last executing test programs: 15m15.924132601s ago: executing program 32 (id=1504): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) getdents64(r1, &(0x7f0000000080)=""/234, 0xea) lseek(r1, 0x3, 0x1) getdents64(r1, 0x0, 0x0) 14m8.351661799s ago: executing program 33 (id=1721): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) acct(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(0xffffffffffffffff, 0x54a6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r0, @ANYRES16=0x0, @ANYRES16=r1, @ANYRES64=r1], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_usb_disconnect(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x601, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x1c}}, 0x4000054) 11m13.223404256s ago: executing program 34 (id=2383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r1, 0x541b, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c0000000000000007000000100000000000000002000000070000001800000000000000", @ANYBLOB='B'], 0x34}}], 0x1, 0x24004810) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 10m34.4209597s ago: executing program 3 (id=2495): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000978000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000000000000, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 10m33.579736496s ago: executing program 3 (id=2499): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 10m32.870340383s ago: executing program 3 (id=2504): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006080)=@delchain={0x24, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 10m30.708168544s ago: executing program 3 (id=2506): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x70bd2d, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xf00}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x24040800) 10m28.149216378s ago: executing program 3 (id=2508): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000978000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000000000000, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 10m27.321361326s ago: executing program 3 (id=2512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x7a, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x21, 0x80805, 0xffff39ce) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={r8, 0xa49a, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xffe4, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a0103000000000000000001000000140004800800024000000000080001400000000509000300"], 0x92fc}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m11.999768153s ago: executing program 35 (id=2512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x7a, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x21, 0x80805, 0xffff39ce) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={r8, 0xa49a, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xffe4, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a0103000000000000000001000000140004800800024000000000080001400000000509000300"], 0x92fc}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m6.380222074s ago: executing program 7 (id=2694): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 9m5.741215407s ago: executing program 7 (id=2699): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xfff, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000000, 0x2}, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) 9m2.239070574s ago: executing program 7 (id=2705): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none}) 9m1.842763376s ago: executing program 7 (id=2706): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'batadv0\x00', 0x7fff}) 9m1.28221272s ago: executing program 7 (id=2709): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 9m0.728613484s ago: executing program 7 (id=2714): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, 0x0, &(0x7f00000004c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x5, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) accept4$unix(r4, 0x0, 0x0, 0x800) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, 0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000000)=r5) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 8m45.429669956s ago: executing program 36 (id=2714): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, 0x0, &(0x7f00000004c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x5, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) accept4$unix(r4, 0x0, 0x0, 0x800) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, 0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000000)=r5) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4m43.133532757s ago: executing program 2 (id=3351): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) utime(&(0x7f0000000200)='./file0\x00', 0x0) 4m42.164420633s ago: executing program 2 (id=3355): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = dup3(r1, r0, 0x0) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xa, {"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", 0xe00}}, 0xffffff5c) 4m41.610974876s ago: executing program 2 (id=3360): io_uring_setup(0x1694, &(0x7f0000000080)) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) 4m40.971454777s ago: executing program 2 (id=3364): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000001bc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c646973636172642c0022d4e1468bdf7f5d2b8a76a47e57ee597ea97ee30dd4a6a137ad093e0730309c415a8c6d6835a98171aa5d81203036b78ac7723db9ecc894f800e822e364f3fc6009e01da5866f48585baace076e", @ANYRES16, @ANYRESHEX, @ANYBLOB="b390fc4b51336f88fee19f4c3d2b26bd860138d1e3243b51df2539f9845a303cbbf29f76e2c26688d054b07eaad9e7cb19a36ef5a8e50b6683228a8403aca9ad8d3114fbabb04f515264006d588d7d49bae9a280e3e3f962c9aece93e790ed6f9c9bc835a7dfc76b44961f9f7f8e749f2d59cb356e21dd55810b92916da33fed4c06ac710abb73c21a8cea3204f6301c8ed1ff6c7939719bac51d7c9cee464b9a1cdf38fbb67ff89cf84208df4937fd781b1837c9695c57ebde4e937f9df63d4396682790f8aa277f3d2d745509fc8687d718a99e8a733efd895f52203370d000000000000f15e6c00b3000000000000bc7f55a6eeb49d7b6757ce22c6201ea8c345a066c71484fc51f6f42726d6631c2ab583d10052d40a17cf3eda4e19bf4a8be1d395e5ffca76585f71ab766c5d8d1797850e31d758d7aa250e669374fbb4f03b6f54f1185f8acec3889200"/346, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES8], 0x81, 0x1528, &(0x7f0000001e00)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) 4m38.619993707s ago: executing program 2 (id=3369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLCREATE(r2, &(0x7f0000000280)={0x18, 0xf, 0x2, {{0x2, 0x3, 0x5}, 0x54}}, 0x18) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m32.488026289s ago: executing program 2 (id=3372): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff001000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000004640)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 4m25.194451021s ago: executing program 8 (id=3395): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x73ee8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3, 0xdcca, 0x4, 0xe, 0x80000000, 0x100000000, 0x5, 0x62}, 0x0, &(0x7f0000000300)={0x343f3c06, 0x2, 0x8, 0x4, 0xc, 0x80000001, 0xfffffffffffffffd, 0xf}, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f0000000680)={&(0x7f0000000640)={[0x3]}, 0x8}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) io_uring_setup(0x7fdb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x8}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) socket$packet(0x11, 0x3, 0x300) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 4m17.969811349s ago: executing program 8 (id=3401): r0 = socket(0x28, 0x5, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x11) sendmsg$NL80211_CMD_DEL_STATION(r5, 0x0, 0x40050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m17.120190085s ago: executing program 37 (id=3372): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff001000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000004640)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 4m16.535615058s ago: executing program 8 (id=3407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r1 = gettid() r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x7d243a6ea807936d, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044014}, 0x8c0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x952, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x258}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ppoll(&(0x7f0000000100)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000b40)={0x54, 0x1, 0x1, {0x0, 0x1}, {0x60, 0x2}, @period={0x59, 0x0, 0x8, 0x5, 0x448, {0x2, 0x8, 0x5, 0x401}, 0x0, 0x0}}) r9 = epoll_create1(0x0) epoll_pwait(r9, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r10, &(0x7f0000000040)="e2", 0x2250) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) eventfd2(0x0, 0x0) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4m13.218053991s ago: executing program 8 (id=3412): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) r2 = io_uring_setup(0x14e9, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x8c0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_io_uring_setup(0x952, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x258, 0x0, r2}, &(0x7f0000000080), &(0x7f0000000040)) epoll_create1(0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4m11.669398859s ago: executing program 8 (id=3415): ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000a40)={0x1, 0x0, [{0x4, 0x5a, &(0x7f0000000500)=""/90}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4m5.858206178s ago: executing program 8 (id=3418): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/98, 0x62) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x18) 3m48.149878967s ago: executing program 38 (id=3418): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/98, 0x62) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x18) 1m56.606954803s ago: executing program 4 (id=3600): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40101, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="bdb77971e737c5d65a7f23ee9a07730ce37a9a11fb77b6e0caea19b62bfa010000800000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000140)={[{@errors_remount}, {@discard}, {@dioread_nolock}, {@nodioread_nolock}, {@dioread_nolock}, {@minixdf}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 1m55.162406366s ago: executing program 4 (id=3604): syz_open_dev$usbfs(&(0x7f0000000040), 0x10001, 0x220000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320) socket$nl_xfrm(0x10, 0x3, 0x6) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, &(0x7f0000000000)=0xa639, 0x9, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000640)=ANY=[@ANYRES16], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000600), &(0x7f00000005c0)=r2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r3 = syz_io_uring_setup(0x8bcb, &(0x7f0000000480)={0x0, 0x1068, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x21, 0x0, 0x4ac, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x26}, 0x33, r6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8916, &(0x7f0000000000)) 1m53.954524693s ago: executing program 4 (id=3606): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1m52.008722879s ago: executing program 4 (id=3609): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1m50.664101544s ago: executing program 4 (id=3612): socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="5000000010010009000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8040) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x2d59, 0x2, 0x3, 0x8a, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000380)) syz_emit_ethernet(0xbb, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) memfd_create(&(0x7f0000000180)='/!-(\x00\xa1\xad\x83e`\xa7\xc42\xdd\x9c~\xa9\x8eR_\xc8\x00\x00\x04\x00\x00\x00\x00\x03\xb3\x138\xc3\xbf\xf0\x89\xec<\x80\xe2Bj.u\x9f\x1ct<\x0f\xccn\xefP\xc0\xaab\xb8_\r\x9c\x80\xa9\xad\xd4EV\xa4\xfct\xbd\x96\xdf\r5\x9a', 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000050013"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000084) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x810) socket$xdp(0x2c, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, &(0x7f0000000340)={0x0}, 0x1) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 1m48.933087794s ago: executing program 4 (id=3618): socket(0x1d, 0x5, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000010000000000000001020085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x8000c6, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', &(0x7f00000001c0), 0x2000) 1m33.248513899s ago: executing program 39 (id=3618): socket(0x1d, 0x5, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000010000000000000001020085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x8000c6, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', &(0x7f00000001c0), 0x2000) 1m9.088261929s ago: executing program 5 (id=3689): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1m7.832361589s ago: executing program 5 (id=3691): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x24, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x24}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) 1m2.892374727s ago: executing program 5 (id=3695): openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x301401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x80af}, 0x1c) 52.176160749s ago: executing program 5 (id=3704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, r2, r2, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) 51.310640252s ago: executing program 5 (id=3705): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 48.779298202s ago: executing program 5 (id=3710): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ftruncate(0xffffffffffffffff, 0x80000001) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000000900)="$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") 33.420120585s ago: executing program 40 (id=3710): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ftruncate(0xffffffffffffffff, 0x80000001) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000000900)="$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") 20.150679005s ago: executing program 1 (id=3780): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 19.877878613s ago: executing program 6 (id=3782): r0 = socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094) 17.378834755s ago: executing program 1 (id=3786): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000002eda"], 0x118) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) timer_gettime(0x0, 0x0) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000280)) syz_emit_vhci(0x0, 0x66) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00080007d70ca416cafb8c4076759cf6ae541cf821c0468c7bf917277c2afd7da4ab8d7924a9f24b6faf3ae47dc2e7c946b4b1a5554a80799fbce7f4c3f4219edaa9d9ff13e97932492d47", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000680)=ANY=[@ANYBLOB]) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r8, 0x0, 0x0, 0x111, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) 17.076969163s ago: executing program 6 (id=3789): socket$tipc(0x1e, 0x5, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 15.612465896s ago: executing program 6 (id=3791): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000160000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 15.513835377s ago: executing program 1 (id=3792): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x82000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000780)) 14.472404938s ago: executing program 6 (id=3794): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x1400, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 13.130752216s ago: executing program 6 (id=3796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4c4c3294abd26aaf3fb0066bad004b000f303c70fae6e2fc0c00f2d130f01f1260f01ca660f3881b4493c000000c4c2459d78ad", 0x3d}], 0x1, 0x51, 0x0, 0x0) syz_usb_connect(0x0, 0x32e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b04af72024d05a5ea9160102030109021c0301000050000904e700050801000009050602ff03b30204491167"], 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.462936604s ago: executing program 9 (id=3799): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x8000000000000001}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000014d564b"]) 10.374723351s ago: executing program 0 (id=3800): socket$tipc(0x1e, 0x5, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 10.192163982s ago: executing program 9 (id=3801): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@host, 0x6}, 0x0, 0x1, 0x4}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@my=0x1, 0x10001}, 0x0, 0x1, 0xf13a}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0x2}) 9.528207369s ago: executing program 6 (id=3802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x3, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000180), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x242, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x42, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) setitimer(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r4 = fanotify_init(0x200, 0x101000) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="315027b23d445e", 0x7}], 