last executing test programs: 38m15.048676246s ago: executing program 32 (id=378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4e0664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa7666b5ded16ee7025f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b3a2327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6cd28cf28fe2ee593e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c191355391771f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde34ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f2708e09ae8268dcc15411483b8506386aa0ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae4c697bfc674e03231c42f7eaaf5166bbc4653c71805f9448416e379cc1c40f8f866c9b319a849dd00ff9b84857436ed362c4632bfc3fa7357c24f15bbb07bd91893e61df7eb6dc5e071a9cc2faa7a32a91c4d982f5cfb725dca80b23874877a4980dbd70cda040b1ce527e7188159df77b493efbbd7bfe2680bf44e49eb68e5e33a0a5726072b2699d6244cd5c4a82bf18c668a3d43cec78c5fe1f12283d5dde6d0ea0b1b81ee7c065c938577e4ec93f22f1e6106f337625b7f7798011a6"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd4d}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x70bd27}, 0x14}}, 0x0) 35m27.764956905s ago: executing program 33 (id=876): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80c2, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35m2.286271225s ago: executing program 34 (id=935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) futex(0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r3}) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000"/128], 0xac}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 33m34.516431659s ago: executing program 35 (id=1106): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000000540), 0x0, 0x4040880) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$pppoe(0x18, 0x1, 0x0) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) pwrite64(r3, 0x0, 0x0, 0x9) 33m13.745390542s ago: executing program 36 (id=1147): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) open(&(0x7f0000000080)='./file1\x00', 0x14927e, 0x104) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) 32m15.489826401s ago: executing program 37 (id=1228): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) readv(r0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendfile(r3, r2, 0x0, 0x20000023893) 32m2.261474084s ago: executing program 38 (id=1244): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r0, &(0x7f00000000c0)="510003000000", 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31m12.80036945s ago: executing program 39 (id=1327): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 31m11.650720307s ago: executing program 40 (id=1328): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x29, 0x5, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000540)='%pS \x00'}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={&(0x7f0000000000)="b9d5856eb6ca885890be4dfeb03a0e9ca155bec40946a8", &(0x7f0000000cc0)=""/4096, &(0x7f00000002c0)="145054f1745e729a89e472db38ca3944106c61a0f09f24dc14aa84534224b2ccc80c97c1b992f3424873a4eee35d7618b05579ff3a77950ac8c06f6e23de2135e5afdd22b39715a7ac8a22ef1acf6c8b5798368d3b84e1312023a67eee2fa12a23366f9a2430974f3e99413fc3f1eeebbbdaec77d1a2cd86045ec4c9f78e2cece4af41be52028fdd0d7ff0603be1e15fedb3a2530f58f47ccd96052698883bfb126d032dccb5ddd952df76242d04d44af73357819f09926529777582392622717898e7a3c7", &(0x7f0000000600)="954c38d7ad0364aaed2d846de572ef600880c88f8d13de93d07ff4cf46cf2d659922d5c8055e4b3a270ea773ba458a7335e824e5d3c5e2dccb5c18a273e988a6ecdfd0895d48fabad209473f1a6dfab93b9bf86054977601a4cd6a7390582fb1e920a6abdfe188661128620c3f6b0b37b18dc8966c6b3fabc0dae03e35790a3854ad55d4a0", 0x7, r2}, 0x38) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xf, 0xfffffe0000000001, 0xfa15, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) r5 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 30m56.209843897s ago: executing program 41 (id=1344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) r4 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x95d, 0xfa39, 0xc1, 0x0, 0x0) io_uring_enter(r4, 0xedd, 0x8acb, 0x41, 0x0, 0x0) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) mknod$loop(&(0x7f0000000140)='./bus\x00', 0x100, 0x0) 29m36.792606208s ago: executing program 42 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2881) getpgid(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x80) close(r0) 28m13.386989204s ago: executing program 43 (id=1557): r0 = semget(0x3, 0x2, 0x284) semctl$IPC_RMID(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x3000) r8 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r9 = semget(0x1, 0x3, 0x204) semctl$IPC_RMID(r9, 0x0, 0x0) 28m2.357013638s ago: executing program 44 (id=1570): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r5, 0xae80, 0x0) flock(0xffffffffffffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 27m54.029563798s ago: executing program 45 (id=1582): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) 27m28.742961011s ago: executing program 46 (id=1607): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2a, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0x4e24, 0x0, 0x4e21, 0x1, 0xa, 0x0, 0x20, 0x2c}, {@in=@loopback, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x7, 0x8, 0x2, 0x3, 0x40, 0x2, 0x77, 0x7fffffffffffffff}, {0x4, 0x2, 0x8, 0x7fffffff}, {0x4, 0x2}, 0x70bd2d, 0x3505, 0xa, 0x4, 0xac}, 0x2, 0x9}}, 0xf8}}, 0x10) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7f, 0x0, 0x0) clock_gettime(0x4, 0x0) clock_settime(0x0, &(0x7f0000000240)) syz_emit_vhci(0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) 26m28.256560774s ago: executing program 47 (id=1617): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) readv(r0, &(0x7f0000000140), 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x20000023893) 25m47.420176633s ago: executing program 48 (id=1752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = timerfd_create(0x8, 0x80000) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 25m33.738242082s ago: executing program 49 (id=1700): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x134, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x0, 0x100, 0x4}, {@in, 0x0, 0x6c}, @in6=@private1, {}, {0x0, 0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) 21m18.127084888s ago: executing program 50 (id=2536): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 6m12.437165349s ago: executing program 1 (id=6289): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x10) 6m11.973665902s ago: executing program 1 (id=6291): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0x0, 0x461, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca6433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84222000000005335001db43a5c000000000000000024000000000000000000e75a812ded5297d531afbf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cbc30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a3830007462b5543f2c1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f401058690350000000000000000000000000025902e4a196fb169780000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad39e42a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e80b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d575a83f33e75011ed8b48a2f52a03ec09c277b596d5eb491b6b380533be019894e7fc1a414ae38f1f448a7f6423bb12169d6f41665c5edfa3b47acd4d23b826d15361528d7c5a27e1120ca9537c8c8cccbb3ae86a91894372120488b82ecad3538899e53a36844aa515ebdbb1cd69a33b584f8e1c796827703f3894c93dd5a77607cb6c1191b89b303c1381f3e6016bf6c0e710750b43eb9a8fd0d7d71492ac43baec4994396f0fdfe7cecf248b88ba9406c7b8e5ec4882d52a0cd4b9b1c8327e811e6ba2572ff5a59dc8c5c90464aa3942b4a256e8a513155fae5b3ebcc47d2e1a8768c2da219f47595f83239688ef9f55937c9e3447fb532cabc44bd5b805356cf12b89514"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r9, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r10}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x0, 0x703, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6m7.331470358s ago: executing program 1 (id=6303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 6m6.571296437s ago: executing program 1 (id=6306): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}, {@shortname_win95}, {@utf8}, {@uni_xlateno}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x401}}, {@utf8}, {@uni_xlateno}, {@shortname_win95}, {@shortname_win95}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@uni_xlate}]}, 0x7f, 0x2bd, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 6m5.8211655s ago: executing program 1 (id=6309): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000000)="f2"}) 6m5.142887236s ago: executing program 1 (id=6312): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close(r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r2) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000b3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 5m49.432306924s ago: executing program 51 (id=6312): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close(r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r2) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000b3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 5m29.518452581s ago: executing program 7 (id=6385): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000010240)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0xb, 0xd}, 0x80, &(0x7f0000000400)=[{&(0x7f0000010180)="27050200160014000600002fb96dbcf706e10500070088a80000810052ebe8a5a5ebad4da33d", 0x26}], 0x1}, 0x0) 5m28.799174885s ago: executing program 7 (id=6387): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 5m27.227191951s ago: executing program 7 (id=6397): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, r1, 0xb15, 0xfffffffe, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 5m22.468656676s ago: executing program 7 (id=6396): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000010240)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0xb, 0xd}, 0x80, &(0x7f0000000400)=[{&(0x7f0000010180)="27050200160014000600002fb96dbcf706e10500070088a80000810052ebe8a5a5ebad4da33d", 0x26}], 0x1}, 0x0) 5m21.783886166s ago: executing program 7 (id=6400): prctl$PR_SET_NAME(0x25, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000003c0)=@pppol2tp, 0x80, 0x0}, 0x21) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002a80)=@newtaction={0x80, 0x13, 0x53b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_sample={0x68, 0x19, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffd}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000010}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x181fbfb9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0xd, 0x4, 0x6, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x80}}, 0x20094) 5m20.119546164s ago: executing program 7 (id=6405): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ptrace$getregset(0x4205, r4, 0x2, 0x0) 5m8.181886081s ago: executing program 2 (id=6432): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) 5m6.697080074s ago: executing program 2 (id=6436): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r0, 0x0, 0x0) 5m5.926966914s ago: executing program 2 (id=6438): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="3e6a362aa92c6601507a97a98e62c0d995c6662411", 0x15}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0x3e) 5m4.138058453s ago: executing program 52 (id=6405): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ptrace$getregset(0x4205, r4, 0x2, 0x0) 5m4.047160722s ago: executing program 2 (id=6440): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) 5m1.404274543s ago: executing program 2 (id=6443): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r3}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) 4m59.200685761s ago: executing program 2 (id=6446): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r8 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x1, 0x0, r5, 0x7f, '\x00', r7, r8, 0x4, 0x5}, 0x50) 4m54.91307371s ago: executing program 53 (id=6446): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r8 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x1, 0x0, r5, 0x7f, '\x00', r7, r8, 0x4, 0x5}, 0x50) 4m18.422834533s ago: executing program 0 (id=6518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 4m17.328106092s ago: executing program 0 (id=6520): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 4m16.261291004s ago: executing program 0 (id=6524): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x8080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000240)={'ipvlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x2000, 0x10043}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x18, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 4m14.740347725s ago: executing program 0 (id=6530): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001840)=ANY=[@ANYBLOB="696f636861727365743d42000000000000006d65636173653d312c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d63703836302c6769643d2a575415629829e5c89da02870a932a755a7", @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00002000000000020000000,\x00'], 0x1, 0x152c, &(0x7f0000000300)="$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") 4m9.807975447s ago: executing program 0 (id=6539): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x400, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') statfs(&(0x7f0000000080)='./file1\x00', &(0x7f00000004c0)=""/209) 4m8.903360249s ago: executing program 0 (id=6542): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x2, 0x81}}, 0x2e) getsockopt(r5, 0x111, 0x3, 0x0, &(0x7f0000000080)) getpid() 3m53.601337886s ago: executing program 54 (id=6542): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x2, 0x81}}, 0x2e) getsockopt(r5, 0x111, 0x3, 0x0, &(0x7f0000000080)) getpid() 2m32.945035028s ago: executing program 9 (id=6706): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 2m31.487582434s ago: executing program 9 (id=6711): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x54a, 0x9, 0x7, 0x20000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x6}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) utimensat(r4, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400)={{0x77359400}, {0x0, 0x2710}}, 0x100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r7, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 2m30.808316741s ago: executing program 9 (id=6715): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xb8, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5", 0x0, 0x24, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x7, 0x0, 0xfffffffc}, 0x50) sendmsg$nl_route(r0, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m28.408288564s ago: executing program 9 (id=6722): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 2m23.655231871s ago: executing program 9 (id=6732): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xb8, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5", 0x0, 0x24, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x7, 0x0, 0xfffffffc}, 0x50) sendmsg$nl_route(r0, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m21.355961454s ago: executing program 9 (id=6739): socket$inet(0x2, 0x2, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x40001, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x10, 0x170, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x170, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r', 0xfc}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7, 0x3, 'netbios-ns\x00', {0x1}}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x15, &(0x7f0000000a40)={r5, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$bt_rfcomm(r5, &(0x7f00000008c0)={0x1f, @none, 0xfe}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) timer_create(0x0, &(0x7f0000000100)={0x0, 0x41, 0x4}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) 2m6.102616439s ago: executing program 55 (id=6739): socket$inet(0x2, 0x2, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x40001, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x10, 0x170, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x170, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r', 0xfc}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7, 0x3, 'netbios-ns\x00', {0x1}}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x15, &(0x7f0000000a40)={r5, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$bt_rfcomm(r5, &(0x7f00000008c0)={0x1f, @none, 0xfe}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) timer_create(0x0, &(0x7f0000000100)={0x0, 0x41, 0x4}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) 17.563399668s ago: executing program 4 (id=7067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfa50, 0x0, 0x0, 0x0, 0x48}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r5, r6+10000000}) 13.051891299s ago: executing program 4 (id=7079): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/sync_on_suspend', 0x80802, 0xf0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.66769258s ago: executing program 4 (id=7085): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 11.017934411s ago: executing program 5 (id=7087): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 10.576956821s ago: executing program 3 (id=7088): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2, 0x14, 0x9, 0xe, 0x2, 0x0, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x24000000) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0xa, 0x8, 0x3, 0x18, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x5, @in=@multicast2, 0xb, 0xc, 0x14}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x6e6bb9, 0x8, {0x6, 0x32, 0x3, 0xff, 0x0, 0x6, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7a}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@private=0xa010102, 0x5, 0x16, 0x8}, @sadb_sa={0x2, 0x1, 0x4d3, 0x3a, 0x10, 0xae, 0x4}]}, 0xc0}}, 0x400c400) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) getgid() r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r9, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9, r8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) 10.445754724s ago: executing program 5 (id=7089): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000001440)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x86, 0x8, "48da988be0fa"}]}}}], 0x18}}], 0x2, 0x4000010) 10.009727551s ago: executing program 5 (id=7090): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001601"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.155079411s ago: executing program 3 (id=7091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 6.980001793s ago: executing program 4 (id=7096): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) open(&(0x7f0000000300)='./bus\x00', 0x82342, 0x1d6) 6.733885231s ago: executing program 8 (id=7097): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f0000000a80)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r0, 0x81fd) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 6.519837515s ago: executing program 5 (id=7099): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200000, &(0x7f00000002c0)=ANY=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 5.941287397s ago: executing program 8 (id=7100): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 5.386612888s ago: executing program 8 (id=7101): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2, 0x14, 0x9, 0xe, 0x2, 0x0, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x24000000) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0xa, 0x8, 0x3, 0x18, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x5, @in=@multicast2, 0xb, 0xc, 0x14}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x6e6bb9, 0x8, {0x6, 0x32, 0x3, 0xff, 0x0, 0x6, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7a}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@private=0xa010102, 0x5, 0x16, 0x8}, @sadb_sa={0x2, 0x1, 0x4d3, 0x3a, 0x10, 0xae, 0x4}]}, 0xc0}}, 0x400c400) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) getgid() r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r9, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9, r8}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) 5.216578878s ago: executing program 6 (id=7102): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) sendmsg(0xffffffffffffffff, 0x0, 0x24000004) close_range(r2, 0xffffffffffffffff, 0x0) 4.399917777s ago: executing program 3 (id=7103): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) r1 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x6) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 4.072727009s ago: executing program 8 (id=7104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x880) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a8", 0x1}], 0x1}, 0x4040001) recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 3.999127127s ago: executing program 6 (id=7105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f043", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.075688356s ago: executing program 3 (id=7106): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x20040084) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) 2.691778167s ago: executing program 6 (id=7107): r0 = open(0x0, 0x14927e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2400, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', 0x0}) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xcb6c, 0x40, 0x3, 0x131}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000480), 0x0) 2.577213532s ago: executing program 8 (id=7108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)="65e20828"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.460577953s ago: executing program 4 (id=7109): bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xfffffffd}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 2.13077495s ago: executing program 6 (id=7110): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x3, 0x80}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 2.10481894s ago: executing program 8 (id=7111): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0xa, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 1.847336653s ago: executing program 5 (id=7112): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2, 0x14, 0x9, 0xe, 0x2, 0x0, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x24000000) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0xa, 0x8, 0x3, 0x18, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x5, @in=@multicast2, 0xb, 0xc, 0x14}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x6e6bb9, 0x8, {0x6, 0x32, 0x3, 0xff, 0x0, 0x6, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7a}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@private=0xa010102, 0x5, 0x16, 0x8}, @sadb_sa={0x2, 0x1, 0x4d3, 0x3a, 0x10, 0xae, 0x4}]}, 0xc0}}, 0x400c400) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) getgid() r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r9, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9, r8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) 1.812749045s ago: executing program 4 (id=7113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) futex(0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.64400676s ago: executing program 3 (id=7114): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2, 0x14, 0x9, 0xe, 0x2, 0x0, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x24000000) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0xa, 0x8, 0x3, 0x18, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x5, @in=@multicast2, 0xb, 0xc, 0x14}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x6e6bb9, 0x8, {0x6, 0x32, 0x3, 0xff, 0x0, 0x6, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7a}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@private=0xa010102, 0x5, 0x16, 0x8}, @sadb_sa={0x2, 0x1, 0x4d3, 0x3a, 0x10, 0xae, 0x4}]}, 0xc0}}, 0x400c400) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) getgid() r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r9, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9, r8}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) 1.279602606s ago: executing program 6 (id=7115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) sendmsg(0xffffffffffffffff, 0x0, 0x24000004) close_range(r2, 0xffffffffffffffff, 0x0) 574.634016ms ago: executing program 5 (id=7116): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb8, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5", 0x0, 0x24, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x7, 0x0, 0xfffffffc}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x2401) close_range(r0, 0xffffffffffffffff, 0x0) 28.813595ms ago: executing program 3 (id=7117): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f043059e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 6 (id=7118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x58f6e6e3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) kernel console output (not intermixed with test programs): 4294967295 subj=unconfined pid=26176 comm="syz.6.6451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2365.716374][ T30] audit: type=1326 audit(1756747096.625:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26176 comm="syz.6.6451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2365.739109][ T30] audit: type=1326 audit(1756747096.685:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26176 comm="syz.6.6451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2365.768808][ T30] audit: type=1326 audit(1756747096.685:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26176 comm="syz.6.6451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2365.793613][ T30] audit: type=1326 audit(1756747096.685:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26176 comm="syz.6.6451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2365.816861][ T30] audit: type=1326 audit(1756747096.775:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26176 comm="syz.6.6451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2365.839584][ T30] audit: type=1326 audit(2000000000.000:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26176 comm="syz.6.6451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2365.869381][ T30] audit: type=1326 audit(2000000000.000:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26176 comm="syz.6.6451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2366.568475][T23993] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2366.578588][T23993] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2366.594908][T23993] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2366.610253][T23993] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2366.622586][T23993] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2366.978012][T21864] team0 (unregistering): Port device team_slave_1 removed [ 2367.124923][T21864] team0 (unregistering): Port device team_slave_0 removed [ 2368.165631][T26154] bridge0: port 1(bridge_slave_0) entered blocking state [ 2368.173936][T26154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2368.182102][T26154] bridge_slave_0: entered allmulticast mode [ 2368.192125][T26154] bridge_slave_0: entered promiscuous mode [ 2368.662045][T26154] bridge0: port 2(bridge_slave_1) entered blocking state [ 2368.669828][T26154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2368.678113][T26154] bridge_slave_1: entered allmulticast mode [ 2368.688361][T26154] bridge_slave_1: entered promiscuous mode [ 2368.726877][T23993] Bluetooth: hci6: command tx timeout [ 2369.254014][T26193] loop4: detected capacity change from 0 to 256 [ 2369.302560][T26154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2369.427846][T26154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2369.638106][T26154] team0: Port device team_slave_0 added [ 2369.769862][T26154] team0: Port device team_slave_1 added [ 2369.897685][T26193] FAT-fs (loop4): Directory bread(block 64) failed [ 2369.904488][T26193] FAT-fs (loop4): Directory bread(block 65) failed [ 2369.911835][T26193] FAT-fs (loop4): Directory bread(block 66) failed [ 2369.919306][T26193] FAT-fs (loop4): Directory bread(block 67) failed [ 2369.926483][T26193] FAT-fs (loop4): Directory bread(block 68) failed [ 2369.933329][T26193] FAT-fs (loop4): Directory bread(block 69) failed [ 2369.940442][T26193] FAT-fs (loop4): Directory bread(block 70) failed [ 2369.947556][T26193] FAT-fs (loop4): Directory bread(block 71) failed [ 2369.954468][T26193] FAT-fs (loop4): Directory bread(block 72) failed [ 2369.968988][T26193] FAT-fs (loop4): Directory bread(block 73) failed [ 2370.281505][T26154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2370.288934][T26154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2370.317390][T26154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2370.498369][T26181] chnl_net:caif_netlink_parms(): no params data found [ 2370.571092][T26154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2370.583884][T26154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2370.611943][T26154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2370.827578][T23993] Bluetooth: hci6: command tx timeout [ 2371.413625][T26154] hsr_slave_0: entered promiscuous mode [ 2371.424807][T26154] hsr_slave_1: entered promiscuous mode [ 2371.434677][T26154] debugfs: 'hsr0' already exists in 'hsr' [ 2371.440811][T26154] Cannot create hsr debugfs directory [ 2371.587524][T24576] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2371.797544][T24576] usb 1-1: Using ep0 maxpacket: 32 [ 2371.858879][T24576] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2371.870608][T24576] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2372.050067][T24576] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2372.060912][T24576] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2372.069817][T24576] usb 1-1: Product: syz [ 2372.074293][T24576] usb 1-1: Manufacturer: syz [ 2372.240594][T24576] hub 1-1:4.0: USB hub found [ 2372.425331][T26206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2372.435121][T26206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2372.578159][T24576] hub 1-1:4.0: 2 ports detected [ 2372.786613][T24576] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 2372.793239][T24576] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 2372.878015][T24576] usb 1-1: USB disconnect, device number 24 [ 2372.920693][T23993] Bluetooth: hci6: command tx timeout [ 2373.118141][T26181] bridge0: port 1(bridge_slave_0) entered blocking state [ 2373.126325][T26181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2373.141610][T26181] bridge_slave_0: entered allmulticast mode [ 2373.151954][T26181] bridge_slave_0: entered promiscuous mode [ 2373.426557][T26181] bridge0: port 2(bridge_slave_1) entered blocking state [ 2373.434254][T26181] bridge0: port 2(bridge_slave_1) entered disabled state [ 2373.453864][T26181] bridge_slave_1: entered allmulticast mode [ 2373.464200][T26181] bridge_slave_1: entered promiscuous mode [ 2374.118239][T26181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2374.216914][T26181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2374.618329][T26181] team0: Port device team_slave_0 added [ 2374.973687][T23993] Bluetooth: hci6: command tx timeout [ 2375.174099][T26181] team0: Port device team_slave_1 added [ 2375.439492][T26154] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2375.481520][T26154] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2375.617683][T26181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2375.624999][T26181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2375.651668][T26181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2375.670147][T26154] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2375.774388][T26154] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2375.883078][T26181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2375.890628][T26181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2375.922713][T26181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2376.144968][T26237] syz.6.6472 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2376.460274][T26239] loop0: detected capacity change from 0 to 256 [ 2376.752269][T26181] hsr_slave_0: entered promiscuous mode [ 2376.771485][T26181] hsr_slave_1: entered promiscuous mode [ 2376.784390][T26181] debugfs: 'hsr0' already exists in 'hsr' [ 2376.791396][T26181] Cannot create hsr debugfs directory [ 2379.260542][T26154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2380.185417][T26154] 8021q: adding VLAN 0 to HW filter on device team0 [ 2380.468582][T21864] bridge0: port 1(bridge_slave_0) entered blocking state [ 2380.476338][T21864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2380.701453][T21864] bridge0: port 2(bridge_slave_1) entered blocking state [ 2380.709228][T21864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2380.892229][ T3561] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.951958][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2380.952056][ T30] audit: type=1326 audit(2000000015.270:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26253 comm="syz.4.6479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2380.981741][ T30] audit: type=1326 audit(2000000015.270:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26253 comm="syz.4.6479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2381.005004][ T30] audit: type=1326 audit(2000000015.270:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26253 comm="syz.4.6479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2381.033640][ T30] audit: type=1326 audit(2000000015.290:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26253 comm="syz.4.6479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2381.060913][ T30] audit: type=1326 audit(2000000015.290:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26253 comm="syz.4.6479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=220 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2381.083910][ T30] audit: type=1326 audit(2000000015.290:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26253 comm="syz.4.6479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2381.093964][T26255] loop4: detected capacity change from 0 to 256 [ 2381.106883][ T30] audit: type=1326 audit(2000000015.310:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26253 comm="syz.4.6479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=23 