d2, &(0x7f0000000080)={r10}) setuid(0xee00) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020e000508000000000000000000000002000700da0000000a"], 0x40}}, 0x0) 5.980379123s ago: executing program 2 (id=326): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b00a84302911000ed3900090035000800060000001900150004000000000000dc1338d54400009b84136ef75a0184de4411001600c43ab8220000060cb211d2", 0x53}], 0x1}, 0x0) futex_waitv(&(0x7f0000002600)=[{0x6, 0xfffffffffffffffc, 0x82}], 0x1, 0x0, 0x0, 0x1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x800) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 5.893303589s ago: executing program 3 (id=327): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = dup(r5) write$FUSE_ENTRY(r6, &(0x7f0000000880)={0x90, 0x0, 0x0, {0x2, 0x7ffffffe, 0x10000, 0x2, 0x8, 0x400007, {0x1, 0x200000000000001, 0x6, 0xed65, 0x200000000004, 0x3, 0xffff, 0x101, 0x8, 0x1000, 0x848a, 0x0, 0x0, 0x1, 0xe}}}, 0x90) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 5.861682185s ago: executing program 1 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.383354757s ago: executing program 0 (id=329): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0) shutdown(r3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x64) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000440)={0x80000000, 0xc011, 0x462}) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040), 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc60", 0x40, 0x0, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, &(0x7f0000001440)={'bridge0\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0xf0, 0x10, 0x20, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x200100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x28080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009a40)=ANY=[@ANYBLOB="2800000002030104000000000000005b65b400"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000009c00)={0x0, 0x0, &(0x7f0000009bc0)={&(0x7f0000009b40)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f002, 0x2}) 4.939333505s ago: executing program 2 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000000)=ANY=[], 0x6) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r7, 0x100000000000f7) read$watch_queue(r6, &(0x7f0000000000)=""/1, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 3.797378077s ago: executing program 2 (id=331): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_emit_vhci(&(0x7f0000001fc0)=ANY=[@ANYBLOB="04b731489c0804"], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socket$nl_route(0x10, 0x3, 0x0) socket(0xb, 0x6, 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffdfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) syz_emit_vhci(0x0, 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 3.631000576s ago: executing program 4 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40094}, 0x20000804) write$binfmt_elf64(r5, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x5, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x100000000, 0x40000000200d, 0xffffffff00000000, 0xe2, 0x4, 0x2}]}, 0x78) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.720269956s ago: executing program 2 (id=333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r3) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d0d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.644293761s ago: executing program 4 (id=334): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b00a84302911000ed3900090035000800060000001900150004000000000000dc1338d54400009b84136ef75a0184de4411001600c43ab8220000060cb211d2f994", 0x55}], 0x1}, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x800) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 1.456015801s ago: executing program 1 (id=335): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589c", 0xd) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000201010400000000000000000200000a0c6d776284000100080e0012100001800c97890100f2b90fd1"], 0x30}, 0x1, 0x0, 0x0, 0x24000084}, 0x20044804) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) read$FUSE(r6, 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) ioprio_get$uid(0x3, 0x0) recvmsg$can_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x5) bind$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x12, &(0x7f00000003c0)={@empty, @multicast, @void, {@llc={0x4, {@llc={0x42, 0x0, "97", '\x00'}}}}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000400000000100000200b000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 1.258778492s ago: executing program 2 (id=336): socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0xa7, 0x200400) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000180)={0x3, @output={0x0, 0x1, {0xffffff72, 0x1}, 0x9b, 0x7}}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), 0x0}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000340)={0x9, @win={{0x9, 0x8, 0xf, 0xcc}, 0x0, 0xc618, 0x0, 0x5, 0x0, 0x9}}) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0x191, 0x12, 0x0, 0x0) 457.379251ms ago: executing program 4 (id=337): socket$l2tp(0x2, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000006600"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_procfs(r1, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000380)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#%\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce5+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) socket$can_j1939(0x1d, 0x2, 0x7) readlink(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x2003, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fed000/0x1000)=nil, 0x0, 0x36}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1ed0, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2, 0x296}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r1, 0x4) unshare(0x8000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x487, 0x0, 0x9}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 67.081679][ T5812] cgroup: Unknown subsys name 'net' [ 67.232270][ T5812] cgroup: Unknown subsys name 'cpuset' [ 67.241091][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.672081][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.812367][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.821277][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.829791][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.837655][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.839466][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.846304][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.854231][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.867544][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.875786][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.877050][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.884139][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.892342][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.907568][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.912336][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.922063][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.922621][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.929336][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.938902][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.952896][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.961285][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.972090][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.972168][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.988562][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.995888][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.004994][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.465027][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 71.465495][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.479708][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.640340][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 71.687346][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 71.723517][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.730883][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.738308][ T5822] bridge_slave_0: entered allmulticast mode [ 71.745784][ T5822] bridge_slave_0: entered promiscuous mode [ 71.755603][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.762869][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.770165][ T5822] bridge_slave_1: entered allmulticast mode [ 71.777219][ T5822] bridge_slave_1: entered promiscuous mode [ 71.935539][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.948124][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.054940][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.062204][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.069827][ T5831] bridge_slave_0: entered allmulticast mode [ 72.076796][ T5831] bridge_slave_0: entered promiscuous mode [ 72.099615][ T5822] team0: Port device team_slave_0 added [ 72.137363][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.144545][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.151878][ T5831] bridge_slave_1: entered allmulticast mode [ 72.159216][ T5831] bridge_slave_1: entered promiscuous mode [ 72.173658][ T5822] team0: Port device team_slave_1 added [ 72.180051][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 