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xeefe3000, 0x2}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a88f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153deefe51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53de00000000088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) 9.303412889s ago: executing program 0 (id=3803): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000016000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 7.903777793s ago: executing program 9 (id=3804): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000480)=0x4b92, 0x4) dup(0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x680000f, 0x12, r2, 0x2000) 7.418064297s ago: executing program 1 (id=3805): ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, &(0x7f00000016c0), 0x0, 0x10, 0x5, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4f"], 0xd) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f0000000400000004", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001030000000000f20000020000040000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x118, 0x0, 0x4, 0xa1, 0x46}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="5f476cf53f84", @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @loopback, @local, @remote}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) 7.140306329s ago: executing program 0 (id=3806): mkdir(&(0x7f0000000200)='./bus\x00', 0x190) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x2100, 0x115) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x3, 0xe6, 0x0, 0x6, 0x2000000}) 6.63148346s ago: executing program 9 (id=3807): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6.378873057s ago: executing program 0 (id=3808): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000640)=0x13) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 4.480330841s ago: executing program 0 (id=3809): r0 = socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x1, 0x81, 0x17}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094) 4.224785778s ago: executing program 9 (id=3810): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x8000000000000001}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000014d564b"]) 2.428498247s ago: executing program 9 (id=3811): r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') preadv(r2, 0x0, 0x0, 0x0, 0x0) r3 = eventfd2(0x2, 0x80000) r4 = eventfd2(0x4, 0xc0801) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x201000000300) io_submit(0x0, 0x4, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000040)="cd5b566ab89f8fbef864018c", 0xc, 0x6, 0x0, 0x7, r2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, r0, &(0x7f0000000200)="f1c32bec2515d4b980248a6923ec5a1ddbcc25bad4f6b0968c1328fae70a5cc48041f2f02ed5404b84fdb49cbb840d8761f8598094d11f559efb14cb7a03e483686f370d8c4b02963974d7900f230638d71530425af8175b2112cda9cb04cdf3cdd4d0ef6cad7df520a217b27d2c61026e357053d34f44e4007b1912e6e093e9e54e81368c05e626a476a712c838517575b34c64bef713f8", 0x98, 0x8, 0x0, 0x1, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x7fff, r1, &(0x7f0000000300)="134ff4ad5d8b5fe93f26a8e6ce51c217ce954c20b4b6a9acc60d750f6a22569ba3103e163797dbd344eacff2", 0x2c, 0x1, 0x0, 0x2, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0xff5, r0, &(0x7f0000000380)="03eb9c4f77ff2900e100138f3a04d8abbf5a0aff4728fcb16d4bf0052fd3dd031110af4f262034bd47100f63ca9400279fdb29889633d3906725f38617bb62500f47f863351ab364bae46f0562db3b87968f445a965beb71ab5182b5e05f88c0f6725ebd7bfe94e6d0c59eca27abe9141ed1e35682a191c6efd7aa75e747c7fa1fff04f20d373046d6d1080f9c9a793fc8c1db5ae7bcc8aadf3e7856a6f170e0106816122d6d7e4ef6a4d7e59371edba5a1c874bd40a0bda1161e47e8a1eca31e3e29312c17ac0d1f8b23821be", 0xcd, 0x7fffffffffffffff, 0x0, 0x3, r5}]) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)={0x20, 0x30, 0x2, "44fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000001c0)={0x1, 0x3, 0x3, &(0x7f0000000140)={0x8, "b1c57f58ec8e52ca3741ee71ba4f77417e9b12abbe574890f8865ae9b48a50e659"}}) syz_usb_connect(0x0, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904"], 0x0) 1.37209543s ago: executing program 0 (id=3812): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x1, 0x200, 0x10ac, 0x4, 0x7, 0x82, 0x4, 0x5, 0x1, 0x6, 0x7, 0x3ff, 0x1, 0x54}) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) 548.409081ms ago: executing program 1 (id=3813): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x4, 0x25dfdbff, {0x6, 0x0, 0x8100, 0x0, {}, {0x10, 0x8}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x9}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11}, {0x4, 0x1b}}]}]}, 0x50}}, 0x0) 0s ago: executing program 1 (id=3814): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000180)={0x1, 0x9, 0x4, 0x1, 0x5}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000030400000000fedbdf25000003", @ANYRES32=0x0, @ANYBLOB="10d40000b1eb502a200012800b00010067656e65766500001000028004"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/94, 0x5e}], 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) kernel console output (not intermixed with test programs): PROTO [ 1328.551998][T13070] usb 10-1: USB disconnect, device number 2 [ 1328.635820][T10113] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1328.647709][T10113] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1329.929742][T14392] team0: Port device bond0 removed [ 1329.953051][T14392] bridge_slave_0: left allmulticast mode [ 1329.960159][T14392] bridge_slave_0: left promiscuous mode [ 1329.966711][T14392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.194267][T14392] bridge_slave_1: left allmulticast mode [ 1330.200271][T14392] bridge_slave_1: left promiscuous mode [ 1330.208114][T14392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.266812][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2970'. [ 1330.381896][T14392] bond0: (slave bond_slave_0): Releasing backup interface [ 1330.449306][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2971'. [ 1330.497048][T14392] bond0: (slave bond_slave_1): Releasing backup interface [ 1330.601154][T14392] team0: Port device team_slave_0 removed [ 1330.686771][T14392] team0: Port device team_slave_1 removed [ 1330.699316][T14392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.707645][T14392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.736092][T14392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.744191][T14392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.284264][T14409] block nbd9: shutting down sockets [ 1334.873928][T10135] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1334.882733][T10135] Bluetooth: hci0: Injecting HCI hardware error event [ 1334.890752][T10135] Bluetooth: hci0: hardware error 0x00 [ 1335.623937][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.630863][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1335.731154][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1335.741605][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1335.752052][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1336.139843][T14446] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1336.153431][T14446] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1336.982728][T10135] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1337.446988][T14454] bridge_slave_0: left allmulticast mode [ 1337.452971][T14454] bridge_slave_0: left promiscuous mode [ 1337.459728][T14454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.547902][T14454] bridge_slave_1: left allmulticast mode [ 1337.554051][T14454] bridge_slave_1: left promiscuous mode [ 1337.561087][T14454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.596710][T14454] bond0: (slave bond_slave_0): Releasing backup interface [ 1337.632135][T14454] bond0: (slave bond_slave_1): Releasing backup interface [ 1337.751704][T14454] team0: Port device team_slave_0 removed [ 1337.845848][T14454] team0: Port device team_slave_1 removed [ 1337.857927][T14454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.866060][T14454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.974779][T14454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1337.982625][T14454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.266291][T10135] Bluetooth: hci4: command tx timeout [ 1338.298555][T14444] chnl_net:caif_netlink_parms(): no params data found [ 1338.999142][ T3950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.239625][ T3950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.465085][ T5870] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1339.495431][ T3950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.698827][ T3950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.716706][ T5870] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1339.759500][ T5870] usb 7-1: config 0 has no interfaces? [ 1339.801998][ T5870] usb 7-1: config 0 has no interfaces? [ 1339.832032][ T5870] usb 7-1: config 0 has no interfaces? [ 1339.882881][ T5870] usb 7-1: config 0 has no interfaces? [ 1339.924150][ T5870] usb 7-1: config 0 has no interfaces? [ 1339.953575][ T5870] usb 7-1: config 0 has no interfaces? [ 1339.980055][ T5870] usb 7-1: config 0 has no interfaces? [ 1340.114038][ T5870] usb 7-1: config 0 has no interfaces? [ 1340.179153][ T5870] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1340.188297][ T3950] bridge_slave_1: left allmulticast mode [ 1340.188764][ T5870] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1340.194737][ T3950] bridge_slave_1: left promiscuous mode [ 1340.202877][ T5870] usb 7-1: Product: syz [ 1340.209705][ T3950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.212902][ T5870] usb 7-1: Manufacturer: syz [ 1340.226527][ T5870] usb 7-1: SerialNumber: syz [ 1340.297848][T10135] Bluetooth: hci4: command tx timeout [ 1340.374716][ T3950] bridge_slave_0: left allmulticast mode [ 1340.380713][ T3950] bridge_slave_0: left promiscuous mode [ 1340.388035][ T3950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.535856][ T5870] usb 7-1: config 0 descriptor?? [ 1340.754655][ T5870] usb 7-1: USB disconnect, device number 4 [ 1341.384624][ T3950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.417123][ T3950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.461351][ T3950] bond0 (unregistering): Released all slaves [ 1341.729349][T14444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.737245][T14444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.746041][T14444] bridge_slave_0: entered allmulticast mode [ 1341.755025][T14444] bridge_slave_0: entered promiscuous mode [ 1342.249400][ T3950] hsr_slave_0: left promiscuous mode [ 1342.263535][ T3950] hsr_slave_1: left promiscuous mode [ 1342.271248][ T3950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.279159][ T3950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.336888][ T3950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1342.344895][ T3950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.365285][T10135] Bluetooth: hci4: command tx timeout [ 1342.459540][ T3950] veth1_macvtap: left promiscuous mode [ 1342.468663][ T3950] veth0_macvtap: left promiscuous mode [ 1342.474849][ T3950] veth1_vlan: left promiscuous mode [ 1342.480342][ T3950] veth0_vlan: left promiscuous mode [ 1343.527455][ T3950] team0 (unregistering): Port device team_slave_1 removed [ 1343.612502][ T3950] team0 (unregistering): Port device team_slave_0 removed [ 1343.949580][T14444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.960608][T14444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.970250][T14444] bridge_slave_1: entered allmulticast mode [ 1343.981427][T14444] bridge_slave_1: entered promiscuous mode [ 1344.141201][T14491] bridge_slave_0: left allmulticast mode [ 1344.147397][T14491] bridge_slave_0: left promiscuous mode [ 1344.154363][T14491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.224391][T14491] bridge_slave_1: left allmulticast mode [ 1344.230393][T14491] bridge_slave_1: left promiscuous mode [ 1344.238310][T14491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.405243][T14491] bond0: (slave bond_slave_0): Releasing backup interface [ 1344.450383][T10135] Bluetooth: hci4: command tx timeout [ 1344.487296][T14491] bond0: (slave bond_slave_1): Releasing backup interface [ 1344.750703][T14491] team0: Port device team_slave_0 removed [ 1344.789162][T14491] team0: Port device team_slave_1 removed [ 1344.799387][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.807150][T14491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.827035][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.834924][T14491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.350281][T14444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1345.455632][T14444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1345.876447][T14444] team0: Port device team_slave_0 added [ 1345.952037][T14444] team0: Port device team_slave_1 added [ 1346.202839][T14444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.210498][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.237570][T14444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.318876][T14444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.326651][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.353685][T14444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.694909][T14444] hsr_slave_0: entered promiscuous mode [ 1346.706054][T14444] hsr_slave_1: entered promiscuous mode [ 1346.715656][T14444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1346.725047][T14444] Cannot create hsr debugfs directory [ 1348.619276][T14542] binder: 14537:14542 ioctl c0306201 0 returned -14 [ 1348.621743][T14543] bridge_slave_0: left allmulticast mode [ 1348.635308][T14543] bridge_slave_0: left promiscuous mode [ 1348.643949][T14543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.688961][T14543] bridge_slave_1: left allmulticast mode [ 1348.695250][T14543] bridge_slave_1: left promiscuous mode [ 1348.702159][T14543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.786828][T14543] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 1348.848735][T14543] bond_slave_0: left promiscuous mode [ 1348.897129][T14543] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 1348.942208][T14543] bond_slave_1: left promiscuous mode [ 1349.032104][T14543] team0: Port device team_slave_0 removed [ 1349.074308][T14543] team0: Port device team_slave_1 removed [ 1349.087261][T14543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1349.107635][T14543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1349.115721][T14543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1349.240064][T14444] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1349.274220][T14548] fuse: Bad value for 'fd' [ 1349.307169][ T5869] s: Port: 1 Link DOWN [ 1349.327623][T14444] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1349.376936][T14444] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1349.425005][T14551] loop8: detected capacity change from 0 to 128 [ 1349.464528][T14444] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1349.491794][ T30] audit: type=1800 audit(1349.452:3122): pid=14549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3019" name="file2" dev="loop8" ino=1048654 res=0 errno=0 [ 1349.505482][T14546] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 1349.522480][T14546] FAT-fs (loop8): Filesystem has been set read-only [ 1349.529655][T14546] syz.8.3019: attempt to access beyond end of device [ 1349.529655][T14546] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1349.544003][T14546] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 1349.552153][T14546] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 1352.997260][T14582] loop6: detected capacity change from 0 to 128 [ 1353.226230][ T30] audit: type=1800 audit(1353.182:3123): pid=14582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3033" name="file2" dev="loop6" ino=1048655 res=0 errno=0 [ 1353.299451][T14581] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1353.308161][T14581] FAT-fs (loop6): Filesystem has been set read-only [ 1353.315295][T14581] syz.6.3033: attempt to access beyond end of device [ 1353.315295][T14581] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1353.329609][T14581] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1353.337875][T14581] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1353.698171][T14444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.744790][T14444] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.994022][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.001545][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.083497][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.091030][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.920446][T14444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.349785][T14444] veth0_vlan: entered promiscuous mode [ 1361.624473][T14444] veth1_vlan: entered promiscuous mode [ 1362.334498][T14444] veth0_macvtap: entered promiscuous mode [ 1362.452030][T14444] veth1_macvtap: entered promiscuous mode [ 