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2381.107152][ T30] audit: type=1326 audit(2000000015.310:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26253 comm="syz.4.6479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2381.107411][ T30] audit: type=1326 audit(2000000015.310:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26253 comm="syz.4.6479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2381.107654][ T30] audit: type=1326 audit(2000000015.330:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26253 comm="syz.4.6479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2381.206029][T26255] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2381.229075][T26255] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 2381.481205][ T3561] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2381.507108][T26255] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 2381.673662][ T3561] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2381.899842][ T3561] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2382.700780][ T3561] bridge_slave_1: left allmulticast mode [ 2382.707327][ T3561] bridge_slave_1: left promiscuous mode [ 2382.714033][ T3561] bridge0: port 2(bridge_slave_1) entered disabled state [ 2382.758186][T26259] loop6: detected capacity change from 0 to 512 [ 2382.801104][ T3561] bridge_slave_0: left allmulticast mode [ 2382.807934][ T3561] bridge_slave_0: left promiscuous mode [ 2382.814656][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state [ 2382.876825][T26259] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2383.020336][T26259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2383.033765][T26259] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2383.811485][T20407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2383.916837][ T3561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2384.006426][ T3561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2384.100156][ T3561] bond0 (unregistering): Released all slaves [ 2384.126860][ T3561] bond1 (unregistering): Released all slaves [ 2384.338774][T26181] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2384.457060][T26268] loop6: detected capacity change from 0 to 256 [ 2384.469152][T26181] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2384.481219][T26268] exfat: Deprecated parameter 'namecase' [ 2384.689550][T26268] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 2384.777333][T26181] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2384.942173][T26181] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2385.245193][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2385.449196][ T3561] hsr_slave_0: left promiscuous mode [ 2385.486417][ T3561] hsr_slave_1: left promiscuous mode [ 2385.494701][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2385.503031][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2385.620569][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2385.634118][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2385.768404][ T3561] veth1_macvtap: left promiscuous mode [ 2385.774175][ T3561] veth0_macvtap: left promiscuous mode [ 2385.781301][ T3561] veth1_vlan: left promiscuous mode [ 2385.787001][ T3561] veth0_vlan: left promiscuous mode [ 2385.954029][T26274] loop6: detected capacity change from 0 to 1024 [ 2386.032133][T26274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2386.197125][T26274] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2386.308234][T26274] System zones: 0-1, 3-36 [ 2386.349479][T26274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2387.020350][T20407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2387.626986][T26284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6487'. [ 2387.803532][ T3561] team0 (unregistering): Port device team_slave_1 removed [ 2387.952159][ T3561] team0 (unregistering): Port device team_slave_0 removed [ 2388.441919][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2388.442013][ T30] audit: type=1326 audit(2000000022.750:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26289 comm="syz.6.6490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2388.773336][T26154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2389.651243][T26181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2389.701283][T26154] veth0_vlan: entered promiscuous mode [ 2389.878568][T26181] 8021q: adding VLAN 0 to HW filter on device team0 [ 2389.893857][T26154] veth1_vlan: entered promiscuous mode [ 2390.023027][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 2390.030871][ T4040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2390.192578][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 2390.200222][ T4040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2390.495201][T26154] veth0_macvtap: entered promiscuous mode [ 2390.628846][T26154] veth1_macvtap: entered promiscuous mode [ 2390.947555][T26154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2391.068102][T26154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2391.108489][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2391.179945][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2391.218597][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2391.271793][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2391.516290][T26303] tipc: Started in network mode [ 2391.521490][T26303] tipc: Node identity ac1414aa, cluster identity 4711 [ 2391.532578][T26303] tipc: New replicast peer: 100.1.1.1 [ 2391.539641][T26303] tipc: Enabled bearer , priority 10 [ 2392.657595][T24901] tipc: Node number set to 2886997162 [ 2393.254656][T26181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2395.235689][T26339] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6504'. [ 2395.554218][T26335] loop0: detected capacity change from 0 to 4096 [ 2395.746410][T26335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2396.018767][T26335] fs-verity (loop0, inode 16): fs-verity keyring is empty, rejecting signed file! [ 2396.231607][T26181] veth0_vlan: entered promiscuous mode [ 2396.410774][T26181] veth1_vlan: entered promiscuous mode [ 2396.604929][T25875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2396.897300][T26181] veth0_macvtap: entered promiscuous mode [ 2397.001173][T26181] veth1_macvtap: entered promiscuous mode [ 2397.219401][T26181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2397.248418][T26357] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6510'. [ 2397.319148][T26356] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6510'. [ 2397.383056][T26181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2397.516163][T16348] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2397.537686][T16348] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2397.598402][T16348] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2397.698232][ T3825] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2397.738052][T24118] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2397.978521][T24118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2397.990161][T24118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2398.000460][T24118] usb 1-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 2398.009924][T24118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2398.209147][T24118] usb 1-1: config 0 descriptor?? [ 2398.869506][T24118] wacom 0003:056A:0325.002A: unexpected long global item [ 2398.919563][T24118] wacom 0003:056A:0325.002A: parse failed [ 2398.926486][T24118] wacom 0003:056A:0325.002A: probe with driver wacom failed with error -22 [ 2399.053543][T24118] usb 1-1: USB disconnect, device number 25 [ 2400.252117][T26383] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6516'. [ 2400.479038][ T8836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2400.487574][ T8836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2400.756097][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2400.764229][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2401.423164][T26392] random: crng reseeded on system resumption [ 2402.140242][T26397] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6520'. [ 2402.226755][T26396] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6520'. [ 2403.226582][ T30] audit: type=1107 audit(2000000037.520:5807): pid=26405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÆíKyªäí£ìøëÄMïÄšXó [ 2403.226582][ T30] ²®ÀÚg¸À·NoÁ*•Wd>¶ÃžXÕ¢‡ DN·:¾µ‰“áËöµþSà溄ý?nQØTd¼2El£ëŒR.Ûß*!Ô¼¼z¼’.ˆ~?ˉjá¼$2@³Ù [ 2403.226582][ T30] Ф óÈð7t´m-·ñ Oä/Æðçè¡Múe^Ìê¨ò' [ 2403.821619][T26411] bridge0: port 2(bridge_slave_1) entered listening state [ 2403.874802][T26411] bridge0: port 2(bridge_slave_1) entered disabled state [ 2405.028691][T26432] bridge: RTM_NEWNEIGH with invalid ether address [ 2405.618920][T26436] loop3: detected capacity change from 0 to 256 [ 2405.813450][ T30] audit: type=1800 audit(2000000040.110:5808): pid=26436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6532" name="file2" dev="loop3" ino=1048827 res=0 errno=0 [ 2406.052068][ T8836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2406.060856][ T8836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2406.374301][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2406.382961][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2407.230289][T26444] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6533'. [ 2407.313352][T26443] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6533'. [ 2409.070370][T24118] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 2409.320060][T24118] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2409.330900][T24118] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2409.419695][T24118] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2409.429314][T24118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.437799][T24118] usb 4-1: Product: syz [ 2409.442190][T24118] usb 4-1: Manufacturer: syz [ 2409.447266][T24118] usb 4-1: SerialNumber: syz [ 2409.755649][T24118] usb 4-1: 0:2 : does not exist [ 2409.835686][T24118] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2409.992623][T24118] usb 4-1: USB disconnect, device number 16 [ 2411.437042][T26465] loop3: detected capacity change from 0 to 256 [ 2411.508766][T26465] exfat: Deprecated parameter 'utf8' [ 2411.514581][T26465] exfat: Deprecated parameter 'namecase' [ 2411.522115][T26465] exfat: Deprecated parameter 'namecase' [ 2411.528290][T26465] exfat: Deprecated parameter 'utf8' [ 2411.659661][T26465] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 2413.396456][T26474] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6545'. [ 2413.464327][T26473] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6545'. [ 2415.729461][T26485] loop4: detected capacity change from 0 to 1024 [ 2415.798900][T26485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2415.881505][T26485] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2415.916398][T26485] System zones: 0-1, 3-36 [ 2415.942120][T26485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2416.615368][T23684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2420.085671][T26502] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6556'. [ 2420.106743][T26499] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6556'. [ 2423.192022][T26511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2426.510056][T26525] loop3: detected capacity change from 0 to 1024 [ 2426.564305][T26525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2426.781252][T26525] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2426.827491][T26525] System zones: 0-1, 3-36 [ 2426.858698][T26525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2426.947199][ T9736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2426.966923][ T9736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2426.980128][ T9736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2427.017607][ T9736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2427.036467][ T9736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2427.038980][T26537] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6568'. [ 2427.156442][T26532] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6568'. [ 2428.282911][T26154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2428.477084][T12911] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 2428.708575][T12911] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2428.720109][T12911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2428.735457][T12911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2428.754360][T12911] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2429.012671][T12911] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2429.023650][T12911] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2429.033300][T12911] usb 7-1: Manufacturer: syz [ 2429.106921][T26534] chnl_net:caif_netlink_parms(): no params data found [ 2429.126086][ T9736] Bluetooth: hci3: command tx timeout [ 2429.153323][T12911] usb 7-1: config 0 descriptor?? [ 2429.595082][T12911] hid_parser_main: 74 callbacks suppressed [ 2429.595191][T12911] appleir 0003:05AC:8243.002B: unknown main item tag 0x0 [ 2429.721344][T12911] appleir 0003:05AC:8243.002B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 2429.946701][T12911] usb 7-1: USB disconnect, device number 48 [ 2431.224057][ T9736] Bluetooth: hci3: command tx timeout [ 2431.261817][T26563] netlink: 'syz.6.6576': attribute type 12 has an invalid length. [ 2431.862617][T26534] bridge0: port 1(bridge_slave_0) entered blocking state [ 2431.871040][T26534] bridge0: port 1(bridge_slave_0) entered disabled state [ 2431.879232][T26534] bridge_slave_0: entered allmulticast mode [ 2431.889429][T26534] bridge_slave_0: entered promiscuous mode [ 2432.090585][T26534] bridge0: port 2(bridge_slave_1) entered blocking state [ 2432.098908][T26534] bridge0: port 2(bridge_slave_1) entered disabled state [ 2432.107082][T26534] bridge_slave_1: entered allmulticast mode [ 2432.128511][T26534] bridge_slave_1: entered promiscuous mode [ 2432.517580][ T30] audit: type=1326 audit(2000000066.820:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26564 comm="syz.6.6577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2432.691706][ T30] audit: type=1326 audit(2000000066.900:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26564 comm="syz.6.6577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2432.715181][ T30] audit: type=1326 audit(2000000066.920:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26564 comm="syz.6.6577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=71 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2432.744451][ T30] audit: type=1326 audit(2000000066.920:5812): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=26564 comm="syz.6.6577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2432.769326][ T30] audit: type=1326 audit(2000000066.920:5813): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=26564 comm="syz.6.6577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2432.864844][T26534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2433.053592][T26534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2433.290344][T23993] Bluetooth: hci3: command tx timeout [ 2433.366965][T23993] Bluetooth: hci0: command 0x0406 tx timeout [ 2433.616633][T26534] team0: Port device team_slave_0 added [ 2433.637657][T26534] team0: Port device team_slave_1 added [ 2433.820439][T26571] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6580'. [ 2433.843964][T26570] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6580'. [ 2433.881554][T26534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2433.889108][T26534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2433.915867][T26534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2434.151250][T26534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2434.158881][T26534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2434.194129][T26534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2434.916994][T16348] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2435.331329][T16348] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2435.370607][ T9736] Bluetooth: hci3: command tx timeout [ 2435.424603][T26534] hsr_slave_0: entered promiscuous mode [ 2435.439000][T26534] hsr_slave_1: entered promiscuous mode [ 2435.448976][T26534] debugfs: 'hsr0' already exists in 'hsr' [ 2435.454923][T26534] Cannot create hsr debugfs directory [ 2435.549775][T26580] loop4: detected capacity change from 0 to 128 [ 2435.581939][T16348] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2435.660090][ T30] audit: type=1800 audit(2000000069.980:5814): pid=26580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6583" name="bus" dev="loop4" ino=1048833 res=0 errno=0 [ 2435.994559][T16348] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2436.461580][T26582] loop3: detected capacity change from 0 to 2048 [ 2436.494906][T26582] EXT4-fs: Ignoring removed i_version option [ 2436.614698][T26582] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 2436.910961][T26582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2436.924061][T26582] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2436.977290][T16348] bridge_slave_1: left allmulticast mode [ 2436.983208][T16348] bridge_slave_1: left promiscuous mode [ 2436.990422][T16348] bridge0: port 2(bridge_slave_1) entered disabled state [ 2437.122280][T16348] bridge_slave_0: left allmulticast mode [ 2437.129949][T16348] bridge_slave_0: left promiscuous mode [ 2437.145175][T16348] bridge0: port 1(bridge_slave_0) entered disabled state [ 2437.919267][T26154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2438.725157][T16348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2438.813862][T16348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2438.861015][T16348] bond0 (unregistering): Released all slaves [ 2439.299793][T16348] tipc: Disabling bearer [ 2439.306382][T16348] tipc: Left network mode [ 2440.188836][T16348] hsr_slave_0: left promiscuous mode [ 2440.242832][T16348] hsr_slave_1: left promiscuous mode [ 2440.251887][T16348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2440.260232][T16348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2440.407053][T16348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2440.422927][T16348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2440.568139][T16348] veth1_macvtap: left promiscuous mode [ 2440.573910][T16348] veth0_macvtap: left promiscuous mode [ 2440.580071][T16348] veth1_vlan: left promiscuous mode [ 2440.585642][T16348] veth0_vlan: left promiscuous mode [ 2441.463601][ T30] audit: type=1326 audit(2000000075.770:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.9.6593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2441.486585][ T30] audit: type=1326 audit(2000000075.770:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.9.6593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2441.509500][ T30] audit: type=1326 audit(2000000075.780:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.9.6593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2441.537135][ T30] audit: type=1326 audit(2000000075.780:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.9.6593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2441.563713][ T30] audit: type=1326 audit(2000000075.780:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.9.6593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2441.897246][ T30] audit: type=1326 audit(2000000075.920:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.9.6593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2441.920536][ T30] audit: type=1326 audit(2000000075.920:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.9.6593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2441.943387][ T30] audit: type=1326 audit(2000000075.920:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.9.6593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2441.969512][ T30] audit: type=1326 audit(2000000075.920:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.9.6593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2441.993355][ T30] audit: type=1326 audit(2000000075.920:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26616 comm="syz.9.6593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2442.339821][T12911] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2442.494086][T26623] loop6: detected capacity change from 0 to 128 [ 2442.534559][T12911] usb 10-1: Using ep0 maxpacket: 32 [ 2442.566629][T12911] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2442.578265][T12911] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2442.588161][T12911] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2442.628872][T26623] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2442.736578][T26623] ext4 filesystem being mounted at /450/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2442.773488][T12911] usb 10-1: config 0 descriptor?? [ 2443.219212][T16348] team0 (unregistering): Port device team_slave_1 removed [ 2443.285191][T12911] kye 0003:0458:5013.002C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 2443.338156][T16348] team0 (unregistering): Port device team_slave_0 removed [ 2443.347767][T12911] kye 0003:0458:5013.002C: item fetching failed at offset 1/5 [ 2443.400782][T12911] kye 0003:0458:5013.002C: parse failed [ 2443.407199][T12911] kye 0003:0458:5013.002C: probe with driver kye failed with error -22 [ 2443.540189][T20293] usb 10-1: USB disconnect, device number 4 [ 2443.914501][T26611] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6590'. [ 2444.708842][T26630] loop3: detected capacity change from 0 to 1024 [ 2444.819198][T26630] EXT4-fs: Ignoring removed nobh option [ 2444.830798][T26630] EXT4-fs: Ignoring removed bh option [ 2445.047084][T26534] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2445.084358][T26630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2445.100182][T26534] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2445.146689][T26534] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2445.181579][T26534] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2445.248793][T26630] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 2446.097721][T26154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2446.669945][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2446.751787][T26534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2446.837781][T20407] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2447.004917][T26534] 8021q: adding VLAN 0 to HW filter on device team0 [ 2447.093487][ T3825] bridge0: port 1(bridge_slave_0) entered blocking state [ 2447.101441][ T3825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2447.206981][ T3825] bridge0: port 2(bridge_slave_1) entered blocking state [ 2447.214641][ T3825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2449.993610][T26534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2450.733303][T26655] overlayfs: failed to clone lowerpath [ 2450.814575][T26655] overlayfs: failed to clone upperpath [ 2452.076085][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2452.076171][ T30] audit: type=1326 audit(2000000086.370:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 2452.109614][ T30] audit: type=1326 audit(2000000086.390:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 2452.133656][ T30] audit: type=1326 audit(2000000086.390:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 2452.158004][ T30] audit: type=1326 audit(2000000086.390:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 2452.180764][ T30] audit: type=1326 audit(2000000086.400:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 2452.206730][ T30] audit: type=1326 audit(2000000086.400:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 2452.230760][ T30] audit: type=1326 audit(2000000086.430:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 2452.447279][ T30] audit: type=1326 audit(2000000086.600:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 2452.470275][ T30] audit: type=1326 audit(2000000086.600:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 2452.497318][ T30] audit: type=1326 audit(2000000086.630:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.3.6604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 2453.358227][T26534] veth0_vlan: entered promiscuous mode [ 2453.490987][T26534] veth1_vlan: entered promiscuous mode [ 2453.891682][T26534] veth0_macvtap: entered promiscuous mode [ 2453.984264][T26534] veth1_macvtap: entered promiscuous mode [ 2454.248111][T26534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2454.319465][T26534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2454.477422][ T3561] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2454.593989][ T3561] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2454.619510][T26673] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.6607'. [ 2454.658670][T26672] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.6607'. [ 2454.741463][ T3561] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2454.821375][ T4040] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2461.570129][T26712] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6617'. [ 2461.639494][T26711] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6617'. [ 2463.731559][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2463.740175][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2464.062337][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2464.074459][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2464.223073][T26726] loop6: detected capacity change from 0 to 512 [ 2464.497019][T26726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2464.510453][T26726] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2464.869774][T26732] bridge0: entered promiscuous mode [ 2464.875367][T26732] macsec1: entered promiscuous mode [ 2464.894677][T26732] bridge0: port 3(macsec1) entered blocking state [ 2464.901976][T26732] bridge0: port 3(macsec1) entered disabled state [ 2464.909530][T26732] macsec1: entered allmulticast mode [ 2464.915053][T26732] bridge0: entered allmulticast mode [ 2464.991902][T26732] macsec1: left allmulticast mode [ 2464.997441][T26732] bridge0: left allmulticast mode [ 2465.078262][T26732] bridge0: left promiscuous mode [ 2465.596420][T24901] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 2465.833528][T24901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2465.845175][T24901] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2465.854889][T24901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2465.938612][T24901] usb 10-1: config 0 descriptor?? [ 2465.947141][T26735] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2466.568910][T24901] elan 0003:04F3:0755.002D: unknown main item tag 0x0 [ 2466.576192][T24901] elan 0003:04F3:0755.002D: item fetching failed at offset 3/5 [ 2466.655971][T24901] elan 0003:04F3:0755.002D: Hid Parse failed [ 2466.662695][T24901] elan 0003:04F3:0755.002D: probe with driver elan failed with error -22 [ 2466.777831][T24901] usb 10-1: USB disconnect, device number 5 [ 2467.092424][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2467.092512][ T30] audit: type=1326 audit(2000000101.410:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26740 comm="syz.3.6626" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 2467.235912][ T30] audit: type=1326 audit(2000000101.450:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26740 comm="syz.3.6626" exe="/root/syz-executor" sig=0 arch=40000003 syscall=314 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 2467.267394][ T30] audit: type=1326 audit(2000000101.450:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26740 comm="syz.3.6626" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 2468.032784][T26746] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.6628'. [ 2468.137848][T26745] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.6628'. [ 2468.259157][T20407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2468.764874][T26750] loop3: detected capacity change from 0 to 128 [ 2468.975858][ T30] audit: type=1800 audit(2000000103.280:5860): pid=26750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6630" name="bus" dev="loop3" ino=1048839 res=0 errno=0 [ 2469.440976][T26754] syz.3.6630: attempt to access beyond end of device [ 2469.440976][T26754] loop3: rw=3, sector=185, nr_sectors = 7 limit=128 [ 2469.455175][T26754] syz.3.6630: attempt to access beyond end of device [ 2469.455175][T26754] loop3: rw=2051, sector=192, nr_sectors = 1 limit=128 [ 2469.680350][T26750] syz.3.6630: attempt to access beyond end of device [ 2469.680350][T26750] loop3: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 2469.695024][T26750] syz.3.6630: attempt to access beyond end of device [ 2469.695024][T26750] loop3: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 2469.713530][T26750] syz.3.6630: attempt to access beyond end of device [ 2469.713530][T26750] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 2469.729071][T26750] syz.3.6630: attempt to access beyond end of device [ 2469.729071][T26750] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 2469.743268][T26750] syz.3.6630: attempt to access beyond end of device [ 2469.743268][T26750] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 2469.757585][T26750] syz.3.6630: attempt to access beyond end of device [ 2469.757585][T26750] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 2469.771685][T26750] syz.3.6630: attempt to access beyond end of device [ 2469.771685][T26750] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 2469.786008][T26750] syz.3.6630: attempt to access beyond end of device [ 2469.786008][T26750] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 2470.454153][T21813] Bluetooth: hci1: Frame reassembly failed (-84) [ 2471.036102][T24118] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2471.252005][T24118] usb 4-1: Using ep0 maxpacket: 16 [ 2471.286146][T24118] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2471.294974][T24118] usb 4-1: config 0 has no interface number 0 [ 2471.301556][T24118] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2471.312826][T24118] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2471.323088][T24118] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2471.332696][T24118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2471.435122][T24118] usb 4-1: config 0 descriptor?? [ 2472.247491][T24118] uclogic 0003:28BD:0071.002E: failed retrieving string descriptor #100: -71 [ 2472.264643][T24118] uclogic 0003:28BD:0071.002E: failed retrieving pen parameters: -71 [ 2472.284244][T24118] uclogic 0003:28BD:0071.002E: pen probing failed: -71 [ 2472.295987][T24118] uclogic 0003:28BD:0071.002E: failed probing parameters: -71 [ 2472.304102][T24118] uclogic 0003:28BD:0071.002E: probe with driver uclogic failed with error -71 [ 2472.393057][T24118] usb 4-1: USB disconnect, device number 17 [ 2472.486633][T23993] Bluetooth: hci1: command 0x1003 tx timeout [ 2472.493350][ T9736] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2474.187736][T26772] loop5: detected capacity change from 0 to 512 [ 2474.198236][T26772] EXT4-fs: Ignoring removed nobh option [ 2474.499398][T26772] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.6639: iget: bad i_size value: 38620345925642 [ 2474.589059][T26772] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6639: couldn't read orphan inode 15 (err -117) [ 2474.639584][T26772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2474.822080][T26772] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.6639: bg 0: block 5: invalid block bitmap [ 2474.856419][T26777] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 2475.347474][T26534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2476.737582][T26797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6646'. [ 2477.604199][T26804] loop9: detected capacity change from 0 to 1024 [ 2477.664869][T26804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2477.802052][T26804] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2477.917119][T26804] System zones: 0-1, 3-36 [ 2477.968589][T26804] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2478.773254][T26181] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2479.448806][T23993] Bluetooth: hci7: command 0x0406 tx timeout [ 2480.540575][T26831] loop5: detected capacity change from 0 to 512 [ 2480.636432][T26831] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2480.777797][ T30] audit: type=1326 audit(2000000115.090:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26833 comm="syz.9.6656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2480.801123][ T30] audit: type=1326 audit(2000000115.090:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26833 comm="syz.9.6656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2480.825167][ T30] audit: type=1326 audit(2000000115.100:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26833 comm="syz.9.6656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2480.846316][T26831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2480.848303][ T30] audit: type=1326 audit(2000000115.100:5864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26833 comm="syz.9.6656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2480.865430][T26831] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2480.893777][ T30] audit: type=1326 audit(2000000115.120:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26833 comm="syz.9.6656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2480.923935][ T30] audit: type=1326 audit(2000000115.140:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26833 comm="syz.9.6656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2480.946990][ T30] audit: type=1326 audit(2000000115.230:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26833 comm="syz.9.6656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2480.978551][ T30] audit: type=1326 audit(2000000115.230:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26833 comm="syz.9.6656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2481.004406][ T30] audit: type=1326 audit(2000000115.260:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26833 comm="syz.9.6656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2481.027201][ T30] audit: type=1326 audit(2000000115.280:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26833 comm="syz.9.6656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 2482.166275][T26840] loop9: detected capacity change from 0 to 512 [ 2482.221937][T26840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2482.380624][T26840] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 2482.389183][T26840] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 2482.489922][T26840] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2482.501483][T26840] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 2482.518336][T26840] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 2482.568026][T26840] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6657: bg 0: block 40: padding at end of block bitmap is not set [ 2482.641020][T26840] EXT4-fs (loop9): Remounting filesystem read-only [ 2482.650307][T26840] EXT4-fs (loop9): 1 truncate cleaned up [ 2482.658673][T26840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2483.192063][T26181] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2484.301328][T26848] loop6: detected capacity change from 0 to 2048 [ 2484.542244][T26848] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2484.565314][T26848] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2484.729458][T26534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2485.030481][T20407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2487.632914][T24118] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2487.864986][T24118] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2487.876470][T24118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2487.887910][T24118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2487.899559][T24118] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2488.068602][T24118] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2488.078767][T24118] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2488.087463][T24118] usb 4-1: Manufacturer: syz [ 2488.167201][T24118] usb 4-1: config 0 descriptor?? [ 2488.616634][T24118] appleir 0003:05AC:8243.002F: unknown main item tag 0x0 [ 2488.737205][T24118] appleir 0003:05AC:8243.002F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2488.881075][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2488.881163][ T30] audit: type=1326 audit(2000000123.200:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26860 comm="syz.5.6665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2488.971804][T24118] usb 4-1: USB disconnect, device number 18 [ 2489.086132][ T30] audit: type=1326 audit(2000000123.270:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26860 comm="syz.5.6665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2489.109243][ T30] audit: type=1326 audit(2000000123.270:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26860 comm="syz.5.6665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2489.132086][ T30] audit: type=1326 audit(2000000123.290:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26860 comm="syz.5.6665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2489.158348][ T30] audit: type=1326 audit(2000000123.290:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26860 comm="syz.5.6665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2489.182408][ T30] audit: type=1326 audit(2000000123.330:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26860 comm="syz.5.6665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2489.688030][T23993] Bluetooth: hci6: command 0x0406 tx timeout [ 2490.205539][T26871] loop3: detected capacity change from 0 to 1024 [ 2490.242241][T26871] EXT4-fs: quotafile must be on filesystem root [ 2490.419306][T26873] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6670'. [ 2493.939057][ T3825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2494.189743][ T3825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2494.412279][ T3825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2494.653863][ T3825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.241196][T26886] loop5: detected capacity change from 0 to 512 [ 2495.276018][T26886] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 2495.300306][T26886] EXT4-fs (loop5): invalid journal inode [ 2495.312929][T26886] EXT4-fs (loop5): can't get journal size [ 2495.432333][T26886] EXT4-fs (loop5): 1 truncate cleaned up [ 2495.440831][T26886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2495.484732][ T3825] bridge_slave_1: left allmulticast mode [ 2495.490804][ T3825] bridge_slave_1: left promiscuous mode [ 2495.497773][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 2495.661287][ T3825] bridge_slave_0: left allmulticast mode [ 2495.667343][ T3825] bridge_slave_0: left promiscuous mode [ 2495.673966][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 2495.738999][T26886] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6676'. [ 2496.386466][ T30] audit: type=1326 audit(2000000130.680:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26893 comm="syz.9.6678" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x0 [ 2497.300505][T26899] loop6: detected capacity change from 0 to 512 [ 2497.458856][ T3825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2497.528888][ T3825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2497.538612][T26899] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2497.539078][T26899] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2497.588477][ T3825] bond0 (unregistering): Released all slaves [ 2497.777271][ T3825] tipc: Left network mode [ 2498.048213][T26534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2498.352295][ T3825] hsr_slave_0: left promiscuous mode [ 2498.397608][ T3825] hsr_slave_1: left promiscuous mode [ 2498.406632][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2498.414238][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2498.455501][T20407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2498.481514][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2498.490198][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2498.658431][ T3825] veth1_macvtap: left promiscuous mode [ 2498.664334][ T3825] veth0_macvtap: left promiscuous mode [ 2498.671929][ T3825] veth1_vlan: left promiscuous mode [ 2498.681263][ T3825] veth0_vlan: left promiscuous mode [ 2498.721013][T26908] loop9: detected capacity change from 0 to 1024 [ 2498.766833][T26908] EXT4-fs: Ignoring removed orlov option [ 2498.837158][T26908] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 2498.942832][T26908] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2499.556271][T26920] loop6: detected capacity change from 0 to 256 [ 2499.630234][T26920] vfat: Bad value for 'uid' [ 2499.634985][T26920] vfat: Bad value for 'uid' [ 2499.933727][T26916] loop3: detected capacity change from 0 to 4096 [ 2500.039158][T26916] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 2500.148757][T26916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2501.038111][ T3825] team0 (unregistering): Port device team_slave_1 removed [ 2501.088526][ T3825] team0 (unregistering): Port device team_slave_0 removed [ 2501.121547][T26154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2502.192626][ T30] audit: type=1326 audit(2000000136.460:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26935 comm="syz.5.6694" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 2502.375986][T26181] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2506.490129][T26971] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6706'. [ 2507.787465][ T30] audit: type=1326 audit(2000000142.100:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26979 comm="syz.4.6710" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x0 [ 2508.127389][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2508.696108][T20293] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 2508.948166][T20293] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2508.960600][T20293] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2508.973399][T20293] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2508.985049][T20293] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2509.111612][T20293] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2509.124294][T20293] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2509.139682][T20293] usb 10-1: Manufacturer: syz [ 2509.216336][T20293] usb 10-1: config 0 descriptor?? [ 2509.672719][T20293] appleir 0003:05AC:8243.0030: unknown main item tag 0x0 [ 2509.713047][T20293] appleir 0003:05AC:8243.0030: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 2509.910403][T20293] usb 10-1: USB disconnect, device number 6 [ 2513.680903][ T30] audit: type=1326 audit(2000000147.990:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27018 comm="syz.3.6726" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 2515.136178][T27024] loop3: detected capacity change from 0 to 512 [ 2515.226674][T27024] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: comm syz.3.6728: inode #1792: comm syz.3.6728: iget: illegal inode # [ 2515.255355][T27024] EXT4-fs (loop3): Remounting filesystem read-only [ 2515.262281][T27024] EXT4-fs (loop3): no journal found [ 2515.271338][T27024] EXT4-fs (loop3): can't get journal size [ 2515.321819][T27024] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 2515.344583][T27024] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 2515.355201][T27024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2515.766315][T24901] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2516.007691][T24901] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2516.019514][T24901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2516.031170][T24901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2516.042860][T24901] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2516.206300][T24901] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2516.216086][T24901] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2516.224768][T24901] usb 10-1: Manufacturer: syz [ 2516.305563][T24901] usb 10-1: config 0 descriptor?? [ 2516.752647][T24901] appleir 0003:05AC:8243.0031: unknown main item tag 0x0 [ 2516.859885][T24901] appleir 0003:05AC:8243.0031: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 2516.953464][T24901] usb 10-1: USB disconnect, device number 7 [ 2517.589960][ T30] audit: type=1326 audit(2000000151.900:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27050 comm="syz.6.6738" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x0 [ 2518.837716][T27065] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6742'. [ 2518.847440][T27065] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6742'. [ 2519.546273][T26154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2519.679320][T27069] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2520.107296][T20293] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2520.286208][T20293] usb 4-1: Using ep0 maxpacket: 16 [ 2520.322302][T20293] usb 4-1: config 0 has no interfaces? [ 2520.356707][T20293] usb 4-1: config 0 has no interfaces? [ 2520.378545][T20293] usb 4-1: config 0 has no interfaces? [ 2520.456266][T20293] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2520.465592][T20293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2520.474062][T20293] usb 4-1: Product: syz [ 2520.478943][T20293] usb 4-1: Manufacturer: syz [ 2520.483750][T20293] usb 4-1: SerialNumber: syz [ 2520.584305][T20293] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2520.595399][T20293] r8152-cfgselector 4-1: config 0 descriptor?? [ 2521.035965][T20293] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 2521.159871][T27084] loop5: detected capacity change from 0 to 512 [ 2521.243888][T20293] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2521.255352][T20293] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2521.266896][T20293] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2521.278415][T20293] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2521.326859][T20293] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2521.336480][T20293] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2521.344805][T20293] usb 7-1: Manufacturer: syz [ 2521.356078][T27084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2521.373732][T20293] usb 7-1: config 0 descriptor?? [ 2521.573477][ T30] audit: type=1326 audit(2000000155.890:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27087 comm="syz.4.6752" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x0 [ 2521.633551][T26534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2521.839410][T20293] appleir 0003:05AC:8243.0032: unknown main item tag 0x0 [ 2521.886425][T20293] appleir 0003:05AC:8243.0032: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 2521.953193][ T30] audit: type=1326 audit(2000000156.270:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27090 comm="syz.5.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2521.976449][ T30] audit: type=1326 audit(2000000156.270:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27090 comm="syz.5.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2521.999260][ T30] audit: type=1326 audit(2000000156.270:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27090 comm="syz.5.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2522.021901][ T30] audit: type=1326 audit(2000000156.270:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27090 comm="syz.5.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2522.047158][ T30] audit: type=1326 audit(2000000156.270:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27090 comm="syz.5.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2522.063158][T20293] usb 7-1: USB disconnect, device number 49 [ 2522.071504][ T30] audit: type=1326 audit(2000000156.270:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27090 comm="syz.5.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2522.098736][ T30] audit: type=1326 audit(2000000156.270:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27090 comm="syz.5.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2522.121221][ T30] audit: type=1326 audit(2000000156.270:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27090 comm="syz.5.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2522.146395][ T30] audit: type=1326 audit(2000000156.270:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27090 comm="syz.5.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2523.017105][T20293] r8152-cfgselector 4-1: USB disconnect, device number 19 [ 2524.281621][T27101] loop3: detected capacity change from 0 to 8192 [ 2524.337671][T27101] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2528.737784][T24118] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2528.943034][T24118] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2528.954528][T24118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2528.966128][T24118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2528.977614][T24118] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2529.029550][T27131] overlayfs: failed to resolve './bus': -2 [ 2529.112279][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2529.112364][ T30] audit: type=1326 audit(2000000163.430:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.4.6770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2529.143895][ T30] audit: type=1326 audit(2000000163.430:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.4.6770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=184 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2529.166605][ T30] audit: type=1326 audit(2000000163.430:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.4.6770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2529.189677][ T30] audit: type=1326 audit(2000000163.430:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.4.6770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2529.220007][ T30] audit: type=1326 audit(2000000163.430:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.4.6770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2529.253199][T24118] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2529.262967][T24118] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2529.271430][T24118] usb 4-1: Manufacturer: syz [ 2529.283817][T24118] usb 4-1: config 0 descriptor?? [ 2529.335005][ T30] audit: type=1326 audit(2000000163.570:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.4.6770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2529.358185][ T30] audit: type=1326 audit(2000000163.570:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.4.6770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2529.381089][ T30] audit: type=1326 audit(2000000163.570:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.4.6770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2529.411569][ T30] audit: type=1326 audit(2000000163.570:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.4.6770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2529.437255][ T30] audit: type=1326 