last executing test programs: 51.294421109s ago: executing program 0 (id=1828): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', '', [], 0xa, "fad362da7c84831e8e0bb8b7df25542c4f6dabca5c994dd6c6ae58f2259fc650781bb200518beee69f4bbb6e891273cb5731a6e7e69f4a666b0256f117"}, 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3002006, &(0x7f0000001740)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@nobh}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@noload}, {@prjquota}, {@block_validity}, {@orlov}, {@barrier}, {@quota}]}, 0x1, 0x556, &(0x7f0000001100)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) r4 = socket(0x5, 0x2, 0x1) getsockopt$inet6_mreq(r4, 0x10d, 0xab, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f0000001100)=ANY=[@ANYRES32=r1], 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x99) open(0x0, 0x0, 0x1bc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000010c0)={r6, &(0x7f0000001000)="c6ddc0b3ffdaa6e707a9f9c8b0a490e3987d69e008d60d43d3960e042f0128ca7e35eb41f4708dbe655f8810c0b29b48950b80e53ad769f5a30083289b757ddc788a493d148d389f88f76ecc3d94c46a7c308313910920c231080000000a2f558c330c76c18eeaa4e8966e5d0b0a7bc31416027d9c8b65136b"}, 0x20) mmap(&(0x7f00005fc000/0x3000)=nil, 0x3000, 0x2, 0x50, 0xffffffffffffffff, 0x3000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r7, 0x84, 0x81, &(0x7f0000000040)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) mbind(&(0x7f00007d7000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x908, 0xc, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 25.961090223s ago: executing program 2 (id=1862): syz_open_dev$I2C(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)={'U-', 0x7}, 0x16, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000002e40)='./bus\x00', &(0x7f0000002e80)='nilfs2\x00', 0x12, 0x0) 24.96293876s ago: executing program 2 (id=1865): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @local}, @in={0x2, 0x2, @multicast2}], 0x20) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) syz_mount_image$cramfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x10080, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0], 0x1, 0x154, &(0x7f0000000700)="$eJzszzFrGmEYwPH/eaeWVqtQC7ZDW+jQo2I9T+xWREulQu1Bi0uGENALCWgMCsExCbhlyAe4wUTIJA4hY4bEZDFRCMnnEDIEHA3nCcGQKfP7W477Pw8PvL9+DFWCIOP4Wa2s18x63Sx9+mfks/8Pj45f290LvACaQM1eLjn7J2lYsb8KjLacfOaH5dWy+a1YLdv/ozSoQOaV3d0pH87uS7uFnN34rKmfoffWafoTLTFr7xXIBJymAZM9+AK4eLh3BzSsSLdz8XfQz0W/HizKNHORj2+k+f7B3NGz79q+sEzBPN+3n0nDuon1o1exbud6OMj/MfLGMKHr3xNaXNOSXuNykEtu7qL89m3AwqN7Hg9QgG0JLAk60/noVPIzCfRaY6MS8IaA27UgSA1lOoFeawxzE6u4FHa3U6GgC1lFQhAEQRAEQRAEQRCe6T4AAP//8GRnwg==") syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f000000b100)=ANY=[@ANYBLOB="002ecbc55fe6d6100837adda58fa7d10ab54aee93b992510be054d731ab7da7e75676e729a84f3b6a90100db5e477dbfee9ea3db9e2cdf0af3e9f7718732aaccc2158ad1dc498162eb5e87e3ec955164b6a97fb2a48d7a569258274a727cb0c7227e8f51529264e568b34e6f7ee018b3562d8fdd26e1b83ab2b09862ea8ac241fca01893c02becc286b2b17bd8c515b3dd02562333f6a7273bc91c9841bf3cb673bc8942336c5cebffbb08f82ba108af50c8dabb9628fc8e59c207395f370146898f1f3400f50f5e0566363558fe2c744cbebda08fe49b2155b62fcbb938b0d78d5e36b5e6b7d1c01f8b6423066333a94bb51f311c1d70dc272c6528d8057273e9bffbc8747d7c8a65b368828d39c69fc42125281702192328142ebb5b396e66db522ca6f2ae2ca64ab0d9d3f0eeb890d6b5a376ab004afb2ccc83293222ce378ef0e8d88e873ee168d615985aaabc293ce789dd163747e965405c11730f23faf8053fb37e93d5a54cdce54c1ce09598258ec5892938c5a16cf0c548695c973b45a0bc95feff28efd824744057c5da581fe9215d1a9e358a9da84b4ceb0f586c2ddbabbe2347dd728b8e05ecf90b4c7c9861ce1af7709c9babcdc2bd2175a8496a48942dc2755a5ed6296745ec0810e42050e657b2c0965d423077136da0140277053c