72.201051][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.208318][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.215658][ T5825] bridge_slave_0: entered allmulticast mode [ 72.223181][ T5825] bridge_slave_0: entered promiscuous mode [ 72.274094][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.281542][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.289152][ T5825] bridge_slave_1: entered allmulticast mode [ 72.296160][ T5825] bridge_slave_1: entered promiscuous mode [ 72.322745][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.332986][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.340140][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.366470][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.403689][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 72.416380][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.430910][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.437859][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.464326][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.508592][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.545770][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.614166][ T5831] team0: Port device team_slave_0 added [ 72.623933][ T5831] team0: Port device team_slave_1 added [ 72.684404][ T5822] hsr_slave_0: entered promiscuous mode [ 72.691008][ T5822] hsr_slave_1: entered promiscuous mode [ 72.716446][ T5825] team0: Port device team_slave_0 added [ 72.737065][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.744188][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.770416][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.781458][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.788922][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.796161][ T5823] bridge_slave_0: entered allmulticast mode [ 72.803329][ T5823] bridge_slave_0: entered promiscuous mode [ 72.816796][ T5825] team0: Port device team_slave_1 added [ 72.836265][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.843392][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.869579][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.880996][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.888164][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.895560][ T5823] bridge_slave_1: entered allmulticast mode [ 72.902931][ T5823] bridge_slave_1: entered promiscuous mode [ 72.979293][ T52] Bluetooth: hci0: command tx timeout [ 72.980919][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.992140][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.999582][ T5824] bridge_slave_0: entered allmulticast mode [ 73.006860][ T5824] bridge_slave_0: entered promiscuous mode [ 73.021930][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.028989][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.055025][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.065706][ T52] Bluetooth: hci2: command tx timeout [ 73.071161][ T5145] Bluetooth: hci1: command tx timeout [ 73.071756][ T52] Bluetooth: hci4: command tx timeout [ 73.077113][ T5145] Bluetooth: hci3: command tx timeout [ 73.086064][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.095779][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.121817][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.160569][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.169969][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.177159][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.184503][ T5824] bridge_slave_1: entered allmulticast mode [ 73.191727][ T5824] bridge_slave_1: entered promiscuous mode [ 73.241441][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.306717][ T5825] hsr_slave_0: entered promiscuous mode [ 73.313126][ T5825] hsr_slave_1: entered promiscuous mode [ 73.319514][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 73.325330][ T5825] Cannot create hsr debugfs directory [ 73.333694][ T5823] team0: Port device team_slave_0 added [ 73.378867][ T5831] hsr_slave_0: entered promiscuous mode [ 73.385615][ T5831] hsr_slave_1: entered promiscuous mode [ 73.392086][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 73.397838][ T5831] Cannot create hsr debugfs directory [ 73.406016][ T5823] team0: Port device team_slave_1 added [ 73.415578][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.462021][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.575364][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.582674][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.608751][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.662296][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.669352][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.695913][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.708970][ T5824] team0: Port device team_slave_0 added [ 73.761207][ T5824] team0: Port device team_slave_1 added [ 73.874027][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.881164][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.908311][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.930349][ T5823] hsr_slave_0: entered promiscuous mode [ 73.936835][ T5823] hsr_slave_1: entered promiscuous mode [ 73.943724][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 73.950395][ T5823] Cannot create hsr debugfs directory [ 73.973710][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.981701][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.007829][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.192189][ T5824] hsr_slave_0: entered promiscuous mode [ 74.198834][ T5824] hsr_slave_1: entered promiscuous mode [ 74.205001][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 74.210957][ T5824] Cannot create hsr debugfs directory [ 74.239537][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.252123][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.287948][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.336222][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.467632][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.478192][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.511554][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.542599][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.616233][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.632993][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.645053][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.655425][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.817685][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.832626][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.844637][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.856607][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.866777][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.947884][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.994787][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.011794][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.019134][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.042484][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.054104][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.061461][ T5145] Bluetooth: hci0: command tx timeout [ 75.073417][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.084837][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.101809][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.136809][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.144042][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.148830][ T5145] Bluetooth: hci3: command tx timeout [ 75.157081][ T5834] Bluetooth: hci4: command tx timeout [ 75.157133][ T5826] Bluetooth: hci2: command tx timeout [ 75.169340][ T52] Bluetooth: hci1: command tx timeout [ 75.176989][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.184161][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.228400][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.235535][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.284411][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.346311][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.390129][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.451432][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.486197][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.493439][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.537126][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.572699][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.579933][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.652226][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.659488][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.706692][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.734751][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.742039][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.799824][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.831417][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.854696][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.904003][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.911242][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.957171][ T5823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.971452][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.991533][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.998726][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.012031][ T5822] veth0_vlan: entered promiscuous mode [ 76.065962][ T5822] veth1_vlan: entered promiscuous mode [ 76.135761][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.176680][ T5825] veth0_vlan: entered promiscuous mode [ 76.242752][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.271222][ T5825] veth1_vlan: entered promiscuous mode [ 76.281346][ T5822] veth0_macvtap: entered promiscuous mode [ 76.313204][ T5822] veth1_macvtap: entered promiscuous mode [ 76.377394][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.395062][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.461762][ T3566] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.471920][ T1158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.487622][ T5825] veth0_macvtap: entered promiscuous mode [ 76.502436][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.512260][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.534804][ T5831] veth0_vlan: entered promiscuous mode [ 76.561174][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.570840][ T5825] veth1_macvtap: entered promiscuous mode [ 76.586213][ T5831] veth1_vlan: entered promiscuous mode [ 76.636043][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.656842][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.721027][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.730820][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.747008][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.787504][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.799048][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.857958][ T5823] veth0_vlan: entered promiscuous mode [ 76.867378][ T5831] veth0_macvtap: entered promiscuous mode [ 76.872024][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.883405][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.926976][ T5831] veth1_macvtap: entered promiscuous mode [ 76.939903][ T5823] veth1_vlan: entered promiscuous mode [ 77.014642][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.026384][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.034214][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.084987][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.102228][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.119963][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.139470][ T5826] Bluetooth: hci0: command tx timeout [ 77.181062][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.185682][ T5823] veth0_macvtap: entered promiscuous mode [ 77.205398][ T3510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.219550][ T5826] Bluetooth: hci3: command tx timeout [ 77.225007][ T5826] Bluetooth: hci4: command tx timeout [ 77.230701][ T52] Bluetooth: hci2: command tx timeout [ 77.230725][ T5145] Bluetooth: hci1: command tx timeout [ 77.254653][ T3510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.264411][ T3510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.282071][ T5823] veth1_macvtap: entered promiscuous mode [ 77.321553][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.334580][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.345792][ T3510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.371548][ T5939] loop2: detected capacity change from 0 to 64 [ 77.383280][ T5939] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 77.383280][ T5939] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 77.474118][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.488269][ T5824] veth0_vlan: entered promiscuous mode [ 77.538010][ T5824] veth1_vlan: entered promiscuous mode [ 77.568726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.588507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 77.667314][ T5942] ntfs3(nullb0): Primary boot signature is not NTFS. [ 77.702099][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.708097][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.719364][ T5942] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 77.758225][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.129143][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.143646][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.179113][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.189373][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.198214][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.211318][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.267850][ T5949] xt_TCPMSS: Only works on TCP SYN packets [ 78.904443][ T5824] veth0_macvtap: entered promiscuous mode [ 78.969818][ T5824] veth1_macvtap: entered promiscuous mode [ 78.989565][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.997418][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.098694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.278447][ T5145] Bluetooth: hci0: command tx timeout [ 79.290668][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.301839][ T5145] Bluetooth: hci4: command tx timeout [ 79.307295][ T5145] Bluetooth: hci2: command tx timeout [ 79.311947][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.318945][ T5834] Bluetooth: hci3: command tx timeout [ 79.327973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.451054][ T5958] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 80.076518][ T5145] Bluetooth: hci1: command tx timeout [ 80.112831][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.120558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.129062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.137416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.146062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.155280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 80.165983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.338729][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.347566][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.192734][ T5970] Zero length message leads to an empty skb [ 81.810036][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.376894][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.602030][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.737932][ T5981] loop0: detected capacity change from 0 to 64 [ 82.864048][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.089445][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.168554][ T5983] loop3: detected capacity change from 0 to 128 [ 85.499135][ T5999] erofs (device nbd2): cannot find valid erofs superblock [ 86.153107][ T6008] Bluetooth: hci5: Frame reassembly failed (-90) [ 86.459723][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 86.571598][ T6012] netlink: 'syz.1.16': attribute type 1 has an invalid length. [ 86.574343][ T6010] loop2: detected capacity change from 0 to 256 [ 86.605390][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.627113][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.890012][ T24] cfg80211: failed to load regulatory.db [ 87.970135][ T6021] process 'syz.2.15' launched './file0' with NULL argv: empty string added [ 88.052214][ T6013] macvlan2: entered promiscuous mode [ 88.057978][ T6013] macvlan2: entered allmulticast mode [ 88.197767][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.212293][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.259840][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 88.471671][ T6025] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.645892][ T6036] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 89.680912][ T6036] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 92.013075][ T6047] loop2: detected capacity change from 0 to 512 [ 92.673084][ T30] audit: type=1800 audit(1763043022.194:2): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 93.480400][ T6047] netlink: 72 bytes leftover after parsing attributes in process `syz.2.22'. [ 94.945776][ T6064] netlink: 220 bytes leftover after parsing attributes in process `syz.2.22'. [ 95.296764][ T6061] loop0: detected capacity change from 0 to 32768 [ 95.339382][ T6061] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.26 (6061) [ 95.363450][ T6062] netlink: 'syz.1.25': attribute type 54 has an invalid length. [ 95.373467][ T6061] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.383844][ T6061] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 96.044868][ T6085] loop2: detected capacity change from 0 to 40427 [ 96.609074][ T6061] BTRFS info (device loop0): enabling ssd optimizations [ 96.616110][ T6061] BTRFS info (device loop0): turning on async discard [ 96.623080][ T6061] BTRFS info (device loop0): enabling free space tree [ 96.636097][ T6085] F2FS-fs (loop2): invalid crc value [ 96.715307][ T6085] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 96.745068][ T6085] F2FS-fs (loop2): Start checkpoint disabled! [ 96.775907][ T6085] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 96.790530][ T6085] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 96.897165][ T5825] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 96.919110][ T5930] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.024248][ T6098] loop3: detected capacity change from 0 to 64 [ 99.031550][ T6098] ======================================================= [ 