1362.765843][T14444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.937270][T14444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1363.073105][T14444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.083860][T14444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.095556][T14444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.104912][T14444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.905995][T14689] binder: BINDER_SET_CONTEXT_MGR already set [ 1364.912388][T14689] binder: 14686:14689 ioctl 4018620d 200000000040 returned -16 [ 1366.995171][T14707] netlink: 'syz.9.3075': attribute type 1 has an invalid length. [ 1367.932909][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'. [ 1371.805322][T14725] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1371.814160][T10135] Bluetooth: hci4: command 0x0c1a tx timeout [ 1371.828995][T14725] Bluetooth: hci4: Opcode 0x0406 failed: -110 [ 1372.501740][T14758] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3090'. [ 1372.521914][T14725] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1372.866277][T10859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.874933][T10859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.169936][ T3950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.178779][ T3950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.883623][T10135] Bluetooth: hci4: command 0x0c1a tx timeout [ 1374.875198][ T5869] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1375.146198][ T5869] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1375.157869][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.170479][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1375.181176][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1375.519932][ T5869] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1375.529825][ T5869] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1375.538388][ T5869] usb 5-1: Manufacturer: syz [ 1375.550095][ T5869] usb 5-1: config 0 descriptor?? [ 1375.963513][T10135] Bluetooth: hci4: command 0x0c1a tx timeout [ 1376.058048][ T5869] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 1376.227186][ T5869] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 1376.349741][ T5869] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1376.472331][ T5869] usb 5-1: USB disconnect, device number 4 [ 1376.815540][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3100'. [ 1377.515623][T14446] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1377.527371][T14446] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1377.537265][T14446] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1377.555442][T14446] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1377.569668][T14446] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1377.786729][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 1379.207979][ T5869] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1379.363799][ T5869] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1379.647352][T10135] Bluetooth: hci3: command tx timeout [ 1379.916609][T14791] chnl_net:caif_netlink_parms(): no params data found [ 1380.630633][ T3758] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.881440][ T3758] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.115430][ T3758] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.388666][ T3758] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.732534][T10135] Bluetooth: hci3: command tx timeout [ 1382.904682][ T3758] $Hÿ (unregistering): Released all slaves [ 1383.081959][T14791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.090808][T14791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.099807][T14791] bridge_slave_0: entered allmulticast mode [ 1383.110937][T14791] bridge_slave_0: entered promiscuous mode [ 1383.352366][ T3758] IPVS: stopping master sync thread 9810 ... [ 1383.602837][T14791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.611321][T14791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.619279][T14791] bridge_slave_1: entered allmulticast mode [ 1383.627964][T14791] bridge_slave_1: entered promiscuous mode [ 1383.822723][T10135] Bluetooth: hci3: command tx timeout [ 1383.848920][T14791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.951375][T14791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1384.429679][T14791] team0: Port device team_slave_0 added [ 1384.534497][T14791] team0: Port device team_slave_1 added [ 1385.103063][T14791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.110635][T14791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1385.139128][T14791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1385.267317][ T3758] hsr_slave_1: left promiscuous mode [ 1385.349239][ T3758] veth1_macvtap: left promiscuous mode [ 1385.355378][ T3758] veth0_macvtap: left promiscuous mode [ 1385.361553][ T3758] veth1_vlan: left promiscuous mode [ 1385.369642][ T3758] veth0_vlan: left promiscuous mode [ 1386.024235][T10135] Bluetooth: hci3: command tx timeout [ 1386.556127][ T2999] smc: removing ib device s [ 1387.592615][T14791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.600353][T14791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.627241][T14791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1391.363641][T14791] hsr_slave_0: entered promiscuous mode [ 1391.374750][T14791] hsr_slave_1: entered promiscuous mode [ 1391.384318][T14791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1391.392200][T14791] Cannot create hsr debugfs directory [ 1392.041648][ T3758] IPVS: stop unused estimator thread 0... [ 1392.732715][T14912] loop6: detected capacity change from 0 to 7 [ 1392.773833][T14912] Dev loop6: unable to read RDB block 7 [ 1392.782215][T14912] loop6: AHDI p2 [ 1392.786517][T14912] loop6: partition table partially beyond EOD, truncated [ 1393.444896][T14920] fuse: Bad value for 'fd' [ 1393.473831][ T5869] Process accounting resumed [ 1393.648955][T14791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1393.688087][T14791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1393.767933][T14791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1393.859269][T14791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1395.695998][T14946] loop6: detected capacity change from 0 to 7 [ 1395.716671][T14946] Dev loop6: unable to read RDB block 7 [ 1395.722583][T14946] loop6: AHDI p2 [ 1395.726789][T14946] loop6: partition table partially beyond EOD, truncated [ 1395.917646][T14950] overlayfs: overlapping lowerdir path [ 1395.920211][T14791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.006727][T14953] fuse: Bad value for 'fd' [ 1396.036942][ T5869] Process accounting resumed [ 1396.127042][T14791] 8021q: adding VLAN 0 to HW filter on device team0 [ 1396.248716][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.256497][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.354788][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.362500][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.699981][T14961] 9pnet_fd: Insufficient options for proto=fd [ 1396.794916][ T8736] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1397.057327][ T8736] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1397.085375][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.092259][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1397.132775][ T8736] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1397.142629][ T8736] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.151558][ T8736] usb 10-1: Product: syz [ 1397.156350][ T8736] usb 10-1: Manufacturer: syz [ 1397.161323][ T8736] usb 10-1: SerialNumber: syz [ 1397.425865][ T8736] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1397.618019][ T5894] usb 10-1: USB disconnect, device number 3 [ 1397.645917][ T5894] usblp0: removed [ 1398.864458][T14986] bridge_slave_0: left allmulticast mode [ 1398.870481][T14986] bridge_slave_0: left promiscuous mode [ 1398.877561][T14986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.929259][T14986] bridge_slave_1: left allmulticast mode [ 1398.935406][T14986] bridge_slave_1: left promiscuous mode [ 1398.942288][T14986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.955552][T14985] loop6: detected capacity change from 0 to 7 [ 1399.019369][T14985] Dev loop6: unable to read RDB block 7 [ 1399.026155][T14985] loop6: AHDI p2 [ 1399.030085][T14985] loop6: partition table partially beyond EOD, truncated [ 1399.113551][T14986] bond0: (slave bond_slave_0): Releasing backup interface [ 1399.290159][T14986] bond0: (slave bond_slave_1): Releasing backup interface [ 1399.419691][T14986] team0: Port device team_slave_0 removed [ 1399.427331][T14990] overlayfs: overlapping lowerdir path [ 1399.519550][T14986] team0: Port device team_slave_1 removed [ 1399.533864][T14986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.541685][T14986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.581732][T14992] fuse: Bad value for 'fd' [ 1399.590991][ T8736] Process accounting resumed [ 1399.636998][T14995] 9pnet_fd: Insufficient options for proto=fd [ 1399.663413][T14986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.671406][T14986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1400.002079][T14997] binder: 14996:14997 ioctl c0306201 200000000040 returned -14 [ 1400.180089][T14791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1400.805511][T14791] veth0_vlan: entered promiscuous mode [ 1400.908611][T14791] veth1_vlan: entered promiscuous mode [ 1401.434236][T15006] could not allocate digest TFM handle sha512-arm64 [ 1401.476763][T14791] veth0_macvtap: entered promiscuous mode [ 1401.614348][T14791] veth1_macvtap: entered promiscuous mode [ 1401.851740][T14791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.037873][T15021] loop6: detected capacity change from 0 to 7 [ 1402.173009][T14791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.197205][T14791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.207379][T14791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.217294][T14791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.218588][T15021] Dev loop6: unable to read RDB block 7 [ 1402.226927][T14791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.232399][T15021] loop6: AHDI p2 [ 1402.245419][T15021] loop6: partition table partially beyond EOD, truncated [ 1402.579279][T15026] overlayfs: overlapping lowerdir path [ 1404.027857][T15039] binder: 15037:15039 ioctl c0306201 200000000040 returned -14 [ 1406.892905][T15055] could not allocate digest TFM handle sha512-arm64 [ 1407.398050][T15069] loop6: detected capacity change from 0 to 7 [ 1407.475130][T15069] Dev loop6: unable to read RDB block 7 [ 1407.481201][T15069] loop6: AHDI p2 [ 1407.485948][T15069] loop6: partition table partially beyond EOD, truncated [ 1407.570506][T15073] overlayfs: failed to resolve './file1/file0': -2 [ 1408.163964][T15076] binder: 15075:15076 ioctl c0306201 200000000040 returned -14 [ 1411.390674][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.399827][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.582942][T15115] overlayfs: failed to resolve './file1/file0': -2 [ 1411.711625][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.721304][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.762627][T15153] overlayfs: failed to resolve './file1/file0': -2 [ 1421.601139][T15201] netlink: 'syz.6.3227': attribute type 10 has an invalid length. [ 1421.946470][T15204] block nbd8: shutting down sockets [ 1424.389391][T15228] ALSA: mixer_oss: invalid index 40000 [ 1427.369511][T15244] bridge_slave_0: left allmulticast mode [ 1427.375685][T15244] bridge_slave_0: left promiscuous mode [ 1427.382682][T15244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.474641][T15243] netlink: 'syz.2.3241': attribute type 10 has an invalid length. [ 1427.636816][T15244] bridge_slave_1: left allmulticast mode [ 1427.643049][T15244] bridge_slave_1: left promiscuous mode [ 1427.650250][T15244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.855599][T15244] bond0: (slave bond_slave_0): Releasing backup interface [ 1427.986185][T15244] bond0: (slave bond_slave_1): Releasing backup interface [ 1428.141478][T15244] team0: Port device team_slave_0 removed [ 1428.249650][T15244] team0: Port device team_slave_1 removed [ 1428.261865][T15244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.269786][T15244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.355365][T15244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.364652][T15244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.389078][T15265] loop2: detected capacity change from 0 to 256 [ 1429.429104][T15265] exfat: Deprecated parameter 'utf8' [ 1429.436524][T15265] exfat: Deprecated parameter 'namecase' [ 1429.442516][T15265] exfat: Deprecated parameter 'utf8' [ 1429.606926][T15265] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1431.404970][T10135] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 1435.483665][T10135] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1435.492687][T10135] Bluetooth: hci4: Injecting HCI hardware error event [ 1435.501428][T10135] Bluetooth: hci4: hardware error 0x00 [ 1435.795630][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3259'. [ 1436.171091][T15316] binder: 15313:15316 ioctl c0306201 200000000040 returned -14 [ 1437.376963][T15333] loop8: detected capacity change from 0 to 512 [ 1437.432592][T15333] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1437.447332][T15333] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1437.501456][T15333] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1437.510765][T15333] System zones: 0-2, 18-18, 34-34 [ 1437.553278][T15333] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.3276: iget: bad i_size value: 360287970189639680 [ 1437.567996][T10135] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1437.596396][T15333] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.3276: couldn't read orphan inode 15 (err -117) [ 1437.626663][T15333] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1438.765067][T15353] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3276'. [ 1438.776421][T15353] unsupported nlmsg_type 40 [ 1438.886361][ T30] audit: type=1800 audit(1438.762:3124): pid=15353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3276" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1439.152924][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3281'. [ 1439.321553][T15355] binder: 15351:15355 ioctl c0306201 200000000040 returned -14 [ 1441.149560][T13070] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1441.198713][T13111] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.372382][T13070] usb 7-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1441.382486][T13070] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.394513][T15369] fuse: Bad value for 'fd' [ 1441.404123][ T5894] Process accounting resumed [ 1441.428646][T13070] usb 7-1: config 0 descriptor?? [ 1441.506299][T13070] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1441.517487][T13070] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1441.679322][T13070] usb 7-1: USB disconnect, device number 5 [ 1441.688770][T13070] ftdi_sio 7-1:0.0: device disconnected [ 1442.012780][T15380] fuse: Bad value for 'fd' [ 1442.080062][ T8736] Process accounting resumed [ 1442.370851][T15380] Process accounting resumed [ 1443.003538][T15386] binder: 15383:15386 ioctl c0306201 200000000040 returned -14 [ 1443.934137][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3295'. [ 1444.292030][T15392] hsr_slave_0 (unregistering): left promiscuous mode [ 1444.684143][T10135] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1444.693572][T10135] Bluetooth: hci3: Injecting HCI hardware error event [ 1444.702244][T10135] Bluetooth: hci3: hardware error 0x00 [ 1444.961814][T15398] overlayfs: missing 'lowerdir' [ 1445.626762][T15404] fuse: Bad value for 'fd' [ 1445.652060][ T8736] Process accounting resumed [ 1446.239714][T15416] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3307'. [ 1446.264378][T15413] @: renamed from vlan0 (while UP) [ 1446.521138][T15414] Process accounting resumed [ 1446.770846][T10135] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1446.842132][T15425] binder: 15421:15425 ioctl c0306201 200000000040 returned -22 [ 1447.739569][T15431] overlayfs: missing 'lowerdir' [ 1448.028583][T15427] loop9: detected capacity change from 0 to 256 [ 1448.153305][T15427] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1448.164567][T15427] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1448.424946][T15427] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1449.297216][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'. [ 1450.352129][T15435] hsr_slave_0 (unregistering): left promiscuous mode [ 1451.566564][T15444] overlayfs: missing 'lowerdir' [ 1452.072639][T15447] fuse: Bad value for 'fd' [ 1452.117977][ T5869] Process accounting resumed [ 1453.020520][T15456] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3322'. [ 1453.390735][T15454] Process accounting resumed [ 1454.488025][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3329'. [ 1454.748215][T15485] overlayfs: missing 'lowerdir' [ 1454.857970][T15483] loop4: detected capacity change from 0 to 512 [ 1454.972797][T15483] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.3330: casefold flag without