8ce91d0000000000000000000000f81a60f8321a29d95e555edc5822e904e5b3821224bb704efb9aea0f736fa06f46b1023fc644c7879a6315e96f6695f65fef95d6dbf22d80c068a20fc98bad02dbeb3c9f478063d2f2f8fd5e8af7a5d5937e5626c71efa3369e99787e78597c01acfa3b273102993abd03263ae4115a65254d32c517eddeb58bbc458d025fdc566906ac145a9db74f46d10805e6c7560f6740cf29445f6aec713655cdd27032c6413f342d8e76782bdc2d96870cf7e84d15838c48aa6af77086acec169846791fbb50b0f648adbc6f4058870827efcf4da44b43c62f3", @ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRES16, @ANYRES16, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd2cc0e8101b9631aa9db6c88c4ea13a8fbc6a23601da47409ecba43e29d90521e4a37f2f57fa7ce2366b5b89b5b9529791fb53b47e83c2014cd5779926a7dd8a0de70a50b2baf658b32d6d108efa8d3b6101762c8308a5b3351fd14516c9c33e6c6bd15e956f84604a27325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafedad4ef237de4595f77f679e98e9dcbf01dc5bcbd5c199b9e95c24b", @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x1, 0x1cd, &(0x7f0000000140)="$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") syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x4, "59d11c5f"}, 0x0, 0x0, 0x0, 0x0}) 22.779651322s ago: executing program 2 (id=1867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="0000000d1f532f5c513dc6450cc3f06be300e37e34168b8d24cd56628c4d2ff82f86d97b9ddb90d9197503dec9add440ff0f74256a770c15af7240341acdf6d4f975f1ac3495249220dabc9d364273fe09dc11cc35f7a54468e039aaeeb3", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf25110000000c0043000400000004000000060010003e0400000600ab0009000000"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfa64}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x48}}, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1643}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)={0x2c, r11, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}}, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r12, r12, 0x0, 0xc3) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000202000000fedbdf250200000058000180060004004e2400000c000700060000002600000008000900340000000800080000000000060004004e2200000600f0ff0c00000018000700060000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20008090) sendmsg$TEAM_CMD_NOOP(r12, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000001500)={0x814, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0xe5, 0x80, 0x1ff}, {0x0, 0x64, 0x0, 0x2}, {0x6, 0x8, 0x1, 0xffff}, {0x5, 0x40, 0x81, 0x8}, {0x40, 0x7e, 0x4e, 0x9}, {0xfffa, 0x20, 0x28, 0x7}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0x5, 0x6, 0x7}, {0xddc, 0x3, 0x80, 0x2}, {0x8001, 0x7, 0x8c, 0x6}, {0x7910, 0xfe, 0xd7, 0x15}, {0x4, 0x1, 0x8, 0x9}, {0x8001, 0xd, 0x9, 0x1}, {0x81, 0xc, 0x6d, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1edf800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1d4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x78e81ac}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6d18}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}]}, 0x814}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x3c, r2, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x3c}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2adc4f1ae44d3d}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x4c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf801}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x21, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @generic={0xe, 0xa, 0x5, 0xc0f7, 0x8bf4}, @map_val={0x18, 0x4}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x76, &(0x7f0000000440)=""/118, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0xb, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12], 0x0, 0x10, 