99.031550][ T6098] WARNING: The mand mount option has been deprecated and [ 99.031550][ T6098] and is ignored by this kernel. Remove the mand [ 99.031550][ T6098] option from the mount to silence this warning. [ 99.031550][ T6098] ======================================================= [ 99.184333][ T6098] hfs: get root inode failed [ 99.832033][ T36] kworker/u8:2: attempt to access beyond end of device [ 99.832033][ T36] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.089380][ T5930] usb 5-1: device not accepting address 2, error -71 [ 100.222545][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 100.222569][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.222580][ T36] Workqueue: writeback wb_workfn (flush-7:2) [ 100.222612][ T36] Call Trace: [ 100.222620][ T36] [ 100.222627][ T36] dump_stack_lvl+0x189/0x250 [ 100.222655][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.222677][ T36] ? __pfx_queue_work_on+0x10/0x10 [ 100.222705][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 100.222722][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 100.222749][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 100.222780][ T36] f2fs_write_end_io+0x94b/0xc10 [ 100.222815][ T36] __submit_merged_bio+0x256/0x6a0 [ 100.222844][ T36] __submit_merged_write_cond+0x255/0x530 [ 100.222874][ T36] f2fs_write_data_pages+0x2756/0x3290 [ 100.222933][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.222965][ T36] ? finish_task_switch+0x162/0x960 [ 100.223015][ T36] ? trace_sched_exit_tp+0x36/0x110 [ 100.223033][ T36] ? __schedule+0x184c/0x4ed0 [ 100.223051][ T36] ? finish_task_switch+0x23d/0x960 [ 100.223092][ T36] ? __pfx___schedule+0x10/0x10 [ 100.223130][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.223149][ T36] do_writepages+0x32e/0x550 [ 100.223178][ T36] ? preempt_schedule+0xae/0xc0 [ 100.223195][ T36] ? __pfx_preempt_schedule+0x10/0x10 [ 100.223210][ T36] ? reacquire_held_locks+0x127/0x1d0 [ 100.223233][ T36] ? writeback_sb_inodes+0x3bc/0x1950 [ 100.223261][ T36] __writeback_single_inode+0x133/0x12f0 [ 100.223292][ T36] writeback_sb_inodes+0x984/0x1950 [ 100.223349][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 100.223441][ T36] ? rcu_is_watching+0x15/0xb0 [ 100.223470][ T36] wb_writeback+0x42b/0xb10 [ 100.223501][ T36] ? queue_io+0x3a1/0x590 [ 100.223525][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 100.223553][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.223574][ T36] wb_workfn+0x3f9/0xef0 [ 100.223608][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 100.223630][ T36] ? __lock_acquire+0xab9/0xd20 [ 100.223662][ T36] ? process_one_work+0x868/0x15e0 [ 100.223704][ T36] ? process_one_work+0x868/0x15e0 [ 100.223724][ T36] process_one_work+0x93a/0x15e0 [ 100.223744][ T36] ? __lock_acquire+0xab9/0xd20 [ 100.223789][ T36] ? __pfx_process_one_work+0x10/0x10 [ 100.223820][ T36] ? assign_work+0x3a1/0x410 [ 100.223847][ T36] worker_thread+0x9b0/0xee0 [ 100.223901][ T36] kthread+0x711/0x8a0 [ 100.223923][ T36] ? __pfx_worker_thread+0x10/0x10 [ 100.223944][ T36] ? __pfx_kthread+0x10/0x10 [ 100.223961][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.223978][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.223994][ T36] ? __pfx_kthread+0x10/0x10 [ 100.224012][ T36] ret_from_fork+0x599/0xb30 [ 100.224037][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 100.224071][ T36] ? __switch_to_asm+0x39/0x70 [ 100.224087][ T36] ? __switch_to_asm+0x33/0x70 [ 100.224102][ T36] ? __pfx_kthread+0x10/0x10 [ 100.224120][ T36] ret_from_fork_asm+0x1a/0x30 [ 100.224160][ T36] [ 100.224168][ T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 100.527685][ T6106] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 100.659608][ T30] audit: type=1326 audit(1763043030.424:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.4.32" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b6418f6c9 code=0x0 [ 100.682758][ T6106] CUSE: unknown device info "3ܟ,̘" [ 100.743359][ T6106] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 100.743359][ T6106] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 100.763538][ T6106] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 100.775137][ T6106] CUSE: DEVNAME unspecified [ 101.802508][ T30] audit: type=1800 audit(1763043031.124:4): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.35" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 103.184001][ T6141] program syz.0.31 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.437673][ T6141] mmap: syz.0.31 (6141) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.318236][ T6152] loop3: detected capacity change from 0 to 512 [ 104.326155][ T6151] loop0: detected capacity change from 0 to 128 [ 104.396645][ T6152] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.40: inode has both inline data and extents flags [ 104.410989][ T6151] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4636: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 104.464703][ T5837] udevd[5837]: incorrect jbd checksum on /dev/loop0 [ 104.479654][ T6151] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 104.522685][ T6152] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.40: couldn't read orphan inode 15 (err -117) [ 104.981311][ T6152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.702523][ T30] audit: type=1326 audit(1763043035.044:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91338f6c9 code=0x7ffc0000 [ 105.848697][ T30] audit: type=1326 audit(1763043035.044:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7ff91338f6c9 code=0x7ffc0000 [ 105.874500][ T30] audit: type=1326 audit(1763043035.044:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91338f6c9 code=0x7ffc0000 [ 105.903225][ T6164] pimreg: entered allmulticast mode [ 105.910963][ T30] audit: type=1326 audit(1763043035.044:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff91338f6c9 code=0x7ffc0000 [ 106.432097][ T30] audit: type=1326 audit(1763043035.044:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91338f6c9 code=0x7ffc0000 [ 106.479764][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.489209][ T30] audit: type=1326 audit(1763043035.044:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff91338f6c9 code=0x7ffc0000 [ 106.555282][ T30] audit: type=1326 audit(1763043035.044:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91338f6c9 code=0x7ffc0000 [ 106.706362][ T30] audit: type=1326 audit(1763043035.044:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7ff91338f6c9 code=0x7ffc0000 [ 106.832277][ T6174] xt_hashlimit: max too large, truncated to 1048576 [ 106.843741][ T6174] No such timeout policy "syz1" [ 107.299217][ T30] audit: type=1326 audit(1763043035.044:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91338f6c9 code=0x7ffc0000 [ 107.321325][ T30] audit: type=1326 audit(1763043035.054:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.0.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7ff91338f6c9 code=0x7ffc0000 [ 109.648458][ T5930] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.888500][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 109.918701][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.952418][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.988499][ T5930] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 109.997620][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.073512][ T5930] usb 4-1: config 0 descriptor?? [ 111.427887][ T6208] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 111.589088][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 111.589105][ T30] audit: type=1326 audit(1763043041.314:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.2.46" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24a1f8f6c9 code=0x0 [ 111.630938][ T5930] usbhid 4-1:0.0: can't add hid device: -71 [ 111.651640][ T5930] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 111.711479][ T5930] usb 4-1: USB disconnect, device number 2 [ 113.458866][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.589174][ T6227] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 114.398686][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 114.569857][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.605324][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.734150][ T5901] IPVS: starting estimator thread 0... [ 114.816039][ T24] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 115.094143][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.098543][ T6236] IPVS: using max 50 ests per chain, 120000 per kthread [ 115.356897][ T24] usb 1-1: config 0 descriptor?? [ 115.689748][ T6250] xt_hashlimit: max too large, truncated to 1048576 [ 115.720261][ T6250] No such timeout policy "syz1" [ 116.195644][ T24] usb 1-1: can't set config #0, error -71 [ 116.204241][ T24] usb 1-1: USB disconnect, device number 2 [ 116.525281][ T30] audit: type=1326 audit(1763043046.304:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.1.54" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff881b8f6c9 code=0x0 [ 117.282900][ T5826] Bluetooth: hci4: link tx timeout [ 117.289704][ T5826] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.558541][ T6266] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 