casefold feature [ 1455.007845][T15483] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3330: couldn't read orphan inode 15 (err -117) [ 1455.038188][T15483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1456.705876][T15504] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3336'. [ 1458.062136][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3340'. [ 1458.473308][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1458.480071][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1458.510900][T14444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.732402][T15519] futex_wake_op: syz.4.3343 tries to shift op by 32; fix this program [ 1458.897437][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3344'. [ 1459.518672][T15523] hsr_slave_0 (unregistering): left promiscuous mode [ 1459.931355][T15529] ceph: No mds server is up or the cluster is laggy [ 1459.940544][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 1459.947198][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 1460.868638][T15532] loop8: detected capacity change from 0 to 512 [ 1460.950108][T15532] EXT4-fs: Ignoring removed mblk_io_submit option [ 1461.021894][T15532] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1461.088327][T15532] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 1464.199934][T15546] loop6: detected capacity change from 0 to 128 [ 1464.266823][T15547] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3349'. [ 1464.352869][T15551] loop8: detected capacity change from 0 to 128 [ 1464.411084][T15546] syz.6.3350: attempt to access beyond end of device [ 1464.411084][T15546] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1464.458000][T15546] syz.6.3350: attempt to access beyond end of device [ 1464.458000][T15546] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1464.486515][T15546] syz.6.3350: attempt to access beyond end of device [ 1464.486515][T15546] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1464.550974][T15551] syz.8.3352: attempt to access beyond end of device [ 1464.550974][T15551] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1464.553782][T15546] syz.6.3350: attempt to access beyond end of device [ 1464.553782][T15546] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 1464.601822][T15551] syz.8.3352: attempt to access beyond end of device [ 1464.601822][T15551] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1464.656614][T15551] syz.8.3352: attempt to access beyond end of device [ 1464.656614][T15551] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1464.672251][T15551] syz.8.3352: attempt to access beyond end of device [ 1464.672251][T15551] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 1464.686615][T15551] syz.8.3352: attempt to access beyond end of device [ 1464.686615][T15551] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1464.853427][T15551] syz.8.3352: attempt to access beyond end of device [ 1464.853427][T15551] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1465.008532][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3354'. [ 1465.719663][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3357'. [ 1466.215768][T15580] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3363'. [ 1466.356988][T15583] loop4: detected capacity change from 0 to 512 [ 1466.368427][T15583] EXT4-fs: Ignoring removed mblk_io_submit option [ 1466.430424][T15583] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1466.441728][T15583] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 1467.278400][T15585] loop2: detected capacity change from 0 to 256 [ 1467.937897][T15585] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8c82013b, utbl_chksum : 0xe619d30d) [ 1475.514883][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3376'. [ 1475.545105][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3377'. [ 1475.608421][T15612] hsr_slave_0 (unregistering): left promiscuous mode [ 1475.697345][T15617] binder_alloc: 15615: binder_alloc_buf, no vma [ 1481.430736][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3391'. [ 1481.475920][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3392'. [ 1481.487012][T15657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3392'. [ 1481.805427][T15660] binder_alloc: 15659: binder_alloc_buf, no vma [ 1488.658293][T13070] Process accounting resumed [ 1489.101246][T15677] binder: 15676:15677 ioctl c0306201 200000000040 returned -22 [ 1490.312707][T15690] binder_alloc: 15687: binder_alloc_buf, no vma [ 1491.092598][T14446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1491.102898][T14446] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1491.129977][T14446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1491.157117][T14446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1491.184804][T14446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1493.688212][T10135] Bluetooth: hci2: command tx timeout [ 1493.851642][ T5894] Process accounting resumed [ 1494.187670][T15715] netlink: 46 bytes leftover after parsing attributes in process `syz.6.3411'. [ 1495.737352][ T5894] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1495.785637][T14446] Bluetooth: hci2: command tx timeout [ 1497.097888][ T5894] usb 10-1: Using ep0 maxpacket: 16 [ 1497.803465][T14446] Bluetooth: hci2: command tx timeout [ 1498.137605][ T5894] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1498.179729][ T5894] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1498.187932][ T5894] usb 10-1: can't read configurations, error -71 [ 1499.883411][T14446] Bluetooth: hci2: command tx timeout [ 1501.044136][T15698] chnl_net:caif_netlink_parms(): no params data found [ 1502.033643][ T30] audit: type=1326 audit(1501.932:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.6.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9258e929 code=0x7ffc0000 [ 1502.057733][ T30] audit: type=1326 audit(1501.942:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.6.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9258e929 code=0x7ffc0000 [ 1502.080382][ T30] audit: type=1326 audit(1501.952:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.6.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9258e929 code=0x7ffc0000 [ 1502.102935][ T30] audit: type=1326 audit(1501.952:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.6.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9258e929 code=0x7ffc0000 [ 1502.125687][ T30] audit: type=1326 audit(1501.952:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.6.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9258e929 code=0x7ffc0000 [ 1502.149443][ T30] audit: type=1326 audit(1501.952:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.6.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9258e929 code=0x7ffc0000 [ 1502.171938][ T30] audit: type=1326 audit(1501.962:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.6.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9258e929 code=0x7ffc0000 [ 1502.194441][ T30] audit: type=1326 audit(1501.962:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.6.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9258e929 code=0x7ffc0000 [ 1502.217572][ T30] audit: type=1326 audit(1501.962:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.6.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e9258e929 code=0x7ffc0000 [ 1502.241102][ T30] audit: type=1326 audit(1501.962:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.6.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9258e929 code=0x7ffc0000 [ 1502.698869][T13070] Process accounting resumed [ 1502.746681][T15698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.757468][T15698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.765622][T15698] bridge_slave_0: entered allmulticast mode [ 1502.776023][T15698] bridge_slave_0: entered promiscuous mode [ 1502.855733][T15698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.865417][T15698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.873574][T15698] bridge_slave_1: entered allmulticast mode [ 1502.884067][T15698] bridge_slave_1: entered promiscuous mode [ 1503.066958][T15698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.107649][T15698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.279134][T15698] team0: Port device team_slave_0 added [ 1503.316091][T15698] team0: Port device team_slave_1 added [ 1503.606284][T15698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.613779][T15698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.640565][T15698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.760251][T15698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.768018][T15698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.795393][T15698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.060176][T15698] hsr_slave_0: entered promiscuous mode [ 1504.071299][T15698] hsr_slave_1: entered promiscuous mode [ 1504.080847][T15698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1504.089524][T15698] Cannot create hsr debugfs directory [ 1507.303957][T15698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1508.400157][T15698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1510.133220][T15773] loop6: detected capacity change from 0 to 128 [ 1513.414742][T15698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1513.418327][T15773] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1513.422011][T15773] EXT4-fs: failed to create workqueue [ 1513.437554][T15773] EXT4-fs (loop6): mount failed [ 1514.423555][T15698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1519.366880][ T5894] Process accounting resumed [ 1519.455783][T15698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.741101][T15698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.895240][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.902918][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.925398][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1519.932179][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1520.069489][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.077263][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.752188][T10135] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1520.764547][T10135] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1520.776242][T10135] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1520.808167][T10135] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1520.822238][T10135] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1522.475255][T15810] loop9: detected capacity change from 0 to 128 [ 1522.534103][T15810] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1522.627781][T15810] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1522.805168][T15791] chnl_net:caif_netlink_parms(): no params data found [ 1522.928430][T10135] Bluetooth: hci6: command tx timeout [ 1523.031930][T15698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.385133][T15810] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 1524.482323][T15698] veth0_vlan: entered promiscuous mode [ 1524.534790][T15698] veth1_vlan: entered promiscuous mode [ 1524.605482][T13070] Process accounting resumed [ 1525.015486][T10135] Bluetooth: hci6: command tx timeout [ 1526.392805][T13727] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1526.515721][T15698] veth0_macvtap: entered promiscuous mode [ 1526.663676][T15698] veth1_macvtap: entered promiscuous mode [ 1526.959496][T15698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.024423][T15833] binder: 15831:15833 ioctl c0306201 0 returned -14 [ 1527.080007][T15698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1527.100475][T10135] Bluetooth: hci6: command tx timeout [ 1527.130601][T15838] binder: 15831:15838 ioctl c0306201 0 returned -14 [ 1527.258044][T15698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.267500][T15698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.277567][T15698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.286963][T15698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.515458][T15791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.523276][T15791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.537447][T15791] bridge_slave_0: entered allmulticast mode [ 1527.548035][T15791] bridge_slave_0: entered promiscuous mode [ 1527.665967][T15791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.674193][T15791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.682144][T15791] bridge_slave_1: entered allmulticast mode [ 1527.694855][T15791] bridge_slave_1: entered promiscuous mode [ 1528.215993][T15791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.348572][T15791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.573638][T15851] binder: BINDER_SET_CONTEXT_MGR already set [ 1528.579913][T15851] binder: 15849:15851 ioctl 4018620d 200000000040 returned -16 [ 1528.767917][T15791] team0: Port device team_slave_0 added [ 1528.809389][T15856] lo speed is unknown, defaulting to 1000 [ 1528.816995][T15856] lo speed is unknown, defaulting to 1000 [ 1528.824459][T15856] lo speed is unknown, defaulting to 1000 [ 1528.868054][T15856] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1528.911410][T15856] lo speed is unknown, defaulting to 1000 [ 1528.920881][T15856] lo speed is unknown, defaulting to 1000 [ 1528.930417][T15856] lo speed is unknown, defaulting to 1000 [ 1528.941028][T15856] lo speed is unknown, defaulting to 1000 [ 1528.950621][T15856] lo speed is unknown, defaulting to 1000 [ 1528.959494][T15856] lo speed is unknown, defaulting to 1000 [ 1528.969039][T15856] lo speed is unknown, defaulting to 1000 [ 1528.994470][T15791] team0: Port device team_slave_1 added [ 1529.164652][T10135] Bluetooth: hci6: command tx timeout [ 1529.861450][T15791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.869039][T15791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.898976][T15791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.985356][T15860] lo speed is unknown, defaulting to 1000 [ 1530.122836][T15791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1530.139985][T15791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1530.169691][T15791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1530.279795][ T2999] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.561557][ T2999] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.979571][ T2999] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.308469][T15870] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 1531.318048][T15870] netdevsim netdevsim9: Falling back to sysfs fallback for: ./file0 [ 1531.356026][T15791] hsr_slave_0: entered promiscuous mode [ 1531.368690][T15791] hsr_slave_1: entered promiscuous mode [ 1531.379218][T15791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1531.387304][T15791] Cannot create hsr debugfs directory [ 1531.492613][ T2999] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.202466][T15888] binder: 15886:15888 ioctl c0306201 0 returned -14 [ 1532.577261][T15889] binder: 15886:15889 ioctl c0306201 0 returned -14 [ 1533.036778][ T2999] bond0 (unregistering): Released all slaves [ 1533.825240][T15895] binder: BINDER_SET_CONTEXT_MGR already set [ 1533.831832][T15895] binder: 15894:15895 ioctl 4018620d 200000000040 returned -16 [ 1535.589989][ T2999] hsr_slave_1: left promiscuous mode [ 1535.654940][ T2999] veth1_macvtap: left promiscuous mode [ 1535.660819][ T2999] veth0_macvtap: left promiscuous mode [ 1535.668487][ T2999] veth1_vlan: left promiscuous mode [ 1535.674394][ T2999] veth0_vlan: left promiscuous mode [ 1537.332265][T15910] loop4: detected capacity change from 0 to 512 [ 1537.342661][T15910] EXT4-fs: Ignoring removed bh option [ 1538.319591][T15910] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1539.640618][T15910] EXT4-fs (loop4): 1 truncate cleaned up [ 1539.649424][T15910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1541.535917][T15920] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 1541.545650][T15920] netdevsim netdevsim9: Falling back to sysfs fallback for: ./file0 [ 1541.685898][T15924] netlink: 'syz.6.3468': attribute type 27 has an invalid length. [ 1541.861461][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3468'. [ 1541.963690][T15929] loop6: detected capacity change from 0 to 128 [ 1542.116196][T15929] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1543.568558][T15924] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.578528][T15924] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.587950][T15924] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.597527][T15924] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.783654][T15924] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1543.793629][T15924] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1543.802977][T15924] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1543.812521][T15924] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1543.986229][T13070] lo speed is unknown, defaulting to 1000 [ 1543.992486][T13070] syz2: Port: 1 Link DOWN [ 