0x2}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x0, 0x0, 0x0) 19.469250666s ago: executing program 2 (id=1868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000", @ANYRES8=r0], 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x452) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) r3 = syz_usbip_server_init(0x5) write(r3, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc50631fb02a0647a3c2ed4c85c8eef57d078ec", 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000280)) sendmmsg$inet6(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0xfff, @mcast1, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="01fff52f904098ee90b257f4e63b933e31a92e0b3d3b72b9ea8d47564ed5a63582", 0x21}, {&(0x7f00000002c0)="a3b17c443cabe49a6c7ddbdeadb5b5231ea7970bdf103c66325609e7e5e55280174464823234a1b1213741a3c1f534e36ddb45ca28eb7bf166f704b4a6728fb3aa32b07f7971bab54d163b7ae5729a47208d963a417e816303", 0x59}, {0x0}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000029000000040000000000000000000000c204000001010000540000002900000039000000290801010000000000000000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffff0a010102200100000000000000000000000000008400000029000000360000003b0d000000000000c2040000002d010500000000000000000100000100000100040181f7508aa7a1a7b2700d4ad04b1beaecaea1b5391cb251dabf6ae37e2a40940c01ccce59a06b97f59563798f6d7088e958ac982257bdaf9e2d9919cf22bd00000000dd8eff835020c02ea19f9eb9aa6ef4706402d7d4"], 0xf4}}], 0x2, 0x4008800) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') mbind(&(0x7f0000596000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) msgget$private(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 18.418320566s ago: executing program 0 (id=1847): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000008000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000), 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020}, 0x2058) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0xfffffffffffffff5, r5, {0x0, 0x0, 0x80003ff}}, 0x20) mount$afs(&(0x7f0000002180), &(0x7f0000002200)='./file0\x00', &(0x7f0000002240), 0x400, 0x0) 17.272676687s ago: executing program 0 (id=1870): r0 = epoll_create(0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000480)={0xffffffffffffffff}, 0x2}}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x7}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x40) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 17.18701499s ago: executing program 2 (id=1871): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) shmget$private(0x0, 0x1000, 0x0, &(0x7f000016b000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) fsopen(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) 16.619901247s ago: executing program 2 (id=1872): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2}, {@in=@broadcast}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB], 0x2c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzskj9OAkEUxr9Zlj9aGE2saCCRKBbKsqgxNlpi7wEksCJxUWE3UQjFGmMoLIylJ+AaJl5AC+MBqCmItVkzs28ns17B+RV8+755b2beG869npcF8DMfNXEEQQpL+GAMJoACi7yZEekz6SfpUyR4p7xj8u9J895geNFwXadfPChiJWEA+BaetLzDOwMzsdXXfNTkH6cAwjAMudcCeDrUnBSAnpKTN4FV0UQoc3gjPNgAUPG71xVvMNzqdBttp+1c2nZtz9qxrF27ctZxHSv6ZcoR1Aq4bgLg81pQ1tMAHihnEUmYcjVaZ2ptRplheS1Zayi1sTK8ytos4vcCTrCOHICbgCluSexiQrRUB0OKgqqp3C86KycWtptXbmsMBhaXTWDKPapTpGVgq0FtP4ivPSYtkdZJJ6RT0sKfv4wp3vaRonIAZHDb8P1+lQ8p+pKeLT17OVAHxk99MZLNvRnQaDQajUaj0Wg0mv/ObwAAAP///ip6PA==") pipe2$9p(&(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) open(0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 16.400215233s ago: executing program 0 (id=1874): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000100)={0x14, r1, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) 