117.565252][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.574630][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 117.930690][ T5930] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 118.487179][ T6283] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 118.581967][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 118.691634][ T5826] Bluetooth: hci4: link tx timeout [ 118.696907][ T5826] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.711815][ T6268] vhci_hcd: connection reset by peer [ 118.738661][ T13] vhci_hcd vhci_hcd.1: stop threads [ 118.755276][ T13] vhci_hcd vhci_hcd.1: release socket [ 118.772080][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 119.522189][ T6296] loop3: detected capacity change from 0 to 256 [ 119.574040][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 120.962382][ T6309] Bluetooth: hci5: Frame reassembly failed (-90) [ 121.411537][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 123.208757][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 123.211088][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 123.289862][ T5930] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 125.348589][ T6321] xt_hashlimit: max too large, truncated to 1048576 [ 125.356170][ T6321] No such timeout policy "syz1" [ 125.798800][ T6323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.70'. [ 125.809607][ T6323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.70'. [ 127.594029][ T6339] loop2: detected capacity change from 0 to 256 [ 130.014761][ T6339] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7b82335c, utbl_chksum : 0xe619d30d) [ 130.738535][ T6360] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 130.751354][ T6360] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 132.923377][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.929970][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.387451][ T6382] loop2: detected capacity change from 0 to 512 [ 133.397282][ T6382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.416248][ T6382] EXT4-fs (loop2): Test dummy encryption mode enabled [ 133.784598][ T6382] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 133.874045][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 133.950899][ T6382] EXT4-fs (loop2): 1 truncate cleaned up [ 133.990939][ T6382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.091817][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 134.130580][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.172847][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.201572][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 134.221033][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.870258][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.84'. [ 135.218625][ T6391] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 135.234441][ T10] usb 5-1: config 0 descriptor?? [ 135.614539][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.384345][ T6414] xt_hashlimit: max too large, truncated to 1048576 [ 136.394763][ T30] audit: type=1326 audit(1763043066.184:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 136.507313][ T6416] comedi comedi2: board detection failed [ 136.991646][ T30] audit: type=1326 audit(1763043066.184:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 137.013876][ T30] audit: type=1326 audit(1763043066.184:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 137.063081][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 137.071259][ T5901] IPVS: starting estimator thread 0... [ 137.076942][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 137.108650][ T10] usb 5-1: USB disconnect, device number 4 [ 137.148471][ T30] audit: type=1326 audit(1763043066.184:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 137.185699][ T30] audit: type=1326 audit(1763043066.184:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 137.258499][ T6417] IPVS: using max 33 ests per chain, 79200 per kthread [ 137.273587][ T30] audit: type=1326 audit(1763043066.184:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 137.299188][ T6414] No such timeout policy "syz1" [ 137.321621][ T30] audit: type=1326 audit(1763043066.184:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 137.528261][ T6421] loop2: detected capacity change from 0 to 32768 [ 137.537734][ T30] audit: type=1326 audit(1763043066.184:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 137.564360][ T30] audit: type=1326 audit(1763043066.214:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 137.620199][ T6407] GUP no longer grows the stack in syz.0.87 (6407): 200000004000-20000000a000 (200000002000) [ 137.630694][ T6407] CPU: 1 UID: 0 PID: 6407 Comm: syz.0.87 Not tainted syzkaller #0 PREEMPT(full) [ 137.630711][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.630717][ T6407] Call Trace: [ 137.630723][ T6407] [ 137.630727][ T6407] dump_stack_lvl+0x189/0x250 [ 137.630754][ T6407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.630768][ T6407] ? __pfx__printk+0x10/0x10 [ 137.630779][ T6407] ? find_vma+0xe7/0x160 [ 137.630796][ T6407] __get_user_pages+0x2465/0x29f0 [ 137.630826][ T6407] get_user_pages_remote+0x2f1/0xac0 [ 137.630840][ T6407] ? __pfx_mtree_load+0x10/0x10 [ 137.630854][ T6407] ? __pfx_get_user_pages_remote+0x10/0x10 [ 137.630868][ T6407] ? __access_remote_vm+0x367/0x7d0 [ 137.630881][ T6407] __access_remote_vm+0x211/0x7d0 [ 137.630895][ T6407] ? __pfx___access_remote_vm+0x10/0x10 [ 137.630907][ T6407] ? alloc_pages_noprof+0xbe/0x190 [ 137.630922][ T6407] proc_pid_cmdline_read+0x430/0x810 [ 137.630938][ T6407] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 137.630949][ T6407] ? rw_verify_area+0x2a6/0x4d0 [ 137.630962][ T6407] vfs_readv+0x5aa/0x850 [ 137.630975][ T6407] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 137.630985][ T6407] ? __pfx_vfs_readv+0x10/0x10 [ 137.631006][ T6407] ? __fget_files+0x2a/0x420 [ 137.631020][ T6407] ? __fget_files+0x3a0/0x420 [ 137.631031][ T6407] ? __fget_files+0x2a/0x420 [ 137.631047][ T6407] __x64_sys_preadv+0x197/0x2a0 [ 137.631058][ T6407] ? __pfx___se_sys_futex+0x10/0x10 [ 137.631071][ T6407] ? __pfx___x64_sys_preadv+0x10/0x10 [ 137.631085][ T6407] ? do_syscall_64+0xbe/0xfa0 [ 137.631097][ T6407] do_syscall_64+0xfa/0xfa0 [ 137.631107][ T6407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.631116][ T6407] ? clear_bhb_loop+0x60/0xb0 [ 137.631128][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.631136][ T6407] RIP: 0033:0x7ff91338f6c9 [ 137.631149][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.631157][ T6407] RSP: 002b:00007ff91422c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 137.631173][ T6407] RAX: ffffffffffffffda RBX: 00007ff9135e5fa0 RCX: 00007ff91338f6c9 [ 137.631180][ T6407] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007 [ 137.631186][ T6407] RBP: 00007ff913411f91 R08: 0000000000000000 R09: 0000000000000000 [ 137.631191][ T6407] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 137.631197][ T6407] R13: 00007ff9135e6038 R14: 00007ff9135e5fa0 R15: 00007ffee78f94d8 [ 137.631213][ T6407] [ 137.665604][ T6421] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 137.899892][ T30] audit: type=1326 audit(1763043066.214:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 138.010305][ T6421] XFS (loop2): Ending clean mount [ 138.021909][ T6421] XFS (loop2): Quotacheck needed: Please wait. [ 138.105941][ T6421] XFS (loop2): Quotacheck: Done. [ 138.975422][ T6443] loop4: detected capacity change from 0 to 64 [ 139.042557][ T5822] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 139.800750][ T6449] loop1: detected capacity change from 0 to 8 [ 140.021285][ T6439] loop0: detected capacity change from 0 to 131072 [ 140.639888][ T6454] SQUASHFS error: Failed to read block 0x1ec: -5 [ 140.650257][ T6454] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 142.125527][ T6470] loop0: detected capacity change from 0 to 512 [ 143.084167][ T6470] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 143.397673][ T6470] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.97: iget: bogus i_mode (5) [ 143.600585][ T6470] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.97: couldn't read orphan inode 15 (err -117) [ 144.424145][ T6470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.464317][ T6470] ext2 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.563486][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 146.569683][ T30] audit: type=1326 audit(1763043076.324:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.2.102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24a1f8f6c9 code=0x0 [ 146.609771][ T6505] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.736678][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 147.288538][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 147.335345][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.538458][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 147.568794][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.609875][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.650805][ T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 147.725031][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.665069][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 149.310763][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 149.888468][ T6523] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 150.713780][ T6530] loop4: detected capacity change from 0 to 1024 [ 150.933244][ T6530] EXT4-fs: Ignoring removed i_version option [ 151.040366][ T6530] EXT4-fs: inline encryption not supported [ 151.187789][ T10] usb 2-1: config 0 descriptor?? [ 151.193041][ T6530] EXT4-fs (loop4): Test dummy encryption mode enabled [ 151.258542][ T10] usb 2-1: can't set config #0, error -71 [ 151.267149][ T10] usb 2-1: USB disconnect, device number 2 [ 151.648132][ T6542] capability: warning: `syz.1.109' uses 32-bit capabilities (legacy support in use) [ 151.779790][ T6542] loop1: detected capacity change from 0 to 1024 [ 152.349269][ T6530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.199861][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.995932][ T6552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.356397][ T6561] loop1: detected capacity change from 0 to 64 [ 156.458463][ T5886] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.710599][ T6586] warning: `syz.0.