1545.170069][T15791] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1545.197384][T10878] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1545.366928][T15791] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1545.470014][T15791] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1545.566835][T15791] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1547.326766][T15791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1547.661461][T15791] 8021q: adding VLAN 0 to HW filter on device team0 [ 1547.760353][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.768131][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1548.301008][ T3758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.308846][ T3758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1548.496137][T14444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1549.171392][T15957] siw: device registration error -23 [ 1549.472168][ T3950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.480498][ T3950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.835015][ T3950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.843540][ T3950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.631003][T15969] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 1550.640607][T15969] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 1552.453936][T15791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.515135][T14446] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1553.527333][T14446] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1553.553394][T14446] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1553.569887][T14446] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1553.582553][T14446] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1553.979099][T15987] lo speed is unknown, defaulting to 1000 [ 1555.644690][T14446] Bluetooth: hci1: command tx timeout [ 1555.884569][T15987] chnl_net:caif_netlink_parms(): no params data found [ 1555.951502][T16016] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1555.961005][T16016] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1556.182440][T16015] siw: device registration error -23 [ 1556.530839][T15791] veth0_vlan: entered promiscuous mode [ 1556.651268][T15791] veth1_vlan: entered promiscuous mode [ 1557.150757][T15791] veth0_macvtap: entered promiscuous mode [ 1557.324017][T15791] veth1_macvtap: entered promiscuous mode [ 1557.489356][ T1105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.629626][ T1105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.723513][T14446] Bluetooth: hci1: command tx timeout [ 1557.878116][ T1105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.090470][T15987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.098585][T15987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.106647][T15987] bridge_slave_0: entered allmulticast mode [ 1558.116984][T15987] bridge_slave_0: entered promiscuous mode [ 1558.179620][ T1105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.232633][T15987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.240562][T15987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.248618][T15987] bridge_slave_1: entered allmulticast mode [ 1558.263863][T15987] bridge_slave_1: entered promiscuous mode [ 1558.515292][T15987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1558.529704][T15791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1558.621181][T15791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1558.716255][T15987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1558.855871][T15791] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.865367][T15791] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.878788][T15791] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.888813][T15791] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.194770][ T1105] bridge_slave_1: left allmulticast mode [ 1559.200682][ T1105] bridge_slave_1: left promiscuous mode [ 1559.207249][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.474823][ T1105] bridge_slave_0: left allmulticast mode [ 1559.485111][ T1105] bridge_slave_0: left promiscuous mode [ 1559.491958][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.923718][T14446] Bluetooth: hci1: command tx timeout [ 1560.013455][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1560.045280][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1560.062275][ T1105] bond0 (unregistering): Released all slaves [ 1560.113938][T15987] team0: Port device team_slave_0 added [ 1560.183903][T15987] team0: Port device team_slave_1 added [ 1560.870999][T15987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.878634][T15987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.905707][T15987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.960389][T16054] siw: device registration error -23 [ 1561.059169][T16053] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 1561.070204][T16053] netdevsim netdevsim9: Falling back to sysfs fallback for: ./file0 [ 1561.236806][ T1105] hsr_slave_0: left promiscuous mode [ 1561.265312][ T1105] hsr_slave_1: left promiscuous mode [ 1561.274595][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1561.282270][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1561.297046][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1561.305506][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1561.879713][ T1105] veth1_macvtap: left promiscuous mode [ 1561.886135][ T1105] veth0_macvtap: left promiscuous mode [ 1561.892047][ T1105] veth1_vlan: left promiscuous mode [ 1561.897662][ T1105] veth0_vlan: left promiscuous mode [ 1561.963375][T14446] Bluetooth: hci1: command tx timeout [ 1562.159350][T16068] input: syz1 as /devices/virtual/input/input12 [ 1563.430050][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1563.551981][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1563.856177][T15987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1563.865011][T15987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1563.894499][T15987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1564.854781][T15987] hsr_slave_0: entered promiscuous mode [ 1564.865915][T15987] hsr_slave_1: entered promiscuous mode [ 1564.875456][T15987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1564.883444][T15987] Cannot create hsr debugfs directory [ 1565.020940][T16089] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3505'. [ 1565.095678][T16092] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3505'. [ 1568.729770][T15987] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1568.751985][T15987] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1568.861458][T15987] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1568.941188][T15987] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1569.099108][T16109] siw: device registration error -23 [ 1569.616653][T16117] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 1569.627438][T16117] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 1570.026378][T16124] binder: BINDER_SET_CONTEXT_MGR already set [ 1570.033975][T16124] binder: 16122:16124 ioctl 4018620d 200000000040 returned -16 [ 1570.538079][T16129] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3515'. [ 1570.641497][T16129] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3515'. [ 1570.839177][T15987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1571.046197][T15987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.145927][ T3950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.153694][ T3950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1571.245182][ T3950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.252865][ T3950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1572.550641][T10859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.559040][T10859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.879074][ T3758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.888183][ T3758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.233726][T13070] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1573.437153][T13070] usb 10-1: no configurations [ 1573.442173][T13070] usb 10-1: can't read configurations, error -22 [ 1573.487412][T15987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1573.613950][T13070] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1573.829931][T13070] usb 10-1: no configurations [ 1573.835417][T13070] usb 10-1: can't read configurations, error -22 [ 1573.903789][T13070] usb usb10-port1: attempt power cycle [ 1573.971797][T15987] veth0_vlan: entered promiscuous mode [ 1574.058040][T16156] lo speed is unknown, defaulting to 1000 [ 1574.198430][T15987] veth1_vlan: entered promiscuous mode [ 1574.579874][T13070] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1574.712139][T13070] usb 10-1: no configurations [ 1574.718022][T13070] usb 10-1: can't read configurations, error -22 [ 1575.003575][T13070] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1575.053738][T13070] usb 10-1: no configurations [ 1575.059001][T13070] usb 10-1: can't read configurations, error -22 [ 1575.096147][T13070] usb usb10-port1: unable to enumerate USB device [ 1575.147350][T15987] veth0_macvtap: entered promiscuous mode [ 1575.169360][T16164] binder: BINDER_SET_CONTEXT_MGR already set [ 1575.178509][T16164] binder: 16163:16164 ioctl 4018620d 200000000040 returned -16 [ 1575.459810][T15987] veth1_macvtap: entered promiscuous mode [ 1575.750125][T15987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1575.842445][T16166] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1575.852668][T16166] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1575.857930][T15987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1575.991509][T15987] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.002184][T15987] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.011390][T15987] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.020699][T15987] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.052021][T16170] syz.6.3526: attempt to access beyond end of device [ 1576.052021][T16170] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1576.058606][T16172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3525'. [ 1576.067848][T16170] syz.6.3526: attempt to access beyond end of device [ 1576.067848][T16170] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1576.085326][T16172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3525'. [ 1576.094424][T16170] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1576.114450][T16170] syz.6.3526: attempt to access beyond end of device [ 1576.114450][T16170] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1576.129013][T16170] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1576.194908][T16170] syz.6.3526: attempt to access beyond end of device [ 1576.194908][T16170] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1576.214003][T16170] syz.6.3526: attempt to access beyond end of device [ 1576.214003][T16170] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1576.229248][T16170] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1576.240417][T16170] syz.6.3526: attempt to access beyond end of device [ 1576.240417][T16170] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1576.255069][T16170] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1576.302844][T16170] syz.6.3526: attempt to access beyond end of device [ 1576.302844][T16170] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1576.317472][T16170] syz.6.3526: attempt to access beyond end of device [ 1576.317472][T16170] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1576.331028][T16170] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1576.341306][T16170] syz.6.3526: attempt to access beyond end of device [ 1576.341306][T16170] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1576.354825][T16170] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1576.410448][T16170] syz.6.3526: attempt to access beyond end of device [ 1576.410448][T16170] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1576.425215][T16170] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1576.435530][T16170] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1576.445737][T16170] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1577.581781][T16185] loop4: detected capacity change from 0 to 256 [ 1577.822742][T16185] FAT-fs (loop4): Directory bread(block 64) failed [ 1577.830698][T16185] FAT-fs (loop4): Directory bread(block 65) failed [ 1577.838134][T16185] FAT-fs (loop4): Directory bread(block 66) failed [ 1577.845137][T16185] FAT-fs (loop4): Directory bread(block 67) failed [ 1577.852155][T16185] FAT-fs (loop4): Directory bread(block 68) failed [ 1577.859102][T16185] FAT-fs (loop4): Directory bread(block 69) failed [ 1577.866318][T16185] FAT-fs (loop4): Directory bread(block 70) failed [ 1577.873340][T16185] FAT-fs (loop4): Directory bread(block 71) failed [ 1577.880329][T16185] FAT-fs (loop4): Directory bread(block 72) failed [ 1577.887330][T16185] FAT-fs (loop4): Directory bread(block 73) failed [ 1578.254751][T16196] binder: BINDER_SET_CONTEXT_MGR already set [ 1578.261034][T16196] binder: 16195:16196 ioctl 4018620d 200000000040 returned -16 [ 1579.429298][T16205] loop5: detected capacity change from 0 to 512 [ 1580.325101][T16205] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1581.298923][T16205] EXT4-fs (loop5): 1 truncate cleaned up [ 1581.307701][T16205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1581.349421][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1581.356694][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1584.939095][T16215] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 1584.948611][T16215] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 1587.972293][T15791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1588.180601][T16222] bio_check_eod: 2 callbacks suppressed [ 1588.180690][T16222] syz.4.3539: attempt to access beyond end of device [ 1588.180690][T16222] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1588.200774][T16222] syz.4.3539: attempt to access beyond end of device [ 1588.200774][T16222] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1588.214267][T16222] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1588.224569][T16222] syz.4.3539: attempt to access beyond end of device [ 1588.224569][T16222] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1588.238257][T16222] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1588.348441][T16222] syz.4.3539: attempt to access beyond end of device [ 1588.348441][T16222] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1588.366522][T16222] syz.4.3539: attempt to access beyond end of device [ 1588.366522][T16222] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1588.383366][T16222] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1588.394846][T16222] syz.4.3539: attempt to access beyond end of device [ 1588.394846][T16222] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1588.408443][T16222] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1588.940395][T16222] syz.4.3539: attempt to access beyond end of device [ 1588.940395][T16222] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1588.954000][T16222] syz.4.3539: attempt to access beyond end of device [ 1588.954000][T16222] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1588.967373][T16222] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1588.979857][T16222] syz.4.3539: attempt to access beyond end of device [ 1588.979857][T16222] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1588.994201][T16222] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1589.006777][T16222] syz.4.3539: attempt to access beyond end of device [ 1589.006777][T16222] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1589.020663][T16222] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1589.030622][T16222] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1589.040592][T16222] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1589.831829][T16235] loop9: detected capacity change from 0 to 256 [ 1589.842069][T16235] exfat: Unknown parameter '01777777777777777777777' [ 1592.536054][T16243] lo speed is unknown, defaulting to 1000 [ 1596.104292][T16251] loop6: detected capacity change from 0 to 512 [ 1597.063396][T16251] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1597.525235][T16251] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1597.525572][T16251] EXT4-fs: failed to create workqueue [ 1597.541430][T16251] EXT4-fs (loop6): mount failed [ 1602.236194][T16257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3547'. [ 1602.297602][T16260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3547'. [ 1603.825675][ T8736] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1604.072722][ T8736] usb 6-1: no configurations [ 1604.077974][ T8736] usb 6-1: can't read configurations, error -22 [ 1604.313806][ T8736] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1604.386545][T16268] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1604.396089][T16268] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1604.675496][ T8736] usb 6-1: no configurations [ 1604.680422][ T8736] usb 6-1: can't read configurations, error -22 [ 1604.758647][ T8736] usb usb6-port1: attempt power cycle [ 1605.163606][ T8736] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1605.985368][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.994026][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.022714][T16274] siw: device registration error -23 [ 1606.286122][ T8736] usb 6-1: device descriptor read/8, error -71 [ 1606.358544][T16276] bio_check_eod: 2 callbacks suppressed [ 1606.358632][T16276] syz.6.3552: attempt to access beyond end of device [ 1606.358632][T16276] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1606.378846][T16276] syz.6.3552: attempt to access beyond end of device [ 1606.378846][T16276] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1606.392832][ T3758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.392940][ T3758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.410406][T16276] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1606.420933][T16276] syz.6.3552: attempt to access beyond end of device [ 1606.420933][T16276] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1606.434376][T16276] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1606.495301][T16276] syz.6.3552: attempt to access beyond end of device [ 1606.495301][T16276] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1606.509147][T16276] syz.6.3552: attempt to access beyond end of device [ 1606.509147][T16276] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1606.522713][T16276] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1606.533933][T16276] syz.6.3552: attempt to access beyond end of device [ 1606.533933][T16276] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1606.547499][T16276] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1606.676569][T16276] syz.6.3552: attempt to access beyond end of device [ 1606.676569][T16276] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1606.696241][T16276] syz.6.3552: attempt to access beyond end of device [ 1606.696241][T16276] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1606.711100][T16276] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1606.721175][T16276] syz.6.3552: attempt to access beyond end of device [ 1606.721175][T16276] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1606.734520][T16276] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1606.822439][T16276] syz.6.3552: attempt to access beyond end of device [ 1606.822439][T16276] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1606.836218][T16276] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1606.846468][T16276] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1606.856387][T16276] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1608.350174][T16287] lo speed is unknown, defaulting to 1000 [ 1608.826345][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1609.000199][T16290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1611.777099][T16300] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3559'. [ 1611.805326][T16300] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3559'. [ 1613.817744][T16304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3560'. [ 1613.830272][T16304] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3560'. [ 1614.851925][T16308] futex_wake_op: syz.5.3561 tries to shift op by 32; fix this program [ 1615.236609][T16312] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 1615.247594][T16312] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 1615.443627][T13070] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1615.606488][T13070] usb 2-1: no configurations [ 1615.611813][T13070] usb 2-1: can't read configurations, error -22 [ 1615.804570][T13070] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1615.997311][T13070] usb 2-1: no configurations [ 1616.002486][T13070] usb 2-1: can't read configurations, error -22 [ 1616.067868][T13070] usb usb2-port1: attempt power cycle [ 1616.458269][T13070] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1616.527820][T13070] usb 2-1: no configurations [ 1616.532765][T13070] usb 2-1: can't read configurations, error -22 [ 1616.702267][T16322] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3567'. [ 1616.713894][T13070] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1616.766225][T13070] usb 2-1: no configurations [ 1616.771427][T13070] usb 2-1: can't read configurations, error -22 [ 1616.804286][T13070] usb usb2-port1: unable to enumerate USB device [ 1617.408088][T16329] lo speed is unknown, defaulting to 1000 [ 1617.613603][T16332] loop4: detected capacity change from 0 to 256 [ 1617.679793][T16332] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1617.691325][T16332] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1617.717028][T16324] siw: device registration error -23 [ 1617.889263][T16332] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1619.407485][T16344] futex_wake_op: syz.6.3574 tries to shift op by 32; fix this program [ 1619.460377][T16343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3573'. [ 1619.518494][T16347] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3573'. [ 1619.996745][T16349] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 1620.007459][T16349] netdevsim netdevsim9: Falling back to sysfs fallback for: ./file0 [ 1620.274734][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3579'. [ 1622.587180][ T8736] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1622.693636][T13070] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1622.769579][ T8736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.782149][ T8736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.793904][ T8736] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1622.803455][ T8736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.856657][T13070] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1622.874823][T13070] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1622.883437][T13070] usb 10-1: can't read configurations, error -61 [ 1622.896372][ T8736] usb 5-1: config 0 descriptor?? [ 1623.104197][T13070] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1623.129657][T16385] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3588'. [ 1623.161731][T16385] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3588'. [ 1623.285730][T13070] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1623.346343][T13070] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1623.354744][T13070] usb 10-1: can't read configurations, error -61 [ 1623.404055][T13070] usb usb10-port1: attempt power cycle [ 1624.142584][T16389] futex_wake_op: syz.6.3590 tries to shift op by 32; fix this program [ 1624.364629][T13070] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1624.451663][T13070] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1626.618883][T13070] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1626.628238][T13070] usb 10-1: can't read configurations, error -71 [ 1628.099169][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3592'. [ 1628.465458][T16400] loop6: detected capacity change from 0 to 512 [ 1628.528923][T16400] EXT4-fs: Ignoring removed mblk_io_submit option [ 1628.536170][T16400] EXT4-fs: Ignoring removed bh option [ 1628.538775][ T8736] usbhid 5-1:0.0: can't add hid device: -32 [ 1628.548606][ T8736] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1628.658577][T16400] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1628.756047][T16402] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1628.765639][T16402] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1628.813994][T16400] EXT4-fs (loop6): 1 truncate cleaned up [ 1628.822656][T16400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1629.105099][ T8736] usb 5-1: USB disconnect, device number 5 [ 1629.608456][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3594'. [ 1629.757295][T16419] siw: device registration error -23 [ 1631.282684][T16425] loop4: detected capacity change from 0 to 1024 [ 1631.405912][T16425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1631.898783][T14444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1632.123525][ T3069] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1632.163388][T13070] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1632.198462][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1632.198556][ T30] audit: type=1326 audit(1632.152:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16436 comm="syz.9.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f260972ab19 code=0x7ffc0000 [ 1632.227609][ T30] audit: type=1326 audit(1632.162:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16436 comm="syz.9.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f260972ab19 code=0x7ffc0000 [ 1632.249842][ T30] audit: type=1326 audit(1632.162:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16436 comm="syz.9.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f260972ab19 code=0x7ffc0000 [ 1632.272013][ T30] audit: type=1326 audit(1632.162:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16436 comm="syz.9.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260978e929 code=0x7ffc0000 [ 1632.297504][ T30] audit: type=1326 audit(1632.162:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16436 comm="syz.9.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260978e929 code=0x7ffc0000 [ 1632.415884][ T3069] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1632.429393][T13070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.440953][T13070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.452321][T13070] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1632.462452][T13070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.500078][ T30] audit: type=1326 audit(1632.282:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16436 comm="syz.9.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260978e929 code=0x7ffc0000 [ 1632.522789][ T30] audit: type=1326 audit(1632.282:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16436 comm="syz.9.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f260972ab19 code=0x7ffc0000 [ 1632.555543][ T30] audit: type=1326 audit(1632.292:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16436 comm="syz.9.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f260972ab19 code=0x7ffc0000 [ 1632.577820][ T30] audit: type=1326 audit(1632.292:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16436 comm="syz.9.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260978e929 code=0x7ffc0000 [ 1632.600589][ T30] audit: type=1326 audit(1632.292:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16436 comm="syz.9.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f260972ab19 code=0x7ffc0000 [ 1632.633275][T13070] usb 2-1: config 0 descriptor?? [ 1632.760189][ T3069] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1632.768788][ T3069] usb 6-1: can't read configurations, error -61 [ 1633.005281][ T3069] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1633.205425][T13070] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 1633.227811][ T3069] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1633.290423][ T3069] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1633.299738][ T3069] usb 6-1: can't read configurations, error -61 [ 1633.390640][ T3069] usb usb6-port1: attempt power cycle [ 1633.464385][T16442] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3606'. [ 1633.776265][ T3069] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1633.832944][ T3069] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1634.648875][T13070] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 1634.657069][T13070] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 1634.662897][T10878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1634.692987][T13070] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -71 [ 1634.994515][T13070] usb 2-1: USB disconnect, device number 6 [ 1635.146876][T16444] ALSA: mixer_oss: invalid index 40000 [ 1635.317120][ T3069] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1635.325394][ T3069] usb 6-1: can't read configurations, error -71 [ 1636.198717][T16459] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1636.208554][T16459] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1637.186204][T16465] siw: device registration error -23 [ 1637.474543][T16471] netlink: 'syz.1.3614': attribute type 27 has an invalid length. [ 1638.310558][T16471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.321305][T16471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.711071][T16471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1638.746524][T16471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1639.558896][T16471] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.568622][T16471] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.578250][T16471] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.588004][T16471] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.937222][T16485] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3619'. [ 1640.387456][T16474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1640.403866][T16474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1640.767638][T16492] loop9: detected capacity change from 0 to 512 [ 1640.815154][T16492] EXT4-fs: Ignoring removed i_version option [ 1640.896977][T16474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1640.958208][T16492] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1641.102976][T16490] bridge_slave_0: left allmulticast mode [ 1641.109261][T16490] bridge_slave_0: left promiscuous mode [ 1641.116305][T16490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.500478][T16490] bridge_slave_1: left allmulticast mode [ 1641.508867][T16490] bridge_slave_1: left promiscuous mode [ 1641.516663][T16490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.695089][T16490] bond0: (slave bond_slave_0): Releasing backup interface [ 1641.776285][T16490] bond0: (slave bond_slave_1): Releasing backup interface [ 1641.875846][T13727] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1641.912332][T16490] team0: Port device team_slave_0 removed [ 1641.998571][T16490] team0: Port device team_slave_1 removed [ 1642.010666][T16490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1642.020632][T16490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1642.093593][T16490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1642.101455][T16490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1642.786821][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1642.793715][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1643.038708][T16511] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 1643.050059][T16511] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 1644.167063][T16518] siw: device registration error -23 [ 1644.854109][T16506] Bluetooth: hci6: command 0x0406 tx timeout [ 1645.218672][T16521] ALSA: mixer_oss: invalid index 40000 [ 1647.793759][T13070] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1648.056302][T13070] usb 7-1: Using ep0 maxpacket: 16 [ 1648.113885][T13070] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1648.124186][T13070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.132515][T13070] usb 7-1: Product: syz [ 1648.137130][T13070] usb 7-1: Manufacturer: syz [ 1648.142015][T13070] usb 7-1: SerialNumber: syz [ 1648.243562][T13070] usb 7-1: config 0 descriptor?? [ 1648.283470][T13070] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1648.293439][T13070] usb 7-1: Detected FT232H [ 1648.452933][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3636'. [ 1648.515960][T13070] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1648.645429][T16542] tmpfs: Unknown parameter '' [ 1649.264763][T13070] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1649.465678][T13070] usb 7-1: USB disconnect, device number 6 [ 1649.562808][T13070] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1649.574011][T13070] ftdi_sio 7-1:0.0: device disconnected [ 1650.530944][T16557] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1650.540828][T16557] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1653.425482][T16564] lo speed is unknown, defaulting to 1000 [ 1655.134531][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1655.539015][T16506] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1655.591859][T16506] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1655.615014][T16506] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1655.658552][T16506] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1655.684821][T16506] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1655.707994][T16594] loop6: detected capacity change from 0 to 512 [ 1655.820185][T16594] EXT4-fs: Ignoring removed mblk_io_submit option [ 1655.827445][T16594] EXT4-fs: Ignoring removed bh option [ 1655.909077][T16588] lo speed is unknown, defaulting to 1000 [ 1656.073643][T16594] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1656.299500][T16594] EXT4-fs (loop6): 1 truncate cleaned up [ 1656.314468][T16594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1657.132476][T16604] netlink: 'syz.6.3652': attribute type 27 has an invalid length. [ 1657.851568][T14446] Bluetooth: hci2: command tx timeout [ 1658.198741][T16606] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1658.208786][T16606] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1659.224671][T16588] chnl_net:caif_netlink_parms(): no