16.145040187s ago: executing program 0 (id=1875): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="0000000d1f532f5c513dc6450cc3f06be300e37e34168b8d24cd56628c4d2ff82f86d97b9ddb90d9197503dec9add440ff0f74256a770c15af7240341acdf6d4f975f1ac3495249220dabc9d364273fe09dc11cc35f7a54468e039aaeeb3", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf25110000000c0043000400000004000000060010003e0400000600ab0009000000"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfa64}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x48}}, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1643}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)={0x2c, r11, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}}, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r12, r12, 0x0, 0xc3) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000202000000fedbdf250200000058000180060004004e2400000c000700060000002600000008000900340000000800080000000000060004004e2200000600f0ff0c00000018000700060000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20008090) sendmsg$TEAM_CMD_NOOP(r12, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000001500)={0x814, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0xe5, 0x80, 0x1ff}, {0x0, 0x64, 0x0, 0x2}, {0x6, 0x8, 0x1, 0xffff}, {0x5, 0x40, 0x81, 0x8}, {0x40, 0x7e, 0x4e, 0x9}, {0xfffa, 0x20, 0x28, 0x7}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0x5, 0x6, 0x7}, {0xddc, 0x3, 0x80, 0x2}, {0x8001, 0x7, 0x8c, 0x6}, {0x7910, 0xfe, 0xd7, 0x15}, {0x4, 0x1, 0x8, 0x9}, {0x8001, 0xd, 0x9, 0x1}, {0x81, 0xc, 0x6d, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1edf800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1d4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x78e81ac}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6d18}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}]}, 0x814}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x3c, r2, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x3c}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2adc4f1ae44d3d}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x4c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf801}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x21, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @generic={0xe, 0xa, 0x5, 0xc0f7, 0x8bf4}, @map_val={0x18, 0x4}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x76, &(0x7f0000000440)=""/118, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0xb, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12], 0x0, 0x10, 0x2}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x0, 0x0, 0x0) 14.107776026s ago: executing program 0 (id=1879): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a6c6c34238f4595563a175ec970bf439024f8ec2dd49af842ad6830044218ebde605b5112fb292cf5d480002739aed74e8bacf37c73b5cdff62e63d3205c2d63c2ae686256cacda6fccf602641752997b84b75cdfd8d156c5fa9fa3f9338f13e0bb9af65d1e645a7f7553972ac", 0x6d}], 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}, {0x0, 0x2}], 0x2}}], 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) map_shadow_stack(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x40}}, 0x0) 7.720356323s ago: executing program 1 (id=1892): syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002040), 