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 157.669358][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 157.708219][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.773149][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.818135][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 157.935454][ T5886] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 157.975837][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.043878][ T5886] usb 5-1: config 0 descriptor?? [ 158.072717][ T5886] usb 5-1: can't set config #0, error -71 [ 158.110243][ T5886] usb 5-1: USB disconnect, device number 5 [ 158.198442][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 158.207031][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.663776][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.681337][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 158.699011][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.239828][ T24] usb 4-1: config 0 descriptor?? [ 159.460194][ T6600] loop2: detected capacity change from 0 to 128 [ 159.524159][ T6600] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.574800][ T6600] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.702354][ T6600] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 159.794665][ T6600] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 160.003895][ T5822] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.600039][ T24] usb 4-1: can't set config #0, error -71 [ 160.622063][ T24] usb 4-1: USB disconnect, device number 3 [ 161.592439][ T6620] netlink: 104 bytes leftover after parsing attributes in process `syz.0.127'. [ 162.386098][ T5901] IPVS: starting estimator thread 0... [ 162.466989][ T6629] loop1: detected capacity change from 0 to 512 [ 162.514166][ T6629] EXT4-fs: Ignoring removed orlov option [ 162.594950][ T6629] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.128: inode has both inline data and extents flags [ 162.727683][ T6627] IPVS: using max 33 ests per chain, 79200 per kthread [ 162.774270][ T6629] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.128: couldn't read orphan inode 15 (err -117) [ 163.588705][ T6629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.723275][ T793] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 163.978453][ T30] audit: type=1800 audit(1763043093.754:53): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.128" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 164.039004][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 164.182372][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.211399][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.816085][ T793] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 164.837475][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.964949][ T793] usb 1-1: config 0 descriptor?? [ 165.816656][ T30] audit: type=1326 audit(1763043095.604:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 165.839904][ T6657] capability: warning: `syz.2.135' uses deprecated v2 capabilities in a way that may be insecure [ 165.853592][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.880362][ T30] audit: type=1326 audit(1763043095.634:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 165.923535][ T6659] loop3: detected capacity change from 0 to 512 [ 165.948706][ T30] audit: type=1326 audit(1763043095.634:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 166.010959][ T30] audit: type=1326 audit(1763043095.714:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 166.033927][ T30] audit: type=1326 audit(1763043095.714:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 166.056829][ T30] audit: type=1326 audit(1763043095.734:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 166.070395][ T6659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.080949][ T30] audit: type=1326 audit(1763043095.784:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f24a1fc1f85 code=0x7ffc0000 [ 166.115713][ T30] audit: type=1326 audit(1763043095.784:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 166.176624][ T6659] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.242979][ T30] audit: type=1326 audit(1763043095.794:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24a1f8df10 code=0x7ffc0000 [ 166.507391][ T6671] netlink: 'syz.3.137': attribute type 29 has an invalid length. [ 166.572110][ T6671] netlink: 'syz.3.137': attribute type 29 has an invalid length. [ 166.866874][ T793] usbhid 1-1:0.0: can't add hid device: -71 [ 166.873319][ T793] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 166.885086][ T793] usb 1-1: USB disconnect, device number 3 [ 167.067387][ T6678] loop0: detected capacity change from 0 to 64 [ 167.086141][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.499313][ T6684] bridge0: entered promiscuous mode [ 168.059400][ T6684] syz.4.141 (6684) used greatest stack depth: 18504 bytes left [ 169.401707][ T6693] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 171.054673][ T6712] tmpfs: Bad value for 'huge' [ 172.183733][ T6723] loop1: detected capacity change from 0 to 64 [ 172.340211][ T6712] hub 1-0:1.0: USB hub found [ 172.364416][ T6712] hub 1-0:1.0: 1 port detected [ 179.522093][ T6772] serio: Serial port ttyS3 [ 179.871099][ T6776] loop4: detected capacity change from 0 to 64 [ 182.004745][ T6797] loop0: detected capacity change from 0 to 64 [ 182.414894][ T6801] loop2: detected capacity change from 0 to 1024 [ 182.561868][ T6802] loop3: detected capacity change from 0 to 512 [ 182.631359][ T6807] overlay: ./bus is not a directory [ 183.301281][ T6802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.448932][ T6802] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.599907][ T6819] xt_connbytes: Forcing CT accounting to be enabled [ 185.257882][ T6830] loop1: detected capacity change from 0 to 64 [ 185.356752][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 185.356768][ T30] audit: type=1800 audit(1763043115.144:206): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.171" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 185.487803][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.715478][ T6834] sctp: [Deprecated]: syz.2.175 (pid 6834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.715478][ T6834] Use struct sctp_sack_info instead [ 186.751434][ T6846] loop2: detected capacity change from 0 to 64 [ 187.415190][ T5826] Bluetooth: hci4: link tx timeout [ 187.420880][ T5826] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 188.139749][ T6865] syz.3.181 uses obsolete (PF_INET,SOCK_PACKET) [ 189.469035][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 193.585500][ T6910] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 194.456421][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.469656][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.366231][ T6937] loop1: detected capacity change from 0 to 64 [ 196.508453][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 196.516146][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.522744][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 196.530038][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 199.028072][ T6953] x_tables: unsorted underflow at hook 2 [ 199.346566][ T6961] loop0: detected capacity change from 0 to 16 [ 199.495027][ T6961] erofs (device loop0): mounted with root inode @ nid 36. [ 200.165104][ T6964] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 200.607773][ T6972] loop1: detected capacity change from 0 to 512 [ 201.010792][ T6975] hugetlbfs: syz.4.203 (6975): Using mlock ulimits for SHM_HUGETLB is obsolete [ 201.568544][ T6972] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 201.646163][ T6984] erofs (device loop0): bogus dirent @ nid 36 [ 201.653541][ T6984] erofs (device loop0): bogus dirent @ nid 36 [ 201.718476][ T6972] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 203.369356][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 205.693434][ T7009] loop4: detected capacity change from 0 to 2048 [ 205.813705][ T7009] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.015034][ T7012] loop2: detected capacity change from 0 to 64 [ 207.138548][ T7022] netlink: 'syz.0.211': attribute type 16 has an invalid length. [ 207.146460][ T7022] netlink: 'syz.0.211': attribute