audit(2000000163.570:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.4.6770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2529.753116][T24118] appleir 0003:05AC:8243.0033: unknown main item tag 0x0 [ 2529.780500][T24118] appleir 0003:05AC:8243.0033: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2530.053806][T24118] usb 4-1: USB disconnect, device number 20 [ 2531.125176][T27141] loop3: detected capacity change from 0 to 128 [ 2531.220199][T27141] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2531.285475][T27141] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2531.318488][T27141] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2532.177874][T27141] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 2532.752059][T26154] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2534.173852][T23993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2534.184714][T23993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2534.198627][T23993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2534.256707][T23993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2534.285811][T23993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2535.897065][T27160] chnl_net:caif_netlink_parms(): no params data found [ 2535.976516][T24901] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 2536.173354][T24901] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2536.184862][T24901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2536.196558][T24901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2536.208343][T24901] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2536.326736][ T9736] Bluetooth: hci0: command tx timeout [ 2536.460438][T24901] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2536.473119][T24901] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2536.482614][T24901] usb 7-1: Manufacturer: syz [ 2536.568390][T24901] usb 7-1: config 0 descriptor?? [ 2537.029087][T24901] usbhid 7-1:0.0: can't add hid device: -71 [ 2537.035992][T24901] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2537.081421][T24901] usb 7-1: USB disconnect, device number 50 [ 2537.314640][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2537.314730][ T30] audit: type=1326 audit(2000000171.630:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27185 comm="syz.5.6788" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 2537.812236][T27192] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6789'. [ 2538.031398][T27191] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6789'. [ 2538.095375][T27160] bridge0: port 1(bridge_slave_0) entered blocking state [ 2538.114905][T27160] bridge0: port 1(bridge_slave_0) entered disabled state [ 2538.124801][T27160] bridge_slave_0: entered allmulticast mode [ 2538.135037][T27160] bridge_slave_0: entered promiscuous mode [ 2538.163865][T27160] bridge0: port 2(bridge_slave_1) entered blocking state [ 2538.172043][T27160] bridge0: port 2(bridge_slave_1) entered disabled state [ 2538.180188][T27160] bridge_slave_1: entered allmulticast mode [ 2538.190663][T27160] bridge_slave_1: entered promiscuous mode [ 2538.412480][ T9736] Bluetooth: hci0: command tx timeout [ 2538.450280][T27160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2538.474118][T27160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2538.795331][T27160] team0: Port device team_slave_0 added [ 2538.889755][T27160] team0: Port device team_slave_1 added [ 2539.372345][T27160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2539.381072][T27160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2539.408154][T27160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2539.516771][T27206] tipc: Failed to remove unknown binding: 66,1,1/0:4024677666/4024677668 [ 2539.562519][T27206] tipc: Failed to remove unknown binding: 66,1,1/0:4024677666/4024677668 [ 2539.571684][T27206] tipc: Failed to remove unknown binding: 66,1,1/0:4024677666/4024677668 [ 2539.594388][T27160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2539.601840][T27160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2539.628391][T27160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2540.332054][T27218] loop5: detected capacity change from 0 to 512 [ 2540.369969][T27160] hsr_slave_0: entered promiscuous mode [ 2540.370520][T27218] EXT4-fs: Ignoring removed mblk_io_submit option [ 2540.381575][T27160] hsr_slave_1: entered promiscuous mode [ 2540.382671][T27218] EXT4-fs: inline encryption not supported [ 2540.394586][T27218] EXT4-fs: Ignoring removed mblk_io_submit option [ 2540.460827][T27218] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2540.474746][T27218] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2540.499553][ T9736] Bluetooth: hci0: command tx timeout [ 2540.580524][T24118] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2540.601063][T27218] EXT4-fs (loop5): 1 truncate cleaned up [ 2540.610082][T27218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2540.702706][ T30] audit: type=1326 audit(2000000175.020:5921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27219 comm="syz.6.6801" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x0 [ 2540.768800][T27218] netlink: 872 bytes leftover after parsing attributes in process `syz.5.6799'. [ 2540.803915][T24118] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2540.815227][T24118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2540.826859][T24118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2540.838403][T24118] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2540.953317][T24118] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2540.962927][T24118] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2540.975122][T24118] usb 4-1: Manufacturer: syz [ 2541.045421][T24118] usb 4-1: config 0 descriptor?? [ 2541.312586][T26534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2541.476461][T24118] usbhid 4-1:0.0: can't add hid device: -71 [ 2541.497765][T24118] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2541.554115][T24118] usb 4-1: USB disconnect, device number 21 [ 2542.171493][T27160] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2542.383035][T27160] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2542.567114][ T9736] Bluetooth: hci0: command tx timeout [ 2542.612359][T27160] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2542.753929][T27160] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2543.382485][T27160] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2543.534390][T27160] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2543.664632][T27160] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2543.809909][T27160] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2543.958329][T24901] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 2544.176537][T24901] usb 7-1: Using ep0 maxpacket: 16 [ 2544.200559][T24901] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2544.209225][T24901] usb 7-1: config 0 has no interface number 0 [ 2544.215569][T24901] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2544.227091][T24901] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2544.237337][T24901] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2544.249620][T24901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.326928][ T30] audit: type=1326 audit(2000000178.630:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27254 comm="syz.4.6815" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x0 [ 2544.354115][T24118] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2544.435420][T24901] usb 7-1: config 0 descriptor?? [ 2544.585599][T24118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2544.597461][T24118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2544.607963][T24118] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2544.617530][T24118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.763328][T24118] usb 4-1: config 0 descriptor?? [ 2545.390557][T24118] hid-steam 0003:28DE:1142.0034: unknown main item tag 0x0 [ 2545.467519][T24118] hid-steam 0003:28DE:1142.0034: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 2545.541550][T24118] hid-steam 0003:28DE:1142.0034: Steam wireless receiver connected [ 2545.629859][T27160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2545.664425][T24118] hid-steam 0003:28DE:1142.0035: unknown main item tag 0x0 [ 2545.776921][T24118] hid-steam 0003:28DE:1142.0035: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 2545.889869][T27160] 8021q: adding VLAN 0 to HW filter on device team0 [ 2545.923604][T24118] usb 4-1: USB disconnect, device number 22 [ 2545.962261][T24118] hid-steam 0003:28DE:1142.0034: Steam wireless receiver disconnected [ 2546.024209][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 2546.031930][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2546.194205][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 2546.201939][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2546.366700][ T30] audit: type=1326 audit(2000000180.670:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27256 comm="syz.4.6816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2546.390921][ T30] audit: type=1326 audit(2000000180.670:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27256 comm="syz.4.6816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2546.752139][ T30] audit: type=1326 audit(2000000180.790:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27256 comm="syz.4.6816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=99 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2546.775199][ T30] audit: type=1326 audit(2000000180.790:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27256 comm="syz.4.6816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2546.798412][ T30] audit: type=1326 audit(2000000180.790:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27256 comm="syz.4.6816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2547.222685][T24901] usbhid 7-1:0.1: can't add hid device: -71 [ 2547.230483][T24901] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 2547.309557][T24901] usb 7-1: USB disconnect, device number 51 [ 2547.525472][T12911] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2547.772045][T12911] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2547.783504][T12911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2547.795120][T12911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2547.807262][T12911] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2548.013293][T12911] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2548.023526][T12911] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2548.034960][T12911] usb 4-1: Manufacturer: syz [ 2548.131239][T12911] usb 4-1: config 0 descriptor?? [ 2548.629403][T12911] usbhid 4-1:0.0: can't add hid device: -71 [ 2548.636360][T12911] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2548.759724][T12911] usb 4-1: USB disconnect, device number 23 [ 2549.245613][T27160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2549.728508][ T30] audit: type=1326 audit(2000000184.040:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27283 comm="syz.4.6825" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x0 [ 2550.526151][T26591] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 2550.740459][T26591] usb 4-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2550.752149][T26591] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2550.759403][T26591] usb 4-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 2550.768827][T26591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2550.838440][T26591] usb 4-1: config 0 descriptor?? [ 2550.847447][T27291] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2551.129946][T23993] Bluetooth: hci3: command 0x0406 tx timeout [ 2551.480101][T26591] wacom 0003:056A:00DA.0036: unbalanced delimiter at end of report description [ 2551.551193][T26591] wacom 0003:056A:00DA.0036: parse failed [ 2551.557922][T26591] wacom 0003:056A:00DA.0036: probe with driver wacom failed with error -22 [ 2551.704805][T24901] usb 4-1: USB disconnect, device number 24 [ 2552.209184][T27160] veth0_vlan: entered promiscuous mode [ 2552.224272][T27304] loop5: detected capacity change from 0 to 1024 [ 2552.378842][T27304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2552.444687][T27160] veth1_vlan: entered promiscuous mode [ 2552.915066][T27160] veth0_macvtap: entered promiscuous mode [ 2552.986730][T27160] veth1_macvtap: entered promiscuous mode [ 2553.191345][T27160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2553.203553][T26591] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2553.238677][T26534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2553.280905][T27160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2553.404411][ T3825] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2553.434643][ T3825] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2553.450558][T26591] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2553.464980][T26591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2553.482362][T26591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2553.495790][T26591] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2553.548287][ T3825] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2553.567644][T16348] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2553.594309][T26591] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2553.605082][T26591] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2553.614988][T26591] usb 4-1: Manufacturer: syz [ 2553.683746][T26591] usb 4-1: config 0 descriptor?? [ 2554.124703][T26591] usbhid 4-1:0.0: can't add hid device: -71 [ 2554.131810][T26591] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2554.162082][T26591] usb 4-1: USB disconnect, device number 25 [ 2557.141759][T27346] overlayfs: failed to resolve './bus': -2 [ 2557.597171][T24901] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 2557.847264][T24901] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2557.858520][T24901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2557.872653][T24901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2557.885092][T24901] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2557.982026][T24901] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2557.994731][T24901] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2558.004340][T24901] usb 7-1: Manufacturer: syz [ 2558.016276][T24901] usb 7-1: config 0 descriptor?? [ 2558.467952][T24901] usbhid 7-1:0.0: can't add hid device: -71 [ 2558.474774][T24901] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2558.593302][T24901] usb 7-1: USB disconnect, device number 52 [ 2561.079045][T27393] loop6: detected capacity change from 0 to 512 [ 2561.154596][T27393] EXT4-fs: Ignoring removed mblk_io_submit option [ 2561.162050][T27393] ext4: Unknown parameter 'seclabel' [ 2561.435152][ T3825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2561.443404][ T3825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2561.642496][T21813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2561.651302][T21813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2561.860442][T24118] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2562.098087][T24118] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2562.109537][T24118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2562.120986][T24118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2562.132551][T24118] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2562.293382][T24118] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2562.302924][T24118] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2562.311613][T24118] usb 4-1: Manufacturer: syz [ 2562.355604][T24118] usb 4-1: config 0 descriptor?? [ 2562.433119][T27409] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6864'. [ 2562.546338][T27408] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6864'. [ 2562.807769][T24118] usbhid 4-1:0.0: can't add hid device: -71 [ 2562.814841][T24118] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2562.853777][T24118] usb 4-1: USB disconnect, device number 26 [ 2564.379303][T27423] loop5: detected capacity change from 0 to 512 [ 2564.410100][T27423] EXT4-fs: Ignoring removed orlov option [ 2564.495194][T27423] EXT4-fs: Mount option(s) incompatible with ext2 [ 2567.339529][T27444] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6878'. [ 2567.456933][T27442] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6878'. [ 2569.159719][T27455] loop6: detected capacity change from 0 to 512 [ 2569.199701][T27455] EXT4-fs: Ignoring removed orlov option [ 2569.260990][T27455] EXT4-fs: Mount option(s) incompatible with ext2 [ 2569.553490][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2572.254181][T27470] tipc: Started in network mode [ 2572.259699][T27470] tipc: Node identity 3a772ec2e719, cluster identity 4711 [ 2572.268296][T27470] tipc: Enabled bearer , priority 0 [ 2572.357850][T27469] tipc: Resetting bearer [ 2572.561411][T27469] tipc: Disabling bearer [ 2572.855237][T27478] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6891'. [ 2572.920773][T27477] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6891'. [ 2573.511836][T27485] loop8: detected capacity change from 0 to 256 [ 2573.618995][T27485] exfat: Deprecated parameter 'utf8' [ 2573.624994][T27485] exfat: Unknown parameter 'umˆ—Ãask' [ 2574.319711][T27491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2576.029235][T27508] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6904'. [ 2576.088590][T27507] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6904'. [ 2577.046587][T24118] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2577.238995][T24118] usb 7-1: Using ep0 maxpacket: 16 [ 2577.277869][T24118] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2577.288834][T24118] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2577.398108][T24118] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2577.407913][T24118] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2577.416538][T24118] usb 7-1: Product: syz [ 2577.424383][T24118] usb 7-1: Manufacturer: syz [ 2577.430401][T24118] usb 7-1: SerialNumber: syz [ 2577.762417][T24118] usb 7-1: 0:2 : does not exist [ 2577.808969][T24118] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2578.028100][T24118] usb 7-1: USB disconnect, device number 53 [ 2579.614509][ T30] audit: type=1326 audit(2000000213.910:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27518 comm="syz.8.