0x2002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000002080), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000002000)=0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="b635a23a2016a72187bea6f49af69fc50e62be9b91036831bdeecb48c13bb131c346c3e92f08dc3e906534c965dc3029c871de321968e3788fa100e23ffcf4070c9b5731c9e315676713c5668adcb232058a72dd3f9dcc3393a54b66f68e5013e2e74bea3da949fc18e58f7df102ad2f65aa31a773ef5c353b7f3c623a575938ff845618fd087df36099d5ca1d7d6f038c546fb310bb3178bc9a693e6cac76ca27f8afec8f31c9a8d5bca4a31a7ae7dc0cb36afe6165ec1206172879c342d63c402f7e40b6a80dffd8b53b37c7c6dd80d3032019c28cbfb59a2f9def205c9ae2523de159bf7e367b1dbdf3876a29c6dab82b439251424cfb62e9cc83178036852558af1ce423a4e05f196e061d5a25a83571b7165033e1f383acd2d854ee70ed2510a3e48f318bebe7381415a12697523e93a617b0946dfaed978c334f15b5a3453e69cf879a8c655f2066fc4bbe5ac4453118bab0be6f6130d1a1e152be82c67e9e79b51308d6a11b6b0a28d0683f4cee3a515d094f34cd7e265de644974c75598d69d42c23d6287bde741cc04419c95262e4857feb0961a04a05815bc39a36f44f5af86927075ba9770afc6d292077bab454e333c2071c7c3cbec060b9a1971de44fe264dbcdf855c6ccdd0e352dcb6829c0bca7944a71ba92290ab85d19c0da056cb03a5cfe64961a8009b29881a19e5875df770af2e8a01c83aaa6987102bf4333d47ef6163f4dd459de363c2fe2a45b1c7b884a058aa78aa24bda266734dda02c483484658f2be92b2a62f9c670415d710e10a6abc8545a84e7f63ee8b1bb030abdd2f25089c57a014b67f0c769d18f3339eddd70289ce779b374c7f811fae76c38d057e0f71fd7c53bd8f18491293c390ab97c3a9490e6b3cc6482990393b1248166e68dc532b2f0c2c375c014e738c0833d109c66c97cc1b318b44b2664aa94ae689452707465b08f5d0df59fc1662c9a96365a9a01f5de018abe3c035e069e928d7dbf1f010cb9b0c30ee806414e8cc3d2c010087892280735686d2c4fbf42bec52487ab0a8f5c46882860a51549b97c6c6cd5bafe0059ecb52963a89a4e45041041b2c7a544c09e258d757db52942943a6a091d57764d1c200c787012229bd224964ade40e3c26a11b8a73b38fdb9efd4f43affbec9d94b86fddb18ad22b7308c4722c98648e2ee10bd19a0ddff955c001eeeb27391fd19cc9e75ecc281ab175c92becf420aee960e99702d83b1fdbd6cb14b64a3f2b01a2949dfaaa2cd21c83b456721cda5fc55f2fbd4d79739c9d515d4e17a5cbee63fd7781806525107471dca76fb8630780d71737890587d64446dd8f683421647024ee0d4743d3a1c40a36dd775050b1eae69ca0b2a3eb064a8e1c24a3d465ef3fd470f844294ab23b8e6a8e88ce7ecafe84c4e31c08f3444c1a9cf8527f50f11b809235e54f4704222a473c87e3209fdc615d5a01d5dee3178c7175d2f0464042157c6249261050ca66f07635ee324535c524ed7e199d2df42666f07047069ee7bc72a788140a4aef44bd258d01a3ed28be4089f797022022f3a7e30c2e50af2888782bfd8e410d41452165e3c86cc703455fb811947defd3462621c665ae555c9bc75ce4dcdaffa3241d140774dce1d1213f0b9200813db316fe70dbb7c518cf393daad90dba2f79bc8665da6f55e0a4e309fe2ea95868af4258df212e3ffe3ecd56a847378c4b6349c4ecf165b07521ff4d272fdb07745d5bcdd02685cb9d7833002cd9edb6331ca8f6f877df03621b67308246b7a552e61c9820fb108a9a0c89c9774956a23e2ad56fc40fa8da59f6fc6ffc21fba200ad858fe0ec974100a878552d9ff24fb80bef586375e3bbd15c72f40cd66e1eec9de67800fdcf00b2b88c4c07b27a0db91a467ee1a1294cdb077a327cf8ecafa211b60208d56d1732b87b448b039c7b5271270ed46d507a6a81716fdff750127a50e7f5b34b5b3d4e99140ce6b933be3b021cbad405d4a1d50668163b1064b879fcf267cd1ff40261aa410ee086643bf43687992b094045e409db0ad7b8b9070fef8b9b618d138f377d6eca58ba46b419ee787e35d351dd196f18645970724768122e6e7b272080b217c68d47d14cbd240811a23fecf0d580eca7e05da64d8a438479f70eae43cd676f92f8b0e77bd829c4b2b3f7e96e180b6113b1528cc13ce684f864d808210d4a8ed4f9a73005ad761ad46307413d493bf7452907c17af88a4628040c37ebd2fbb5cd7b382621105a7af874f0cf7c99ff478d7f5800b5be59d3b74ec160f22a586ba9a017cc4fe0c1cc58e289fc060ce3a415d55660e28f92eee2ace1c4b3a0cc700de3b8f617b0ece1415e2b917d906303ce018af05661a261690d3b2b1c738981791f9e5f2abf97beaa27e4deb3e12b2ffacaf68798945ee7ee7a955969ef6e7c71f6f85609c6485500e18f39f9ea927ccd26dbfd28269750149a44ab81a739a5367549364b71ea8c3f4275e0041261e356c21f58527a704af6828df7a209a4ba2a42c96b506d04000adfd16df424624a6981276a4fe4777c2d91e516195c56c8b7cbf88a091c903049d5563db8a62f39cc0c29824779fac1d8a4899d1cdac16f076202f587ae05333d208bdb3b4dfe52e65fb1ffdb740667032960114a06967910f4c8bea2e3d93f438b4e6a3b5c1144cb95d2137e508e575c49cf114d06a56bf9336548a09a8b82374622d58084fd4f740aca1704f44ec359525bfaa23058ff4fc5c3f50e1f7bf8d05abe5467f77b03c3f6188afeccc15dc0b2fd51e5f699a67475de8302fb1585f6b2e7e5c3c470efdc51fe58787417304ab43cda673883b689b3e00fab6328b40af8a0194d56ad91bb7195bdeec56eece40c5269f275bca2e23748838446a0f7d4219bce3d96038fc4f20b7272604c8f9b7c6ce4fd2b91d104c23b6e2e59c2efea536536f332cb7f2d113c7ad1613ebe9ec50c86be7acde5c703dd663f6b821c7408917a62adb7795f6508408fdb327f2a3bcecf9892bd815ba7373dd80548b92afb12ce395577ba3a638189eb9978d1941b836f7785dae64e62c5d7b0e46b62ba639b0c6a790dfa850104e0413ae0b386438e0eb87c4acababc30eb376f6f47485a11c884a187d67ea7d679a367e32337a1bbb07ec05324a3dbc2586bc0991a304aaf035ec99abf8bcad6b10295d9f832d8879b9690447ed3854806095565689e7655ba7ada3c41b814b436615dd491b13613cc8cd6e826b159c0b07d86841904d8db164b2d95b77dd8cee127e33e9f72697af5bdac028586bd580548bab55d712aa656cf9fa86f07e0bf6394b5b9e78a2f0ee6de2ce7f1f4764787fccbfd7df104b50099205e14a7e65c2fe0afa688aef20043841767e1cc18c058bd83db3d5efba9c2f40aed1712730177124f71664b00112c2a801e3f7632fd9aa67bc9b2b6fa494c1596cf96f277f50d51bba6441733f0a7d73bd8055c88068c8e566e1dd4121ec95ca6df211a7cac1c6f3dc67270b86b6bdf1b2a98db3756796d8ca726be861bf70c90151eba75ff30b8fa17e5640f6bec0a042593f2f113875b9e18114e55be082083dfb8799d9c5d0a5828cebaea60f7fad3c98c078c09c245ed56a4fc7f9a7bb407daac2cc9d4bf8d3ed454cc022ab10ce4d41a2d4c6bc1ec3d6925426a5f4eca2e9bded77515c0896ffb0001adf51d9f43462222f7e06ad6cd69c4d02a384c4d8bce93638a24364d6ba8d17a537ea78655c3305bf069e07691a78aaa3ac03dd987972cd3c79b32b90a0376b9bbe0a6fe95ebe1e95de12fd0e53f5bc9b047146ef5ff4b40a2bdcf0bd53a6887b37107b6d37c86aacfee3478d3d81a5ca8be63559ea5276a64d88657c0d59859a2d1b76c0a382ad851ba8411a7e6e17d838694b156c5550c5cc14212e65e3b3231e5837cd7866381705db015245cc258ff1bd66517feaaa4f7d154b24c51ae54dc5466846b5e9a64ba88d3bc799f6118dcb2e5a972aa3823ddf5bd2a39109e56b820194c172c7e87ef1240701659149f7b05897aa7945fe5040d7e67c635ac0dca05e5ef0e9d6f542f8b1f15fec8897667587fe7db94fe36d73e51c8ab6f2b0ae3f6c51325b27ffd344a91bcd174adaa4569b9d52c0d31191ad191c3a52129e425307dd9ec1d1dea3bccd3fd7e5774915012b0369704f3d298c175d58accb97ac897153146e7f3b1982aaa9af9433b7d3cc40a2804e8246d06ffcee41f5c771c5cfc327acd8061303acd961a22fe2483f375d5c249214aadd9c8ccc3831e31f19ebfb124df863b9809f767cdec9905257b8dfb1a4c7e78db768daf6bbb6863f649a6f3023d1d5b32bb746fab105a25b07395b10d539c691710c6f80182ec0029844881f0d41b856f8a576339d16fcf1462af2ca95125d6f4771fdb3a880bbd240b671f9d904b8740f88b691c8fd783f1bbd22679beb7170cf07c85773ebd8363e75f4343b1579c7a40a9744f1f505b9a956faaccedc1df39d1e3c7d0912640afd4f666aea9363a8d84eccdcf3cda738443640aac65baf492fffc5643e87e6922867db2037cc927ebb30398334f4f9ce3b304d4a0ffda5b7de5ce781633dabd8eebe44a6feb454414d6e766608ba9f6b1ec8ac5ca11ea6438db7d86902d99b7d0749a646bbe3b0a988ef9a9a1f2ded7e238a31ea7241ad6de45d8f33d084520c8a68334de96c32948b9baf68333d5b51ca4bd0c91b75487c00b41dc2070b8b3d8923af1bb358e64bac194e8aff8645993b018f9e8c63917d220cc7a49980c920109e62c042fc4b757422724ff875a54bc3fd1cc278c4ae08f225d4da56e2e3c5056126681c8592bd195c438ff06afd66026cd08c5ede98b7a700dd3bd5fada703baaebbb1f96c49ce5c1263de39a5c5cbb56e610e43091b4e8af3448404d8d84d9a29430949d51f141e1f12451c71f4c07af6558d987b000f1a14cc33a26a4a80da7827fa536fd78fb8878b498ae174f2e8a5b9666d2c6e6ef678bb1b81b58e1bf26a64a1d73fd49005bf6b04f7a22b17f324c10b60a20da359f4df247ebc59a0895dd4559f17dc6f08e063ec8033b25d8cb0ab49c6bb302038889f15dfbaf21208e737ca121894b29d915bff2ea53ca74e67fd4adc802c3e839e586bbe2a65e843614dd96ef1c121d9989a56e2ad321d8ef5006882a8a03de4f192e057fb40ae6332e40934e78dabf392085dff93eebfe6072fca2e31603c988dd5bbdb16d95aa8a8cddcd1635905d1e347a51d2ec219b2e7581ce7d060c0de274cfbd9e6d9d132c4fc0149ca5a13c9e41fc46b88da841fb0a301c050d21f80938651029fd5dc2fce4a06e524f540a89e53eb93fe04dff0853505cc3299a97