type 17 has an invalid length. [ 208.748067][ T7022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.489701][ T5894] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 209.562279][ T5826] Bluetooth: hci3: unexpected event for opcode 0x200f [ 212.086192][ T7079] netlink: 184 bytes leftover after parsing attributes in process `syz.0.221'. [ 215.564521][ T7101] loop2: detected capacity change from 0 to 2048 [ 216.192673][ T7101] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.908608][ T7109] loop3: detected capacity change from 0 to 2048 [ 217.657376][ T7109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.843114][ T5886] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 218.148714][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 218.214328][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.319197][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.347601][ T30] audit: type=1800 audit(1763043148.074:207): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.230" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 218.434528][ T5886] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 218.923821][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.962155][ T5886] usb 2-1: config 0 descriptor?? [ 218.983148][ T7127] loop2: detected capacity change from 0 to 128 [ 218.990487][ T7127] omfs: Bad value for 'umask' [ 219.147368][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.232'. [ 219.644077][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.356643][ T7134] hub 9-0:1.0: USB hub found [ 220.408357][ T5886] usbhid 2-1:0.0: can't add hid device: -71 [ 220.424742][ T7134] hub 9-0:1.0: 1 port detected [ 220.507694][ T5886] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 220.556637][ T5886] usb 2-1: USB disconnect, device number 3 [ 221.395890][ T52] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 221.406148][ T52] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 222.629842][ T7164] loop2: detected capacity change from 0 to 2048 [ 223.061659][ T7164] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.195631][ T7166] loop3: detected capacity change from 0 to 128 [ 223.262117][ T7166] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.358541][ T7166] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 224.413734][ T5823] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.892639][ T7178] loop2: detected capacity change from 0 to 128 [ 225.593134][ T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 225.602438][ T52] Bluetooth: hci0: Injecting HCI hardware error event [ 225.612432][ T5826] Bluetooth: hci0: hardware error 0x00 [ 227.963469][ T5826] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 228.858473][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 229.028397][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 229.632861][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.745937][ T7231] loop0: detected capacity change from 0 to 1024 [ 229.802516][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.812531][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 229.821705][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.831659][ T7231] ext4: Unknown parameter 'fsmagic' [ 230.736599][ T24] usb 4-1: config 0 descriptor?? [ 232.064168][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 232.080270][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 232.110193][ T24] usb 4-1: USB disconnect, device number 4 [ 235.666494][ T7260] lo speed is unknown, defaulting to 1000 [ 235.672897][ T7260] lo speed is unknown, defaulting to 1000 [ 235.691535][ T7260] lo speed is unknown, defaulting to 1000 [ 235.726025][ T7260] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 235.765823][ T7260] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 236.555095][ T7260] lo speed is unknown, defaulting to 1000 [ 236.563398][ T7260] lo speed is unknown, defaulting to 1000 [ 236.573460][ T7260] lo speed is unknown, defaulting to 1000 [ 236.581488][ T7260] lo speed is unknown, defaulting to 1000 [ 236.596412][ T7260] lo speed is unknown, defaulting to 1000 [ 241.361115][ T7290] ceph: No mds server is up or the cluster is laggy [ 241.483763][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 241.887186][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 242.263086][ T5826] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 242.272505][ T5826] Bluetooth: hci2: unexpected event for opcode 0x203e [ 243.142330][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 245.074484][ T5909] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 246.389255][ T5826] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 246.398053][ T5826] Bluetooth: hci2: Injecting HCI hardware error event [ 246.407378][ T5826] Bluetooth: hci2: hardware error 0x00 [ 247.819718][ T7333] loop4: detected capacity change from 0 to 32768 [ 247.829745][ T7333] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.271 (7333) [ 248.069127][ T7333] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.079503][ T7333] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 248.818719][ T5826] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 248.996428][ T7360] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 249.002952][ T7360] syzkaller1: linktype set to 778 [ 249.543350][ T7333] BTRFS info (device loop4): enabling ssd optimizations [ 249.554146][ T7333] BTRFS info (device loop4): turning on async discard [ 249.561499][ T7333] BTRFS info (device loop4): enabling free space tree [ 250.198756][ T5824] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 252.446431][ T793] IPVS: starting estimator thread 0... [ 252.832014][ T7387] IPVS: using max 50 ests per chain, 120000 per kthread [ 253.651457][ T30] audit: type=1326 audit(1763043183.444:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 253.971022][ T7414] loop2: detected capacity change from 0 to 256 [ 253.979889][ T7414] exfat: Deprecated parameter 'namecase' [ 253.985684][ T7414] exfat: Deprecated parameter 'namecase' [ 253.991437][ T7414] exfat: Deprecated parameter 'namecase' [ 254.019318][ T7414] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 254.777627][ T30] audit: type=1326 audit(1763043183.444:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 254.789906][ T7414] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 255.238559][ T30] audit: type=1326 audit(1763043183.444:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 255.262084][ T30] audit: type=1326 audit(1763043183.444:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 255.314368][ T793] libceph: connect (1)[c::]:6789 error -101 [ 255.320716][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 255.331210][ T30] audit: type=1326 audit(1763043183.444:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 255.783531][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.789988][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.023655][ T7414] ceph: No mds server is up or the cluster is laggy [ 256.042898][ T793] libceph: connect (1)[c::]:6789 error -101 [ 256.128961][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 256.277772][ T30] audit: type=1326 audit(1763043183.444:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 256.396819][ T5909] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 256.408081][ T30] audit: type=1326 audit(1763043183.444:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 256.558558][ T30] audit: type=1326 audit(1763043183.444:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 256.924844][ T5909] usb 2-1: device not accepting address 5, error -71 [ 256.952322][ T30] audit: type=1326 audit(1763043183.464:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 257.075137][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 257.107138][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 257.118345][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 257.130619][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 257.488851][ T30] audit: type=1326 audit(1763043183.564:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f8f6c9 code=0x7ffc0000 [ 258.438555][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 258.758655][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 258.814934][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.905581][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.988541][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 259.041493][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.820447][ T24] usb 5-1: config 0 descriptor?? [ 259.914352][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 259.930117][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 260.084324][ T24] usb 5-1: USB disconnect, device number 8 [ 260.179690][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 260.179707][ T30] audit: type=1804 audit(1763043189.964:225): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.293" name="file0" dev="ramfs" ino=13075 res=1 errno=0 [ 260.554079][ T5826] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 261.247114][ T7468] xt_hashlimit: max too large, truncated to 1048576 [ 261.257039][ T7468] No such timeout policy "syz1" [ 261.775943][ T30] audit: type=1326 audit(1763043191.564:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 262.266132][ T30] audit: type=1326 