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 2579.765444][ T30] audit: type=1326 audit(2000000213.970:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27518 comm="syz.8.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 2579.810682][ T30] audit: type=1326 audit(2000000213.990:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27518 comm="syz.8.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 2579.836352][ T30] audit: type=1326 audit(2000000213.990:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27518 comm="syz.8.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 2579.859429][ T30] audit: type=1326 audit(2000000213.990:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27518 comm="syz.8.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 2579.884399][ T30] audit: type=1326 audit(2000000214.000:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27518 comm="syz.8.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 2579.913376][ T30] audit: type=1326 audit(2000000214.040:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27518 comm="syz.8.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 2579.937885][ T30] audit: type=1326 audit(2000000214.040:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27518 comm="syz.8.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 2579.960656][ T30] audit: type=1326 audit(2000000214.060:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27518 comm="syz.8.6910" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 2581.557446][T27535] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6915'. [ 2581.644989][T27532] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6915'. [ 2583.517053][T27554] block device autoloading is deprecated and will be removed. [ 2584.630753][T27562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6926'. [ 2585.439363][T27567] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6928'. [ 2585.537486][T27566] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6928'. [ 2589.613987][T27578] loop6: detected capacity change from 0 to 128 [ 2589.917269][T27578] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2589.991927][T27578] ext4 filesystem being mounted at /518/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2590.157948][T27578] EXT4-fs (loop6): shut down requested (1) [ 2590.558739][T20407] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2592.106939][T27595] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6939'. [ 2592.159488][T27594] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6939'. [ 2594.161025][T27603] ip6gre1: entered allmulticast mode [ 2594.562565][ T57] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2594.797480][ T57] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2595.057343][ T57] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2595.234548][ T57] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2595.788739][ T57] bridge_slave_1: left allmulticast mode [ 2595.794752][ T57] bridge_slave_1: left promiscuous mode [ 2595.801724][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 2595.905999][ T57] bridge_slave_0: left allmulticast mode [ 2595.911921][ T57] bridge_slave_0: left promiscuous mode [ 2595.918907][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 2596.443008][T27625] loop5: detected capacity change from 0 to 512 [ 2596.536101][T27625] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2596.642085][T27625] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.6949: corrupted in-inode xattr: overlapping e_value [ 2596.760726][T27625] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6949: couldn't read orphan inode 15 (err -117) [ 2596.899023][T27625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2597.175368][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2597.299291][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2597.366580][ T57] bond0 (unregistering): Released all slaves [ 2597.924285][T26534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2598.126178][ T57] hsr_slave_0: left promiscuous mode [ 2598.167740][ T57] hsr_slave_1: left promiscuous mode [ 2598.176270][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2598.183877][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2598.274186][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2598.282369][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2598.303488][T27634] loop6: detected capacity change from 0 to 8192 [ 2598.442569][ T57] veth1_vlan: left promiscuous mode [ 2598.448415][ T57] veth0_vlan: left promiscuous mode [ 2600.369975][ T57] team0 (unregistering): Port device team_slave_1 removed [ 2600.428916][ T57] team0 (unregistering): Port device team_slave_0 removed [ 2600.720354][T27660] loop8: detected capacity change from 0 to 512 [ 2600.833480][T27660] EXT4-fs (loop8): fragment/cluster size (2048) != block size (4096) [ 2601.170152][ T30] audit: type=1326 audit(2000000235.460:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27662 comm="syz.3.6965" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 2604.514441][T27689] loop3: detected capacity change from 0 to 1024 [ 2604.647277][T27689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2604.663169][T27689] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2605.012231][ T57] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 2605.054053][ T57] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 2605.067492][ T57] EXT4-fs (loop3): This should not happen!! Data will be lost [ 2605.067492][ T57] [ 2605.239385][T26154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2605.648944][T27697] netlink: 'syz.8.6987': attribute type 4 has an invalid length. [ 2605.736967][T27699] loop6: detected capacity change from 0 to 512 [ 2605.757856][T27700] netlink: 'syz.8.6987': attribute type 4 has an invalid length. [ 2605.805395][T27699] EXT4-fs (loop6): fragment/cluster size (2048) != block size (4096) [ 2606.432151][T27702] loop3: detected capacity change from 0 to 1024 [ 2606.482560][T27702] EXT4-fs: Ignoring removed bh option [ 2606.488711][T27702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2606.578065][ T30] audit: type=1326 audit(2000000240.890:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27703 comm="syz.8.6979" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x0 [ 2606.633197][T27702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2607.300409][T26154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2607.639858][T24901] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 2607.816527][T24901] usb 9-1: Using ep0 maxpacket: 16 [ 2607.837733][T24901] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2607.849250][T24901] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2607.910640][T24901] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2607.920502][T24901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2607.929032][T24901] usb 9-1: Product: syz [ 2607.933412][T24901] usb 9-1: Manufacturer: syz [ 2607.941264][T24901] usb 9-1: SerialNumber: syz [ 2608.000951][ T30] audit: type=1326 audit(2000000242.300:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27720 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2608.024539][ T30] audit: type=1326 audit(2000000242.300:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27720 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2608.300469][T24901] usb 9-1: 0:2 : does not exist [ 2608.397044][T24901] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 2608.406476][ T30] audit: type=1326 audit(2000000242.510:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27720 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2608.429478][ T30] audit: type=1326 audit(2000000242.520:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27720 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 2608.658054][T24901] usb 9-1: USB disconnect, device number 14 [ 2608.809829][T27726] loop6: detected capacity change from 0 to 256 [ 2609.138344][T27726] FAT-fs (loop6): Directory bread(block 64) failed [ 2609.145429][T27726] FAT-fs (loop6): Directory bread(block 65) failed [ 2609.152568][T27726] FAT-fs (loop6): Directory bread(block 66) failed [ 2609.159584][T27726] FAT-fs (loop6): Directory bread(block 67) failed [ 2609.170310][T27726] FAT-fs (loop6): Directory bread(block 68) failed [ 2609.183672][T27726] FAT-fs (loop6): Directory bread(block 69) failed [ 2609.192445][T27726] FAT-fs (loop6): Directory bread(block 70) failed [ 2609.199506][T27726] FAT-fs (loop6): Directory bread(block 71) failed [ 2609.207902][T27726] FAT-fs (loop6): Directory bread(block 72) failed [ 2609.214687][T27726] FAT-fs (loop6): Directory bread(block 73) failed [ 2609.517563][T27732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6992'. [ 2609.906277][ T30] audit: type=1326 audit(2000000244.210:5944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27735 comm="syz.4.6993" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x0 [ 2610.581253][T27746] loop8: detected capacity change from 0 to 128 [ 2611.509615][ T4040] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2611.716661][ T4040] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2611.943485][ T4040] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2612.075820][ T4040] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2612.484759][ T4040] bridge_slave_1: left allmulticast mode [ 2612.491174][ T4040] bridge_slave_1: left promiscuous mode [ 2612.498225][ T4040] bridge0: port 2(bridge_slave_1) entered disabled state [ 2612.603755][ T4040] bridge_slave_0: left allmulticast mode [ 2612.610000][ T4040] bridge_slave_0: left promiscuous mode [ 2612.616894][ T4040] bridge0: port 1(bridge_slave_0) entered disabled state [ 2613.458523][ T4040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2613.518673][ T4040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2613.552933][ T4040] bond0 (unregistering): Released all slaves [ 2613.821742][ T4040] tipc: Left network mode [ 2614.303760][ T4040] hsr_slave_0: left promiscuous mode [ 2614.347113][ T4040] hsr_slave_1: left promiscuous mode [ 2614.355548][ T4040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2614.364628][ T4040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2614.469491][ T4040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2614.477932][ T4040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2614.518623][ T4040] veth1_macvtap: left promiscuous mode [ 2614.524550][ T4040] veth0_macvtap: left promiscuous mode [ 2614.530815][ T4040] veth1_vlan: left promiscuous mode [ 2614.536555][ T4040] veth0_vlan: left promiscuous mode [ 2615.634190][T23993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2615.658638][T23993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2615.684565][T23993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2615.702016][T23993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2615.717956][T23993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2616.183506][ T4040] team0 (unregistering): Port device team_slave_1 removed [ 2616.261164][ T4040] team0 (unregistering): Port device team_slave_0 removed [ 2617.781157][T23993] Bluetooth: hci0: command tx timeout [ 2618.005517][T27769] chnl_net:caif_netlink_parms(): no params data found [ 2619.734594][T27769] bridge0: port 1(bridge_slave_0) entered blocking state [ 2619.743278][T27769] bridge0: port 1(bridge_slave_0) entered disabled state [ 2619.753120][T27769] bridge_slave_0: entered allmulticast mode [ 2619.763250][T27769] bridge_slave_0: entered promiscuous mode [ 2619.846855][T23993] Bluetooth: hci0: command tx timeout [ 2619.858251][T27769] bridge0: port 2(bridge_slave_1) entered blocking state [ 2619.866337][T27769] bridge0: port 2(bridge_slave_1) entered disabled state [ 2619.874156][T27769] bridge_slave_1: entered allmulticast mode [ 2619.884454][T27769] bridge_slave_1: entered promiscuous mode [ 2620.086183][T27769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2620.137154][T27769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2620.293388][T27769] team0: Port device team_slave_0 added [ 2620.346422][T27769] team0: Port device team_slave_1 added [ 2620.672323][T27769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2620.679630][T27769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2620.708050][T27769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2620.797697][T27769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2620.804969][T27769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2620.831429][T27769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2620.852965][T27801] netlink: 'syz.4.7016': attribute type 12 has an invalid length. [ 2620.919291][T27803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7018'. [ 2621.089637][T27805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7017'. [ 2621.224529][T27769] hsr_slave_0: entered promiscuous mode [ 2621.239279][T27769] hsr_slave_1: entered promiscuous mode [ 2621.927669][T23993] Bluetooth: hci0: command tx timeout [ 2622.382416][T24901] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2622.560847][T24901] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2622.572438][T24901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2622.586756][T24901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2622.598348][T24901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2622.678723][T24901] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2622.691166][T24901] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2622.700732][T24901] usb 4-1: Manufacturer: syz [ 2622.719794][T24901] usb 4-1: config 0 descriptor?? [ 2622.819240][T27822] loop5: detected capacity change from 0 to 2048 [ 2622.881105][T27822] Alternate GPT is invalid, using primary GPT. [ 2622.891748][T27822] loop5: p1 p2 p3 [ 2622.936104][T12911] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 2623.126907][T12911] usb 7-1: Using ep0 maxpacket: 16 [ 2623.150795][T24901] appleir 0003:05AC:8243.0037: unknown main item tag 0x0 [ 2623.175243][T12911] usb 7-1: config 0 has no interfaces? [ 2623.193388][T12911] usb 7-1: config 0 has no interfaces? [ 2623.229821][T12911] usb 7-1: config 0 has no interfaces? [ 2623.274961][T12911] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2623.281290][T27769] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2623.285026][T12911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2623.303354][T12911] usb 7-1: Product: syz [ 2623.308841][T12911] usb 7-1: Manufacturer: syz [ 2623.313655][T12911] usb 7-1: SerialNumber: syz [ 2623.333344][T24901] appleir 0003:05AC:8243.0037: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2623.423191][T12911] r8152-cfgselector 7-1: Unknown version 0x0000 [ 2623.434360][T12911] r8152-cfgselector 7-1: config 0 descriptor?? [ 2623.438889][T27769] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2623.463126][T12911] usb 4-1: USB disconnect, device number 27 [ 2623.495505][T27769] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2623.567809][T27769] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2624.006517][T23993] Bluetooth: hci0: command tx timeout [ 2624.492726][T27836] loop5: detected capacity change from 0 to 256 [ 2624.581507][T27769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2624.581923][T27836] exfat: Deprecated parameter 'namecase' [ 2624.679968][T27769] 8021q: adding VLAN 0 to HW filter on device team0 [ 2624.748060][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 2624.755966][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2624.844762][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 2624.852467][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2624.944592][T27836] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 2625.541376][T27845] 9pnet_fd: Insufficient options for proto=fd [ 2626.074356][T24118] r8152-cfgselector 7-1: USB disconnect, device number 54 [ 