370581c7fdb8159f95f44629ca7a9e34bb447f7e5f549c18ffd06da6ccbc2d48c5bf3537360c4b185a5284dd4988dc0a6f2381e640b900cb56e0ec43ffa95b23d70f6a7b73dc29e41c710968f0ad01717aee92abfd67cde9cdea149b47641602014318998d675a141a2d3ab75e718ab382d305b4a961c9e8b621861e435d006faccc5929c0365d890b3d3973babe159e8db74d6c61d07f55b6fc49b5dcca788eddfb28916a36c80eae7c2554882ec31d1813dce2034ba8973a2919405e94589c24c3cdfa1bf2fcc0feefb87d1af27a2f80316d4462ea309a30eec785c3a597c6107897df297d930a686426b6afc2277e3c9929d00d9000ca9388427f060af654e8c4bb3993b01cf8eac473e7215f0e5cbe75e91c245a746b86a6d876bb7e624e690384cc0be32d3fad30640af8befe0f39ea10fc578214fb7db22b0b8d4a797d56335da88ae9c7a74dd685234178a4e49b8ca81893c30bb33fb3d8db2ed69c69fc2ba7ad04df26f49018088798906471f9b29392bc3fe78d612be345d838a72a00741af079446a5fc6fc7b779c0a4d8f75eb945c65e60f2894bfd9a526bdc29e277f15481b82f10dc8329d6b3f27f352a49dee12e435aaaf8e832aed574b17fc029ecfbf8862d0dfab18bf095d70b1f226c932f8ce3ccaec100477e2071dd1ca48af36ecf96cd063c9708216fd9d65d0e69658911e157cf47c64060acdb28cb05b9757db3da23b8a57705559b59667158862168d25b44b4b6e6b92f0ed2d6df1d08e328889c16da0bb46bb751b5cbb008f66493d5ab425284ade4d6a181ab708489efa3afab44511df1e217e5ae255026394ec9d89d8e8cffb9e32494ddb0fdcea1c53a6d1a962a0a886dca255cd0b58ad7ba90701a1f826c4febfd444c5d92a302fe9c99f085741dfe5082dcdb442174e825b5baa790fc03fb23f7a20f82d259fdf6708398fca2c9a9d28c953282e3c8db92b12afe96cbef7ddcde5d0552af596bc367c7a3f4ac5dcc93b885fe2ff9ad008527820524b8601313703665de05ebe7ff3f22e2cc6d6294a7732a11dbc5f82951c97bc78c2875f12265ee0762c42cc0e27c3c7e6242b70a2b98e3990d0a4c337795a26e63976b470b1b4ee0e338bd8565d317f21744a3a26e8ade2685cee223dd29472ba5b9e8e83cc7e1ab322cb79274573bbedbe8d8d7194fc2d4098f3a1716e07cafa7fd89a229e278851373dc71ecd7f4ea6d1d2936e8553a95c37ce51d33878004515e84780fd9720b71c745c3248b4ea2fe1a5572908b79242d41314412b414cb303d5f30af096774632994aac2be64472215c96c5d680f3c5dcc8b148f7facc44420adf727857a0ef912b6834672ff2d6ddfcd6ff64667635c724a7294ff3bb61ccabf1c00e13c1070d000febf9ccbd8bb111827ca9d30db4ec554953db59d93e555a9502f09eef63bbe4de97de381aad868bb9fd7d6586d4c8d0dfbb200cf87295b3ae9a8f10da508dd34392f601bcf7c6e58e737a0e25a00059550b4e2b6d490d854eb209f0cbb332a59e582acc01431d250e1199c91c7f840962d1b8648938e23bf1937b61afbaf0f38af84dacaa0585d749ef7c53bef067c09fddacf3349af13f3d265e7281164d085c845bc2396ee5d02f02f619f4dbb8acdaa66fa36910582b83a49421d1494b1cb20f7b26f692c4e3f314884b79cc49962e364ab5be2d411cfbc90e235c03a2c6e505eec9a42fe5eb90bb14cd24ab483ea7113b69d1eafca2fa96d4a92c4f5ff75391f3eefb12a2ac90faeddbc8041e5c836a46a345cc4bf0c4c2f7c9cb3ada8b35b05c15e8a36aeff8becc43c71ea0499e09aa8e21866c7e6887e24ebab1ca5f8d16389a4c4238727cea23eff3daeb5ddb960b1754087dc716c576e06c05febfd949fd7d57342036cfc6e4aa0d8712b53abaf0e644c4ca7d3734707a3f49c251178a94804aad6352ddaa22b4f27f5fb42b03537493e37c3948fba46a61f27b4017fc0e2b14a8e42b6526d341dade056f462f19cd7c950c7453fb8110cc16a731d3201a2a91279de59c18a1c1626a3dec8e21164521756b5e05913c119cb10910b4fbb6985b8fffd58b801db77f94d1f49a1e7def0eb9182c6b8e5335854020a570f0c62698b28f54cc034d67ec016374387ed340a1fee896b681916522fa9d6808af508b156629e2b59a43ea8fa8038bd42dab28592bae496170156d335949087d05399c64ff83437ecded598382d57288dc09f3fb19ee29328bfde4f600dafa49d462c8a305190044bf998495585b4812b5a2d7bbad8fb539bf65d40ec96bf14d19f20b94cb4f837bb59af74e0819a10d38978df3e06112ed6dbbfd057f52a24622050f6b59c90aadc20aca0a624cd14b65287c75222e32de6f169ef50d83a3c870fb1a119aba1b86ecc49e90511f0a038c85a36273638f791779517b525ec7e5dccec04ba74db44e81e5fb010371a9ee60eeea324ccf3dfce9f29ececc9c2e78f5e0b65ef38a472f61a747103decfb4be0932f36f1dd13f960251fb1371d1583b4a5c9d266e1dbab3fcd0a316c90cc9f52640fb8578324acc4bda0ed316ee891c2f64f573f163f05753e39197b97f119b96f0a8761