audit(1763043191.564:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 262.336409][ T30] audit: type=1326 audit(1763043191.564:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 262.388082][ T7481] loop1: detected capacity change from 0 to 256 [ 262.400299][ T7481] exfat: Deprecated parameter 'namecase' [ 262.406365][ T7481] exfat: Deprecated parameter 'namecase' [ 262.412312][ T7481] exfat: Deprecated parameter 'namecase' [ 263.267029][ T7481] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 263.436107][ T30] audit: type=1326 audit(1763043191.564:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 263.657522][ T7481] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 263.721739][ T30] audit: type=1326 audit(1763043191.564:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 263.770886][ T793] libceph: connect (1)[c::]:6789 error -101 [ 263.777021][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 263.938716][ T30] audit: type=1326 audit(1763043191.594:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 263.961761][ T7480] ceph: No mds server is up or the cluster is laggy [ 264.138404][ T30] audit: type=1326 audit(1763043191.594:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 265.305999][ T30] audit: type=1326 audit(1763043191.594:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 266.327237][ T30] audit: type=1326 audit(1763043191.594:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 267.351335][ T30] audit: type=1326 audit(1763043191.764:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 267.437892][ T793] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 267.527430][ T30] audit: type=1326 audit(1763043191.764:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 267.726407][ T30] audit: type=1326 audit(1763043192.044:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 268.774810][ T30] audit: type=1326 audit(1763043192.044:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 269.445660][ T30] audit: type=1326 audit(1763043192.044:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 269.473281][ T7511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.304'. [ 270.131220][ T30] audit: type=1326 audit(1763043192.044:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 270.473061][ T7511] 9pnet_fd: p9_fd_create_tcp (7511): problem connecting socket to 127.0.0.1 [ 270.589140][ T7511] 9pnet_fd: p9_fd_create_tcp (7511): problem connecting socket to 127.0.0.1 [ 270.667404][ T30] audit: type=1326 audit(1763043192.044:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 270.696436][ T30] audit: type=1326 audit(1763043192.044:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 270.854987][ T30] audit: type=1326 audit(1763043192.044:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.1.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff881b8f6c9 code=0x7ffc0000 [ 271.236091][ T7541] bridge0: entered promiscuous mode [ 272.128699][ T7549] sd 0:0:1:0: device reset [ 273.347442][ T7556] netlink: 'syz.2.311': attribute type 2 has an invalid length. [ 273.355437][ T7556] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 273.363532][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 274.430968][ T7565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.447942][ T24] libceph: connect (1)[c::]:6789 error -101 [ 274.467203][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 274.640770][ T7566] ceph: No mds server is up or the cluster is laggy [ 274.768146][ T24] libceph: connect (1)[c::]:6789 error -101 [ 274.780338][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 275.598618][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 275.996504][ T7579] binder: 7576:7579 ioctl c0306201 0 returned -14 [ 276.063023][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 276.141854][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.176478][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.206024][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 276.290986][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.314359][ T10] usb 3-1: config 0 descriptor?? [ 278.368590][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 278.374599][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 278.458132][ T10] usb 3-1: USB disconnect, device number 2 [ 279.493530][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 280.211209][ T7620] sd 0:0:1:0: device reset [ 281.350443][ T7629] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 281.942466][ T7638] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 282.946089][ T7639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.329'. [ 284.392816][ T7657] netlink: 'syz.2.333': attribute type 10 has an invalid length. [ 284.609121][ T7657] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.661417][ T7657] bond0: (slave team0): Enslaving as an active interface with an up link [ 285.120510][ T7657] syz.2.333 (7657) used greatest stack depth: 17888 bytes left [ 285.520656][ T7658] xt_hashlimit: max too large, truncated to 1048576 [ 285.527711][ T7658] No such timeout policy "syz1" [ 285.575244][ T7666] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.673949][ T7666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.335'. [ 287.291134][ T7680] sd 0:0:1:0: device reset [ 287.806696][ T7679] Oops: general protection fault, probably for non-canonical address 0xdffffc000000012f: 0000 [#1] SMP KASAN PTI [ 287.818613][ T7679] KASAN: null-ptr-deref in range [0x0000000000000978-0x000000000000097f] [ 287.827015][ T7679] CPU: 0 UID: 0 PID: 7679 Comm: syz.2.338 Not tainted syzkaller #0 PREEMPT(full) [ 287.836240][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.846276][ T7679] RIP: 0010:put_ipc_ns+0x7f/0x3d0 [ 287.851289][ T7679] Code: b8 f1 f1 f1 f1 00 f3 f3 f3 4b 89 44 3d 00 e8 38 16 85 fd 48 85 db 0f 84 ea 00 00 00 4c 8d a3 88 09 00 00 4d 89 e6 49 c1 ee 03 <43> 80 3c 3e 00 74 08 4c 89 e7 e8 02 c4 eb fd 4d 8b 3c 24 31 ff 4c [ 287.870872][ T7679] RSP: 0018:ffffc90003897c60 EFLAGS: 00010203 [ 287.876917][ T7679] RAX: ffffffff843c8a18 RBX: fffffffffffffff4 RCX: 0000000000080000 [ 287.884865][ T7679] RDX: ffffc9000e622000 RSI: 0000000000001ac5 RDI: 0000000000001ac6 [ 287.892815][ T7679] RBP: ffffc90003897cf8 R08: ffff8880249c01b7 R09: 1ffff11004938036 [ 287.900771][ T7679] R10: dffffc0000000000 R11: ffffed1004938037 R12: 000000000000097c [ 287.908729][ T7679] R13: 1ffff92000712f8c R14: 000000000000012f R15: dffffc0000000000 [ 287.916703][ T7679] FS: 00007f24a01f66c0(0000) GS:ffff888125ec1000(0000) knlGS:0000000000000000 [ 287.925621][ T7679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.932191][ T7679] CR2: 000020000026b030 CR3: 0000000031dd4000 CR4: 00000000003526f0 [ 287.940179][ T7679] Call Trace: [ 287.943454][ T7679] [ 287.946395][ T7679] ? __pfx_put_ipc_ns+0x10/0x10 [ 287.951240][ T7679] ? put_mnt_ns+0x221/0x2f0 [ 287.955734][ T7679] nsproxy_free+0x1ef/0x7c0 [ 287.960227][ T7679] create_new_namespaces+0x47a/0x540 [ 287.965500][ T7679] unshare_nsproxy_namespaces+0x11c/0x170 [ 287.971348][ T7679] ksys_unshare+0x4c8/0x8c0 [ 287.975839][ T7679] ? __pfx_ksys_unshare+0x10/0x10 [ 287.980851][ T7679] __x64_sys_unshare+0x38/0x50 [ 287.985606][ T7679] do_syscall_64+0xfa/0xfa0 [ 287.990097][ T7679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.996157][ T7679] ? clear_bhb_loop+0x60/0xb0 [ 288.000813][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.006689][ T7679] RIP: 0033:0x7f24a1f8f6c9 [ 288.011101][ T7679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.030809][ T7679] RSP: 002b:00007f24a01f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 288.039206][ T7679] RAX: ffffffffffffffda RBX: 00007f24a21e6180 RCX: 00007f24a1f8f6c9 [ 288.047249][ T7679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 288.055204][ T7679] RBP: 00007f24a2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 288.063155][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.071283][ T7679] R13: 00007f24a21e6218 R14: 00007f24a21e6180 R15: 00007fff6a6385c8 [ 288.079240][ T7679] [ 288.082262][ T7679] Modules linked in: [ 288.087172][ T7679] ---[ end trace 0000000000000000 ]--- [ 288.092661][ T7679] RIP: 0010:put_ipc_ns+0x7f/0x3d0 [ 288.097675][ T7679] Code: b8 f1 f1 f1 f1 00 f3 f3 f3 4b 89 44 3d 00 e8 38 16 85 fd 48 85 db 0f 84 ea 00 00 00 4c 8d a3 88 09 00 00 4d 89 e6 49 c1 ee 03 <43> 80 3c 3e 00 74 08 4c 89 e7 e8 02 c4 eb fd 4d 8b 3c 24 31 ff 4c [ 288.117287][ T7679] RSP: 0018:ffffc90003897c60 EFLAGS: 00010203 [ 288.123748][ T7679] RAX: ffffffff843c8a18 RBX: fffffffffffffff4 RCX: 0000000000080000 [ 288.131737][ T7679] RDX: ffffc9000e622000 RSI: 0000000000001ac5 RDI: 0000000000001ac6 [ 288.139705][ T7679] RBP: ffffc90003897cf8 R08: ffff8880249c01b7 R09: 1ffff11004938036 [ 288.147655][ T7679] R10: dffffc0000000000 R11: ffffed1004938037 R12: 000000000000097c [ 288.155621][ T7679] R13: 1ffff92000712f8c R14: 000000000000012f R15: dffffc0000000000 [ 288.163646][ T7679] FS: 00007f24a01f66c0(0000) GS:ffff888125ec1000(0000) knlGS:0000000000000000 [ 288.172577][ T7679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.181645][ T7679] CR2: 000020000026b030 CR3: 0000000031dd4000 CR4: 00000000003526f0 [ 288.189809][ T7679] Kernel panic - not syncing: Fatal exception [ 288.196138][ T7679] Kernel Offset: disabled [ 288.200449][ T7679] Rebooting in 86400 seconds..