params data found [ 1659.913688][T14446] Bluetooth: hci2: command tx timeout [ 1662.054672][T14446] Bluetooth: hci2: command tx timeout [ 1663.728235][T16588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.736111][T16588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.749330][T16588] bridge_slave_0: entered allmulticast mode [ 1663.759821][T16588] bridge_slave_0: entered promiscuous mode [ 1663.801381][T16588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.810155][T16588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.818440][T16588] bridge_slave_1: entered allmulticast mode [ 1663.831265][T16588] bridge_slave_1: entered promiscuous mode [ 1663.878841][T10878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1664.126849][T14446] Bluetooth: hci2: command tx timeout [ 1664.418117][T16588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.517550][T16588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.570455][T16639] binder: 16638:16639 ioctl 4018620d 0 returned -22 [ 1664.989999][T16588] team0: Port device team_slave_0 added [ 1665.128308][T16588] team0: Port device team_slave_1 added [ 1665.652126][ T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.491789][T16651] overlayfs: failed to resolve './file2': -2 [ 1667.860882][T16588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.871500][T16588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1667.898618][T16588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1668.708416][ T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.631561][T16588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1669.640285][T16588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1669.670016][T16588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1669.785944][ T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.086311][ T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.899586][T16588] hsr_slave_0: entered promiscuous mode [ 1670.911041][T16588] hsr_slave_1: entered promiscuous mode [ 1670.920911][T16588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1670.929075][T16588] Cannot create hsr debugfs directory [ 1671.931704][ T14] bond0 (unregistering): Released all slaves [ 1672.079512][T16668] lo speed is unknown, defaulting to 1000 [ 1672.540357][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3675'. [ 1673.208755][ T14] hsr_slave_1: left promiscuous mode [ 1673.259601][ T14] veth1_macvtap: left promiscuous mode [ 1673.267373][ T14] veth0_macvtap: left promiscuous mode [ 1673.273618][ T14] veth1_vlan: left promiscuous mode [ 1673.279268][ T14] veth0_vlan: left promiscuous mode [ 1673.715577][T16699] loop9: detected capacity change from 0 to 512 [ 1673.749641][T16699] EXT4-fs: Ignoring removed mblk_io_submit option [ 1673.756973][T16699] EXT4-fs: Ignoring removed bh option [ 1673.807830][T16699] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1674.025446][T16699] EXT4-fs (loop9): 1 truncate cleaned up [ 1674.034049][T16699] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1674.451059][T16706] netlink: 'syz.9.3680': attribute type 27 has an invalid length. [ 1674.930508][T16708] loop5: detected capacity change from 0 to 2048 [ 1674.993671][ T5894] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1675.127291][T16708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1675.217567][T16708] fs-verity: sha512 using implementation "sha512-generic" [ 1675.225192][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 1675.225281][ T30] audit: type=1800 audit(1675.172:3253): pid=16708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3681" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 1675.258456][ T5894] usb 7-1: config index 0 descriptor too short (expected 63524, got 36) [ 1675.267584][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1675.334622][ T5894] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1675.344609][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.352956][ T5894] usb 7-1: Product: syz [ 1675.357649][ T5894] usb 7-1: Manufacturer: syz [ 1675.362551][ T5894] usb 7-1: SerialNumber: syz [ 1675.567336][T16708] fs-verity (loop5, inode 13): Error -4 building Merkle tree [ 1675.602483][ T30] audit: type=1800 audit(1675.562:3254): pid=16711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3681" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 1675.650301][ T5894] usb 7-1: config 0 descriptor?? [ 1675.702038][ T5894] usb 7-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1675.871627][T16706] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.881404][T16706] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.891086][T16706] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.900699][T16706] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.955124][T15791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.242309][T16705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.257703][T16705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1676.284724][T16705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1676.495013][ T5894] usb 7-1: USB disconnect, device number 7 [ 1677.067836][T16588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1677.123758][T16588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1677.227204][T16588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1677.332768][T16588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1677.387641][T13727] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1677.681655][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3687'. [ 1679.504968][T16588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.395389][T16506] Bluetooth: hci1: command 0x0406 tx timeout [ 1681.847943][T16588] 8021q: adding VLAN 0 to HW filter on device team0 [ 1681.969239][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.977096][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.142181][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.149946][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1683.167481][T16742] overlayfs: failed to resolve './file0': -2 [ 1684.335933][T16745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3694'. [ 1688.822510][T16758] pim6reg1: entered promiscuous mode [ 1688.828415][T16758] pim6reg1: entered allmulticast mode [ 1693.663881][T16588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1694.616456][T16588] veth0_vlan: entered promiscuous mode [ 1694.751127][T16778] netlink: 'syz.1.3702': attribute type 27 has an invalid length. [ 1695.562484][T16779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.579292][T16779] 8021q: adding VLAN 0 to HW filter on device team0 [ 1695.904394][T16779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1695.948335][T16588] veth1_vlan: entered promiscuous mode [ 1696.290389][T16789] netlink: 'syz.5.3705': attribute type 1 has an invalid length. [ 1696.414216][T16789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1696.772548][T16792] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1696.802515][T16786] lo speed is unknown, defaulting to 1000 [ 1696.893418][T16789] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1696.937002][T16793] vlan2: entered allmulticast mode [ 1696.942453][T16793] bond1: entered allmulticast mode [ 1696.955366][T16793] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1697.226934][T16588] veth0_macvtap: entered promiscuous mode [ 1697.455059][T16588] veth1_macvtap: entered promiscuous mode [ 1697.680287][T16588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1697.750470][T16588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1697.829641][T16588] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.840828][T16588] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.850119][T16588] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.859344][T16588] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.661099][T16802] loop5: detected capacity change from 0 to 512 [ 1698.718244][T16802] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1698.771273][T16802] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.3710: corrupted in-inode xattr: bad e_name length [ 1698.806011][T16802] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3710: couldn't read orphan inode 15 (err -117) [ 1698.844706][T16802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1702.128953][T16810] bridge_slave_0: left allmulticast mode [ 1702.134978][T16810] bridge_slave_0: left promiscuous mode [ 1702.141429][T16810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.156451][T16810] bridge_slave_1: left allmulticast mode [ 1702.162411][T16810] bridge_slave_1: left promiscuous mode [ 1702.164302][T16815] netlink: 'syz.1.3709': attribute type 10 has an invalid length. [ 1702.169305][T16810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.194951][T16810] bond0: (slave bond_slave_0): Releasing backup interface [ 1702.218671][T16810] bond0: (slave bond_slave_1): Releasing backup interface [ 1702.220112][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3709'. [ 1702.271891][T16810] team0: Port device team_slave_0 removed [ 1702.289161][T16810] team0: Port device team_slave_1 removed [ 1702.299618][T16810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.310653][T16810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1702.364292][T16815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1702.376725][T16815] team0: Port device bond0 added [ 1702.463993][T16816] team0 (unregistering): Port device bond0 removed [ 1704.246243][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1704.253411][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1704.963865][T16839] lo speed is unknown, defaulting to 1000 [ 1706.125508][T16843] veth0_vlan: entered allmulticast mode [ 1706.170107][T16843] ªªªªªª: renamed from vlan0 [ 1708.128395][ T3950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1708.137274][ T3950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1708.328413][T16861] netlink: 'syz.9.3724': attribute type 10 has an invalid length. [ 1708.346533][T16861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1708.357176][T16861] team0: Port device bond0 added [ 1708.371414][T16861] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3724'. [ 1708.409616][T16861] team0 (unregistering): Port device bond0 removed [ 1708.460191][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1708.468805][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1709.421413][T16868] siw: device registration error -23 [ 1711.758085][T16900] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1711.767758][T16900] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1712.012581][T16906] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3740'. [ 1712.042009][T16906] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3740'. [ 1712.330416][T16911] syz.1.3742: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1712.346686][T16911] CPU: 0 UID: 0 PID: 16911 Comm: syz.1.3742 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(undef) [ 1712.346869][T16911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1712.346977][T16911] Call Trace: [ 1712.347036][T16911] [ 1712.347103][T16911] __dump_stack+0x26/0x30 [ 1712.347318][T16911] dump_stack_lvl+0x1df/0x270 [ 1712.347528][T16911] dump_stack+0x1e/0x25 [ 1712.347711][T16911] warn_alloc+0x470/0x690 [ 1712.347950][T16911] ? kmsan_get_metadata+0xfb/0x160 [ 1712.348199][T16911] __vmalloc_node_range_noprof+0x133/0x2360 [ 1712.348421][T16911] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1712.348685][T16911] ? should_fail_ex+0x45/0x8a0 [ 1712.348884][T16911] ? kmsan_get_metadata+0xfb/0x160 [ 1712.349111][T16911] ? kmsan_get_metadata+0xfb/0x160 [ 1712.349328][T16911] ? kmsan_get_metadata+0xfb/0x160 [ 1712.349549][T16911] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1712.349787][T16911] ? kmsan_get_metadata+0xfb/0x160 [ 1712.350127][T16911] vmalloc_user_noprof+0xce/0x140 [ 1712.350335][T16911] ? xskq_create+0x11d/0x290 [ 1712.350609][T16911] xskq_create+0x11d/0x290 [ 1712.350814][T16911] xsk_init_queue+0xfd/0x1d0 [ 1712.351006][T16911] xsk_setsockopt+0x63d/0xc30 [ 1712.351225][T16911] do_sock_setsockopt+0x4dc/0x820 [ 1712.351452][T16911] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1712.351647][T16911] __x64_sys_setsockopt+0x2ad/0x4a0 [ 1712.351863][T16911] x64_sys_call+0x36f7/0x3db0 [ 1712.352090][T16911] do_syscall_64+0xd9/0x210 [ 1712.352288][T16911] ? irqentry_exit+0x16/0x60 [ 1712.352456][T16911] ? clear_bhb_loop+0x40/0x90 [ 1712.352634][T16911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.352812][T16911] RIP: 0033:0x7fd8f0f8e929 [ 1712.352944][T16911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1712.353096][T16911] RSP: 002b:00007fd8f1e31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1712.353253][T16911] RAX: ffffffffffffffda RBX: 00007fd8f11b5fa0 RCX: 00007fd8f0f8e929 [ 1712.353373][T16911] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 1712.353471][T16911] RBP: 00007fd8f1010b39 R08: 0000000000000004 R09: 0000000000000000 [ 1712.353578][T16911] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1712.353683][T16911] R13: 0000000000000000 R14: 00007fd8f11b5fa0 R15: 00007fff106921d8 [ 1712.353833][T16911] [ 1712.597104][T16911] Mem-Info: [ 1712.600497][T16911] active_anon:4084 inactive_anon:0 isolated_anon:0 [ 1712.600497][T16911] active_file:12508 inactive_file:40489 isolated_file:0 [ 1712.600497][T16911] unevictable:768 dirty:42 writeback:0 [ 1712.600497][T16911] slab_reclaimable:5252 slab_unreclaimable:26006 [ 1712.600497][T16911] mapped:35668 shmem:1493 pagetables:1490 [ 1712.600497][T16911] sec_pagetables:0 bounce:0 [ 1712.600497][T16911] kernel_misc_reclaimable:0 [ 1712.600497][T16911] free:336092 free_pcp:9483 free_cma:0 [ 1712.650454][T16911] Node 0 active_anon:16336kB inactive_anon:0kB active_file:50032kB inactive_file:161752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142672kB dirty:164kB writeback:0kB shmem:4436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4896kB pagetables:5600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1712.687959][T16911] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1712.720522][T16911] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.751400][T16911] lowmem_reserve[]: 0 930 1243 1243 1243 [ 1712.758493][T16911] Node 0 DMA32 free:411900kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5832kB inactive_anon:0kB active_file:45920kB inactive_file:78872kB unevictable:0kB writepending:116kB present:3129332kB managed:953036kB mlocked:0kB bounce:0kB free_pcp:24240kB local_pcp:14836kB free_cma:0kB [ 1712.794770][T16911] lowmem_reserve[]: 0 0 312 312 312 [ 1712.801410][T16911] Node 0 Normal free:20212kB boost:4096kB min:17100kB low:20348kB high:23596kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10504kB inactive_anon:0kB active_file:4112kB inactive_file:82880kB unevictable:1536kB writepending:48kB present:1048580kB managed:320452kB mlocked:0kB bounce:0kB free_pcp:13860kB local_pcp:7584kB free_cma:0kB [ 1712.834743][T16911] lowmem_reserve[]: 0 0 0 0 0 [ 1712.840487][T16911] Node 1 Normal free:908160kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:987200kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.872148][T16911] lowmem_reserve[]: 0 0 0 0 0 [ 1712.880572][T16911] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1712.895316][T16911] Node 0 DMA32: 1341*4kB (UME) 1051*8kB (UM) 527*16kB (UM) 436*32kB (UME) 474*64kB (UME) 128*128kB (UME) 57*256kB (UME) 24*512kB (UM) 13*1024kB (UME) 7*2048kB (UME) 67*4096kB (UM) = 411836kB [ 1712.917608][T16911] Node 0 Normal: 101*4kB (UM) 92*8kB (UME) 202*16kB (UM) 87*32kB (UM) 52*64kB (UME) 16*128kB (UM) 6*256kB (UME) 6*512kB (UME) 3*1024kB (UM) 0*2048kB 0*4096kB = 20212kB [ 1712.938373][T16911] Node 1 Normal: 2*4kB (M) 11*8kB (UME) 20*16kB (UME) 25*32kB (UME) 17*64kB (UME) 7*128kB (UME) 9*256kB (UME) 5*512kB (UME) 7*1024kB (UME) 6*2048kB (UME) 215*4096kB (M) = 908160kB [ 1712.959793][T16911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1712.970379][T16911] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1712.986242][T16911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1712.996432][T16911] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1713.006491][T16911] 54463 total pagecache pages [ 1713.011622][T16911] 0 pages in swap cache [ 1713.016202][T16911] Free swap = 124996kB [ 1713.020881][T16911] Total swap = 124996kB [ 1713.025888][T16911] 2097051 pages RAM [ 1713.030335][T16911] 0 pages HighMem/MovableOnly [ 1713.035442][T16911] 1530855 pages reserved [ 1713.039995][T16911] 0 pages cma reserved [ 1715.625851][T16506] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1715.635887][T16506] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1715.648805][T16506] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1715.679345][T16506] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1715.691972][T16506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1716.826865][T16931] lo speed is unknown, defaulting to 1000 [ 1717.814132][T16506] Bluetooth: hci4: command tx timeout [ 