2626.633958][T26591] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 2626.817861][T26591] usb 7-1: Using ep0 maxpacket: 16 [ 2626.899153][T26591] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2626.908953][T26591] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2626.917565][T26591] usb 7-1: Product: syz [ 2626.921987][T26591] usb 7-1: Manufacturer: syz [ 2626.926942][T26591] usb 7-1: SerialNumber: syz [ 2626.946892][T26591] usb 7-1: config 0 descriptor?? [ 2626.962556][T26591] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 2626.973098][T26591] usb 7-1: Detected FT232H [ 2627.133213][T27769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2627.262440][T26591] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2627.687893][T26591] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2627.929348][T12911] usb 7-1: USB disconnect, device number 55 [ 2627.981678][T12911] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2627.992905][T12911] ftdi_sio 7-1:0.0: device disconnected [ 2628.814554][T27879] loop6: detected capacity change from 0 to 256 [ 2628.914341][T27769] veth0_vlan: entered promiscuous mode [ 2628.976605][T27769] veth1_vlan: entered promiscuous mode [ 2629.208362][T27769] veth0_macvtap: entered promiscuous mode [ 2629.257819][T12911] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 2629.290265][T27769] veth1_macvtap: entered promiscuous mode [ 2629.458494][T27769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2629.496539][T12911] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2629.507214][T12911] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2629.565849][T27769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2629.610377][T12911] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2629.619963][T12911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2629.629102][T12911] usb 7-1: SerialNumber: syz [ 2629.657972][T16348] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2629.697312][T16348] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2629.753537][ T4040] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2629.774873][T12911] usb 7-1: 0:2 : does not exist [ 2629.826574][ T4040] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2630.216917][T24901] usb 7-1: USB disconnect, device number 56 [ 2630.997637][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2633.046765][T26591] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2633.275374][T26591] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2633.288084][T26591] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2633.299547][T26591] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2633.312978][T26591] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2633.322376][T26591] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2633.398450][T26591] usb 7-1: config 0 descriptor?? [ 2633.897599][T26591] plantronics 0003:047F:FFFF.0038: reserved main item tag 0xd [ 2634.022613][T26591] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2634.170441][T26591] usb 7-1: USB disconnect, device number 57 [ 2635.801850][T24901] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 2635.897581][ T8836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2635.909414][ T8836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2635.999000][T24901] usb 7-1: Using ep0 maxpacket: 16 [ 2636.060511][T24901] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 2636.072571][T24901] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2636.082083][ T3825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2636.082824][T24901] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2636.093440][ T3825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2636.255920][T24901] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2636.265541][T24901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2636.274641][T24901] usb 7-1: SerialNumber: syz [ 2636.343214][T27926] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2637.306265][T24901] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 2637.384644][T24901] usb 7-1: USB disconnect, device number 58 [ 2638.022457][T27942] loop8: detected capacity change from 0 to 256 [ 2638.449118][T26591] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 2638.678710][T26591] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2638.691492][T26591] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2638.735406][T26591] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2638.745455][T26591] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2638.752369][T27949] loop3: detected capacity change from 0 to 128 [ 2638.754007][T26591] usb 9-1: SerialNumber: syz [ 2638.809683][T27949] vfat: Bad value for 'gid' [ 2638.814446][T27949] vfat: Bad value for 'gid' [ 2638.840818][T26591] usb 9-1: 0:2 : does not exist [ 2639.347237][T24901] usb 9-1: USB disconnect, device number 15 [ 2640.446815][T27961] loop8: detected capacity change from 0 to 512 [ 2640.532296][T27961] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.7064: error while reading EA inode 32 err=-116 [ 2640.636841][T27961] EXT4-fs (loop8): Remounting filesystem read-only [ 2640.643955][T27961] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 2640.655785][T27961] EXT4-fs (loop8): 1 orphan inode deleted [ 2640.663872][T27961] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2641.090340][T27769] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2642.022521][T27971] binder_alloc: 27970: binder_alloc_buf, no vma [ 2643.346503][T26591] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2643.607577][T26591] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2643.618968][T26591] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2643.630753][T26591] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2643.642336][T26591] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2643.673078][T26591] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2643.691753][T26591] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2643.703068][T26591] usb 9-1: Manufacturer: syz [ 2643.720969][T26591] usb 9-1: config 0 descriptor?? [ 2644.151331][T26591] appleir 0003:05AC:8243.0039: unknown main item tag 0x0 [ 2644.218659][T26591] appleir 0003:05AC:8243.0039: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 2644.438193][T26591] usb 9-1: USB disconnect, device number 16 [ 2646.722072][T28000] binder_alloc: 27998: binder_alloc_buf, no vma [ 2647.194316][T28004] loop6: detected capacity change from 0 to 1024 [ 2647.285916][T28004] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2647.297584][T28004] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 2647.407241][T28004] JBD2: no valid journal superblock found [ 2647.413280][T28004] EXT4-fs (loop6): Could not load journal inode [ 2648.606274][T24901] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 2648.813532][T24901] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2648.825046][T24901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 2648.836539][T24901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50102, setting to 1024 [ 2648.848263][T24901] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2648.969057][T24901] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2648.978811][T24901] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2648.987342][T24901] usb 7-1: Manufacturer: syz [ 2649.054431][T24901] usb 7-1: config 0 descriptor?? [ 2649.483477][T24901] appleir 0003:05AC:8243.003A: unknown main item tag 0x0 [ 2649.542647][T24901] appleir 0003:05AC:8243.003A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 2649.825251][T24118] usb 7-1: USB disconnect, device number 59 [ 2652.113705][T28036] binder_alloc: 28035: binder_alloc_buf, no vma [ 2652.539265][T28042] loop8: detected capacity change from 0 to 256 [ 2654.186238][ T30] audit: type=1326 audit(2000000288.500:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.6.7102" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x0 [ 2654.912882][T28063] loop3: detected capacity change from 0 to 512 [ 2654.959066][T28063] EXT4-fs: Ignoring removed oldalloc option [ 2655.094919][T28063] EXT4-fs (loop3): 1 truncate cleaned up [ 2655.103554][T28063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2655.992536][T26154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2658.110577][ T30] audit: type=1326 audit(2000000292.430:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28093 comm="syz.6.7115" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x0 [ 2659.302534][T28106] ===================================================== [ 2659.310198][T28106] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 2659.317732][T28106] batadv_get_vid+0x2d0/0x3b0 [ 2659.322627][T28106] batadv_interface_tx+0x2e9/0x1e60 [ 2659.328180][T28106] dev_hard_start_xmit+0x22f/0xa30 [ 2659.333505][T28106] __dev_queue_xmit+0x3c51/0x5e60 [ 2659.338949][T28106] __bpf_redirect+0x162d/0x1760 [ 2659.344059][T28106] bpf_clone_redirect+0x366/0x530 [ 2659.349435][T28106] ___bpf_prog_run+0x1297/0xeba0 [ 2659.354581][T28106] __bpf_prog_run512+0xc5/0x100 [ 2659.359744][T28106] bpf_test_run+0x350/0xab0 [ 2659.364449][T28106] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2659.370319][T28106] bpf_prog_test_run+0x5c2/0xa40 [ 2659.375441][T28106] __sys_bpf+0x89a/0xed0 [ 2659.380106][T28106] __ia32_sys_bpf+0xa4/0xf0 [ 2659.384927][T28106] ia32_sys_call+0xadf/0x4310 [ 2659.389994][T28106] __do_fast_syscall_32+0xb0/0x150 [ 2659.395453][T28106] do_fast_syscall_32+0x38/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2659.400673][T28106] do_SYSENTER_32+0x1f/0x30 [ 2659.405426][T28106] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2659.412158][T28106] [ 2659.414589][T28106] Uninit was created at: [ 2659.419227][T28106] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 2659.425385][T28106] kmalloc_reserve+0x13c/0x4b0 [ 2659.430577][T28106] pskb_expand_head+0x1fc/0x1610 [ 2659.435884][T28106] skb_ensure_writable+0x44e/0x510 [ 2659.441190][T28106] bpf_clone_redirect+0x1c1/0x530 [ 2659.446558][T28106] ___bpf_prog_run+0x1297/0xeba0 [ 2659.451687][T28106] __bpf_prog_run512+0xc5/0x100 [ 2659.457030][T28106] bpf_test_run+0x350/0xab0 [ 2659.461738][T28106] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2659.467535][T28106] bpf_prog_test_run+0x5c2/0xa40 [ 2659.472662][T28106] __sys_bpf+0x89a/0xed0 [ 2659.477290][T28106] __ia32_sys_bpf+0xa4/0xf0 [ 2659.482030][T28106] ia32_sys_call+0xadf/0x4310 [ 2659.487091][T28106] __do_fast_syscall_32+0xb0/0x150 [ 2659.492448][T28106] do_fast_syscall_32+0x38/0x80 [ 2659.497660][T28106] do_SYSENTER_32+0x1f/0x30 [ 2659.502401][T28106] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2659.509185][T28106] [ 2659.511649][T28106] CPU: 0 UID: 0 PID: 28106 Comm: syz.3.7117 Not tainted syzkaller #0 PREEMPT(none) [ 2659.521346][T28106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2659.531673][T28106] ===================================================== [ 2659.538919][T28106] Disabling lock debugging due to kernel taint [ 2659.545206][T28106] Kernel panic - not syncing: kmsan.panic set ... [ 2659.551825][T28106] CPU: 0 UID: 0 PID: 28106 Comm: syz.3.7117 Tainted: G B syzkaller #0 PREEMPT(none) [ 2659.563004][T28106] Tainted: [B]=BAD_PAGE [ 2659.567282][T28106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2659.577612][T28106] Call Trace: [ 2659.581023][T28106] [ 2659.584076][T28106] __dump_stack+0x26/0x30 [ 2659.588649][T28106] dump_stack_lvl+0x53/0x270 [ 2659.593470][T28106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2659.599516][T28106] dump_stack+0x1e/0x25 [ 2659.603896][T28106] vpanic+0x361/0xc50 [ 2659.608135][T28106] panic+0x15d/0x160 [ 2659.612303][T28106] kmsan_report+0x31c/0x320 [ 2659.617013][T28106] ? __msan_warning+0x1b/0x30 [ 2659.621889][T28106] ? batadv_get_vid+0x2d0/0x3b0 [ 2659.626989][T28106] ? batadv_interface_tx+0x2e9/0x1e60 [ 2659.632592][T28106] ? dev_hard_start_xmit+0x22f/0xa30 [ 2659.638100][T28106] ? __dev_queue_xmit+0x3c51/0x5e60 [ 2659.643527][T28106] ? __bpf_redirect+0x162d/0x1760 [ 2659.648769][T28106] ? bpf_clone_redirect+0x366/0x530 [ 2659.654205][T28106] ? ___bpf_prog_run+0x1297/0xeba0 [ 2659.659506][T28106] ? __bpf_prog_run512+0xc5/0x100 [ 2659.664730][T28106] ? bpf_test_run+0x350/0xab0 [ 2659.669612][T28106] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2659.675459][T28106] ? bpf_prog_test_run+0x5c2/0xa40 [ 2659.680759][T28106] ? __sys_bpf+0x89a/0xed0 [ 2659.685360][T28106] ? __ia32_sys_bpf+0xa4/0xf0 [ 2659.690285][T28106] ? ia32_sys_call+0xadf/0x4310 [ 2659.695329][T28106] ? __do_fast_syscall_32+0xb0/0x150 [ 2659.700859][T28106] ? do_fast_syscall_32+0x38/0x80 [ 2659.706132][T28106] ? do_SYSENTER_32+0x1f/0x30 [ 2659.711102][T28106] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2659.718299][T28106] ? kmsan_get_metadata+0xfb/0x160 [ 2659.723636][T28106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2659.729672][T28106] ? kmsan_get_metadata+0xfb/0x160 [ 2659.735008][T28106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2659.741147][T28106] ? batadv_interface_tx+0x81/0x1e60 [ 2659.746680][T28106] ? filter_irq_stacks+0x49/0x190 [ 2659.751983][T28106] ? stack_depot_save_flags+0x35/0x7b0 [ 2659.757740][T28106] ? kmsan_get_metadata+0xfb/0x160 [ 2659.763087][T28106] __msan_warning+0x1b/0x30 [ 2659.767791][T28106] batadv_get_vid+0x2d0/0x3b0 [ 2659.772699][T28106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2659.778749][T28106] batadv_interface_tx+0x2e9/0x1e60 [ 2659.784204][T28106] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2659.790748][T28106] ? kmsan_get_metadata+0xfb/0x160 [ 2659.796184][T28106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2659.802226][T28106] ? __pfx_batadv_interface_tx+0x10/0x10 [ 2659.808105][T28106] dev_hard_start_xmit+0x22f/0xa30 [ 2659.813488][T28106] __dev_queue_xmit+0x3c51/0x5e60 [ 2659.818751][T28106] ? skb_release_data+0xa12/0xac0 [ 2659.824001][T28106] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 2659.830482][T28106] ? kmsan_get_metadata+0xfb/0x160 [ 2659.835799][T28106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2659.841804][T28106] ? __dev_queue_xmit+0x30c/0x5e60 [ 2659.847149][T28106] __bpf_redirect+0x162d/0x1760 [ 2659.852219][T28106] ? kmsan_get_metadata+0xfb/0x160 [ 2659.857533][T28106] bpf_clone_redirect+0x366/0x530 [ 2659.862812][T28106] ___bpf_prog_run+0x1297/0xeba0 [ 2659.867968][T28106] __bpf_prog_run512+0xc5/0x100 [ 2659.873029][T28106] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2659.879552][T28106] ? kmsan_internal_poison_memory+0x7f/0xa0 [ 2659.885624][T28106] ? kmsan_internal_poison_memory+0x4a/0xa0 [ 2659.891710][T28106] ? kmsan_slab_alloc+0xde/0x160 [ 2659.896963][T28106] ? kmem_cache_alloc_noprof+0x81b/0xec0 [ 2659.902807][T28106] ? slab_build_skb+0x5c/0x590 [ 2659.907740][T28106] ? kmsan_get_metadata+0xfb/0x160 [ 2659.913033][T28106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2659.919050][T28106] ? bpf_test_run+0xe1/0xab0 [ 2659.923817][T28106] ? filter_irq_stacks+0x49/0x190 [ 2659.929079][T28106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2659.935092][T28106] ? kmsan_get_metadata+0xfb/0x160 [ 2659.940389][T28106] ? kmsan_get_metadata+0xfb/0x160 [ 2659.945701][T28106] ? kmsan_get_metadata+0xfb/0x160 [ 2659.951005][T28106] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2659.957518][T28106] ? kmsan_get_metadata+0x150/0x160 [ 2659.962929][T28106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2659.968931][T28106] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2659.974572][T28106] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2659.981242][T28106] bpf_test_run+0x350/0xab0 [ 2659.985923][T28106] ? kmsan_get_metadata+0xfb/0x160 [ 2659.991253][T28106] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2659.997763][T28106] ? kmsan_get_metadata+0xfb/0x160 [ 2660.003061][T28106] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2660.009063][T28106] ? bpf_test_run+0x1b0/0xab0 [ 2660.013958][T28106] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2660.019651][T28106] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2660.025658][T28106] bpf_prog_test_run+0x5c2/0xa40 [ 2660.030820][T28106] __sys_bpf+0x89a/0xed0 [ 2660.035258][T28106] __ia32_sys_bpf+0xa4/0xf0 [ 2660.039976][T28106] ia32_sys_call+0xadf/0x4310 [ 2660.044821][T28106] __do_fast_syscall_32+0xb0/0x150 [ 2660.050169][T28106] do_fast_syscall_32+0x38/0x80 [ 2660.055234][T28106] do_SYSENTER_32+0x1f/0x30 [ 2660.059950][T28106] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2660.066520][T28106] RIP: 0023:0xf710e539 [ 2660.070735][T28106] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2660.090522][T28106] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 2660.099113][T28106] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 2660.107226][T28106] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 2660.115313][T28106] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2660.123411][T28106] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2660.131499][T28106] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2660.139627][T28106] [ 2660.143158][T28106] Kernel Offset: disabled [ 2660.147557][T28106] Rebooting in 86400 seconds..