1718.766244][T16952] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1718.775826][T16952] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1718.966147][T16931] chnl_net:caif_netlink_parms(): no params data found [ 1719.232399][T16254] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1719.404317][T16254] usb 1-1: Using ep0 maxpacket: 16 [ 1719.423171][T16254] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1719.434120][T16254] usb 1-1: config 1 has no interface number 0 [ 1719.440539][T16254] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1719.451479][T16254] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1719.462020][T16254] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1719.604219][T16254] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1719.613957][T16254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.622281][T16254] usb 1-1: Product: syz [ 1719.626857][T16254] usb 1-1: Manufacturer: syz [ 1719.631749][T16254] usb 1-1: SerialNumber: syz [ 1719.744617][T16959] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1719.752947][T16959] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1719.799641][T16801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.886081][T16506] Bluetooth: hci4: command tx timeout [ 1720.306199][T16959] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1720.359145][T16959] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1720.851385][T16254] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1720.929315][T16254] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1721.160359][T16254] aqc111 1-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 1721.167187][T16931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.183492][T16931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.191486][T16931] bridge_slave_0: entered allmulticast mode [ 1721.201833][T16931] bridge_slave_0: entered promiscuous mode [ 1721.336512][T16254] usb 1-1: USB disconnect, device number 2 [ 1721.348245][T16254] aqc111 1-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1721.526964][T16931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.535073][T16931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.543279][T16931] bridge_slave_1: entered allmulticast mode [ 1721.553912][T16931] bridge_slave_1: entered promiscuous mode [ 1721.565597][T16254] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1721.576157][T16254] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1721.589121][T16254] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1722.011578][T16506] Bluetooth: hci4: command tx timeout [ 1722.152920][T16931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.209362][T16931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.363772][T16254] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1722.461313][T16931] team0: Port device team_slave_0 added [ 1722.524485][T16931] team0: Port device team_slave_1 added [ 1723.109910][T16931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1723.118586][T16931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.144872][ C1] vkms_vblank_simulate: vblank timer overrun [ 1723.152113][T16931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1723.324048][T16931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1723.331409][T16931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.358495][T16931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1723.445054][ T5894] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1723.464024][T16254] usb 7-1: Using ep0 maxpacket: 16 [ 1723.483678][T16254] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.499592][T16254] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1723.509627][T16254] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.011623][T16997] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1724.021321][T16997] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1724.071129][T14446] Bluetooth: hci4: command tx timeout [ 1724.175599][T16931] hsr_slave_0: entered promiscuous mode [ 1724.186963][T16931] hsr_slave_1: entered promiscuous mode [ 1724.196632][T16931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1724.204680][T16931] Cannot create hsr debugfs directory [ 1724.388527][ T1105] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.472562][T16254] usb 7-1: config 0 descriptor?? [ 1724.543519][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 1724.580353][ T5894] usb 1-1: config 0 has no interfaces? [ 1724.649842][ T1105] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.841240][ T1105] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.187653][ T1105] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.432799][ T5894] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1725.442959][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.456049][ T5894] usb 1-1: Product: syz [ 1725.460671][ T5894] usb 1-1: Manufacturer: syz [ 1725.465701][ T5894] usb 1-1: SerialNumber: syz [ 1725.511103][T16254] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1725.661660][ T5894] usb 1-1: config 0 descriptor?? [ 1725.736187][T16254] usb 7-1: USB disconnect, device number 8 [ 1725.840808][ T5894] usb 1-1: can't set config #0, error -71 [ 1725.900173][ T5894] usb 1-1: USB disconnect, device number 3 [ 1726.123909][T14446] Bluetooth: hci4: command 0x0405 tx timeout [ 1726.643987][ T1105] bond0 (unregistering): Released all slaves [ 1726.765639][ T1105] bond1 (unregistering): (slave veth3): Releasing active interface [ 1726.815767][ T1105] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1726.862027][ T1105] bond1 (unregistering): Released all slaves [ 1727.933559][T17025] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 1727.943268][T17025] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 1728.041550][ T1105] hsr_slave_0: left promiscuous mode [ 1728.081233][ T1105] hsr_slave_1: left promiscuous mode [ 1728.147182][ T1105] veth1_macvtap: left promiscuous mode [ 1728.155792][ T1105] veth0_macvtap: left promiscuous mode [ 1728.161821][ T1105] veth1_vlan: left promiscuous mode [ 1728.167669][ T1105] veth0_vlan: left promiscuous mode [ 1730.968859][T17047] netlink: 'syz.0.3788': attribute type 1 has an invalid length. [ 1731.040579][T16931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1731.065089][T16931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1731.087827][T16931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1731.112188][T16931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1731.863499][ T8736] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1732.065271][T16931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1732.104017][ T8736] usb 10-1: Using ep0 maxpacket: 32 [ 1732.206206][ T8736] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1732.216102][ T8736] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.308603][T16931] 8021q: adding VLAN 0 to HW filter on device team0 [ 1732.323642][T17060] @: renamed from vlan0 (while UP) [ 1732.391437][ T8736] usb 10-1: config 0 descriptor?? [ 1732.404999][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.412513][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1732.669854][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.677697][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1732.698900][ T8736] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1732.908571][ T8736] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1733.047134][ T8736] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1733.059045][ T8736] usb 10-1: media controller created [ 1733.180299][ T8736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1733.961089][ T8736] az6027: usb out operation failed. (-71) [ 1734.031006][ T8736] az6027: usb out operation failed. (-71) [ 1734.037689][ T8736] stb0899_attach: Driver disabled by Kconfig [ 1734.044760][ T8736] az6027: no front-end attached [ 1734.044760][ T8736] [ 1734.227198][ T8736] az6027: usb out operation failed. (-71) [ 1734.236062][ T8736] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1734.246759][ T8736] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input13 [ 1734.539380][ T8736] dvb-usb: schedule remote query interval to 400 msecs. [ 1734.547273][ T8736] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1734.682325][ T8736] usb 10-1: USB disconnect, device number 14 [ 1734.983899][ T5894] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1735.283820][ T5894] usb 7-1: Using ep0 maxpacket: 32 [ 1735.320508][ T5894] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1735.329852][ T5894] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.340566][ T5894] usb 7-1: config 0 has no interface number 0 [ 1735.347225][ T5894] usb 7-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1735.358098][ T5894] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1735.475376][T17074] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1735.485722][T17074] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1735.518450][ T8736] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1735.631660][ T5894] usb 7-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 1735.641442][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.650182][ T5894] usb 7-1: Product: syz [ 1735.654950][ T5894] usb 7-1: Manufacturer: syz [ 1735.659919][ T5894] usb 7-1: SerialNumber: syz [ 1735.690365][ T5894] usb 7-1: config 0 descriptor?? [ 1735.701257][T17068] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1735.720377][ T5894] usb-storage 7-1:0.231: USB Mass Storage device detected [ 1735.965208][ T5894] usb 7-1: USB disconnect, device number 9 [ 1736.562008][T16931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1736.912369][T16931] veth0_vlan: entered promiscuous mode [ 1737.119243][T16931] veth1_vlan: entered promiscuous mode [ 1737.545113][T16931] veth0_macvtap: entered promiscuous mode [ 1737.596465][T16931] veth1_macvtap: entered promiscuous mode [ 1737.708011][T16931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1737.868112][T16931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1738.020616][T16931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.030368][T16931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.039639][T16931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.050046][T16931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.955975][T17098] @: renamed from vlan0 [ 1740.801210][T16506] Bluetooth: hci1: connection err: -111 [ 1740.888572][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3807'. [ 1741.263538][T17111] netlink: 'syz.9.3807': attribute type 10 has an invalid length. [ 1741.274433][T17111] bond0: (slave sit1): The slave device specified does not support setting the MAC address [ 1741.286974][T17111] bond0: (slave sit1): Error -95 calling set_mac_address [ 1743.213989][T17118] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1743.223466][T17118] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1745.846924][ T8736] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1746.077851][ T8736] usb 10-1: Using ep0 maxpacket: 32 [ 1746.145410][ T8736] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1746.155213][ T8736] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.569404][ T8736] usb 10-1: config 0 descriptor?? [ 1746.682065][T17133] netlink: 'syz.1.3813': attribute type 16 has an invalid length. [ 1746.690948][T17133] netlink: 'syz.1.3813': attribute type 17 has an invalid length. [ 1746.699315][T17133] netlink: 'syz.1.3813': attribute type 27 has an invalid length. [ 1746.788477][ T8736] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1746.821078][ T8736] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1746.842588][ T5894] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1746.868288][ T8736] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1746.878561][ T8736] usb 10-1: media controller created [ 1746.957274][ T8736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1747.007156][T17128] ===================================================== [ 1747.019372][T17128] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1747.026889][T17128] _copy_to_user+0xcc/0x120 [ 1747.031661][T17128] i2cdev_ioctl_smbus+0x586/0x660 [ 1747.037193][T17128] i2cdev_ioctl+0xa14/0xf40 [ 1747.041948][T17128] __se_sys_ioctl+0x239/0x400 [ 1747.047080][T17128] __x64_sys_ioctl+0x97/0xe0 [ 1747.051955][T17128] x64_sys_call+0x1ebe/0x3db0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1747.057129][T17128] do_syscall_64+0xd9/0x210 [ 1747.061889][T17128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.068171][T17128] [ 1747.070645][T17128] Uninit was stored to memory at: [ 1747.076273][T17128] __i2c_smbus_xfer+0x254d/0x2f60 [ 1747.083434][T17128] i2c_smbus_xfer+0x31d/0x4d0 [ 1747.088421][T17128] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1747.094951][T17128] i2cdev_ioctl+0xa14/0xf40 [ 1747.099705][T17128] __se_sys_ioctl+0x239/0x400 [ 1747.106563][T17128] __x64_sys_ioctl+0x97/0xe0 [ 1747.111435][T17128] x64_sys_call+0x1ebe/0x3db0 [ 1747.116529][T17128] do_syscall_64+0xd9/0x210 [ 1747.121314][T17128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.127549][T17128] [ 1747.130014][T17128] Local variable msgbuf1.i created at: [ 1747.136007][T17128] __i2c_smbus_xfer+0x86a/0x2f60 [ 1747.141218][T17128] i2c_smbus_xfer+0x31d/0x4d0 [ 1747.146274][T17128] [ 1747.148737][T17128] Bytes 0-1 of 2 are uninitialized [ 1747.154134][T17128] Memory access of size 2 starts at ffff88802a84bd06 [ 1747.161038][T17128] Data copied to user address 0000200000000140 [ 1747.167720][T17128] [ 1747.170199][T17128] CPU: 0 UID: 0 PID: 17128 Comm: syz.9.3811 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(undef) [ 1747.184576][T17128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1747.195441][T17128] ===================================================== [ 1747.202567][T17128] Disabling lock debugging due to kernel taint [ 1747.209046][T17128] Kernel panic - not syncing: kmsan.panic set ... [ 1747.215670][T17128] CPU: 0 UID: 0 PID: 17128 Comm: syz.9.3811 Tainted: G B 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(undef) [ 1747.229717][T17128] Tainted: [B]=BAD_PAGE [ 1747.234076][T17128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1747.244334][T17128] Call Trace: [ 1747.247788][T17128] [ 1747.250896][T17128] __dump_stack+0x26/0x30 [ 1747.255501][T17128] dump_stack_lvl+0x53/0x270 [ 1747.260354][T17128] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1747.266468][T17128] dump_stack+0x1e/0x25 [ 1747.270875][T17128] panic+0x4bd/0xd50 [ 1747.275087][T17128] kmsan_report+0x31c/0x320 [ 1747.279880][T17128] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1747.286499][T17128] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1747.292803][T17128] ? kmsan_copy_to_user+0xf1/0x190 [ 1747.298218][T17128] ? _copy_to_user+0xcc/0x120 [ 1747.303154][T17128] ? i2cdev_ioctl_smbus+0x586/0x660 [ 1747.308612][T17128] ? i2cdev_ioctl+0xa14/0xf40 [ 1747.313553][T17128] ? __se_sys_ioctl+0x239/0x400 [ 1747.318666][T17128] ? __x64_sys_ioctl+0x97/0xe0 [ 1747.323698][T17128] ? x64_sys_call+0x1ebe/0x3db0 [ 1747.328839][T17128] ? do_syscall_64+0xd9/0x210 [ 1747.333751][T17128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.340081][T17128] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1747.345692][T17128] ? __i2c_transfer+0x11cd/0x3110 [ 1747.350967][T17128] ? kmsan_get_metadata+0xfb/0x160 [ 1747.356368][T17128] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1747.362989][T17128] ? kmsan_get_metadata+0xfb/0x160 [ 1747.368407][T17128] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1747.374594][T17128] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 1747.380086][T17128] ? kmsan_get_metadata+0xfb/0x160 [ 1747.385481][T17128] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1747.391610][T17128] kmsan_internal_check_memory+0x1e1/0x230 [ 1747.397722][T17128] kmsan_copy_to_user+0xf1/0x190 [ 1747.402939][T17128] _copy_to_user+0xcc/0x120 [ 1747.407705][T17128] i2cdev_ioctl_smbus+0x586/0x660 [ 1747.413016][T17128] i2cdev_ioctl+0xa14/0xf40 [ 1747.417775][T17128] ? kmsan_get_shadow_origin_ptr+0x33/0xb0 [ 1747.423887][T17128] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1747.429153][T17128] __se_sys_ioctl+0x239/0x400 [ 1747.434117][T17128] __x64_sys_ioctl+0x97/0xe0 [ 1747.438982][T17128] x64_sys_call+0x1ebe/0x3db0 [ 1747.443962][T17128] do_syscall_64+0xd9/0x210 [ 1747.448703][T17128] ? irqentry_exit+0x16/0x60 [ 1747.453504][T17128] ? clear_bhb_loop+0x40/0x90 [ 1747.458428][T17128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.464576][T17128] RIP: 0033:0x7f260978e929 [ 1747.469178][T17128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1747.489077][T17128] RSP: 002b:00007f260a545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1747.497865][T17128] RAX: ffffffffffffffda RBX: 00007f26099b5fa0 RCX: 00007f260978e929 [ 1747.506118][T17128] RDX: 00002000000001c0 RSI: 0000000000000720 RDI: 0000000000000008 [ 1747.514297][T17128] RBP: 00007f2609810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1747.522467][T17128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1747.530625][T17128] R13: 0000000000000000 R14: 00007f26099b5fa0 R15: 00007ffdc417c6d8 [ 1747.538870][T17128] [ 1747.542345][T17128] Kernel Offset: disabled [ 1747.546871][T17128] Rebooting in 86400 seconds..