a27ed952761aa9e37928037cca04069ec57f232067c6e8155c5e648f78a795eff6ddc33b8964bf6fe490f86fca8a7a269c877406032df2ae120afbf8a714910049b70b5e0355a81967a7b745d3e3d02b52ddfc105caed8f0dd2e38523a5918e920dfd024a276d00921251a48e380b09559fdf9c21a242608c2be5eb95740dfdb17f150f66704e752a23794980dcf51c6c5403a9ccb6cd1da068acb385061a4c7e195b0f3eb47ed7d4388a5fc8c039316783563d02bcd7cd33be35d91c35c4c6a68dd43b072735eb86fc01c650a2457d4d77a2c9a21878aee24ac379af9c73f3dc5e76de7516abb3b7d45c755ebbf9eb72d0ea4c97b3c34bf2609060fb20409706b82cd59aac37a392008e1e0df08bd17b56e8127ba631b0c57b2a7d6bc6c03ee347c00b4858ac0867d650db51b8e0ebed1ac770726190cc2fbb8bea49824b5286ffdf7897336863cb7900f34950c141444c784f9b787d77e8bf083c138cffdbe548569faf553aeb2ea26039a1bdd5e31ea649f69a838cf2c5134dabd1f9f2d3f4b92bd5f9728ed92fa10d750c4eb0b2e5f93a7eaeeb50c01f3af6f2b2500b0b2d8b3adf59ad0ec247d4dacd048bbba6dd28e57babef6a93a4e8eeece780225c14956a47a6f21db0077045359acd4f60686eeca084f02c57ec2724da1096c97ba635091a5ec9ddae8b60988055a456e8cf2146852e3526e2de46ba6b63f1d0c6df52af897674a09d1ed9efee6c510f893b79ae374a1bb0167356ce9741015f99b2aaecea7476c9a3922da674da08ed3e5cadfbccebfb7f651521db771c4d3e692e37d7035a7134a7baa8c7bb4f3f063cc67757236c38cb11e2ed1497e3f1c6db6921d19fb13606a51a78f6c4ec63f6dc23d77a5d1c0de680b104fb67b42b0cc550eada029cd67a7b4bd4aa4a5479ac5c9c7bf98c08c8ad7009cf5087e6556ec54e66af1ab3f96ce74a8abf5420ff52b0390d5c40aa372c1ca53b5a0e72960a4db4da2b2fa318effcb6069d7d24f29977fbf4219be9e95299dbed5bdaa998bb00ef8d6e5310c365568b5570b5a715a325dfb9eed5d12be78e0728141d866ff0c4f21a2085499d1cfb1b68a6733bad33384a258fa2465e41e45b44a2fc243127b6070fb4b56e8ff73702751d1f39967ead0155649ef2fd15abee559756014dfcb99cd37c70d387af273971a72a230638b13a18847ec72dbd27084b19b2db9fc60ce4e35ce1df93dc6d2270fb12887fd3323241444d45e2e6dc1044e6528bbc92da13f3e2c2b5b8165e6701d05d10a516f9e0186b4c642da2aa36d7bee3cc9fdc335c6bf490cf612c78e90ac299d8b796a301c6b64a932161559642b6c2d110cb37f89facfb95d5225abf15650bbc488918f40ec0b5b3200bb51ff3b26f7717c69e3117da1b1e78b2723ad96268196a5b90fa19fc0d3e7193749182582305b220d0b10a893882efee2f52e1f518a94216ddfde785dc64a430b1e40a458e035e0957cdb47d2694540e5954908a3db963a18014f3b039a59ad7e36e375f2da6030224e21a7fc368d09b911c86e5ed0a6826bbead358aaa5fa6a8d6de3ed1b2c03cd1803e9a20af367badbf0f8398613eb18f176932a970d8faa5fb3e1084c13e80985ed2f2bc8b40f9678f9c6b9c06b78eaff781fb0cebe251d3b803288fc9a5f0e3521c72bb5bda8d56d42fe82fe22c2cca2bab39f50c98a830f55fd92a69b9f82ffd4d3666770a9d67bce8d17a336c7fcef0f72ecb9098c55d36fba7d1926b91dda03ce015d9c2dab5789ba4e06e92374631a2aa3e2d3bbe8cc418b5158bd782fa9f7a934b006ab68ddff40d68912686259ee1d4b237faefc836abce067bea39fcba8190728e554a0e6b871876a70acd5f54bff40570ff6fdea36b07b23d66464810d7346c0fd1ae15338deecf6435938e1dec0e050ff405ea2c920a47c5cfb3d28c60b58a237b2f585e6046718c86f4c174d938be859454c0620a3e45db73b9120013b588916f4c6bcc4d10031d292850aeb51be2eb5d9bb84de911ccb0e583277c2f49084466d4c56bd276cbbf2d300484da635e2d37adfedb86cb16e8df8cfb18607a56ef4a5e7b57051102b166ec1c5312920ac5a5775e6b0b4ef935fd9a210d2e245a2611fdacce530079dbe3da30df27f1a758b4ed7d22f38ae0a96b556c0df0ebb7353f034d1c704252a00442b2160ade3c7d167f10f20b613a7a9dda06ae98b08e108a209bba8cfb8aca037cc83ca78ceca58f109c0ea7ae10e82474b071d261a5edfc27928c3a928949e32056eab09808542908f72d59101f2b86439e9fc67f97330dd7fb184be394dbe63c92b005be7cd567874e9903b927a76c1b709cbbaba204c679ea0a6aae1adc158cba623c1650e13fed834f413feb644e4c767255b25270f417ac80bb48e172335041d5b2b9f468eb0eaba4a9a4288bfcfeb1421efa1394a9e46c0d5e1e2d549a6ea4644b09ea2feaef5aba678ad24032ff4bee46ce1e4bbe0d06fbd7a754b1c4ac92a3093b103c78e4b5aff6e3c91fccc72d4c51e24d81e50ac1ac0b236c0cd635801746e5f84fde70f8adf69bac0c983440004c7155461a7e3cf9c38594a7f96ccafedd634126d6e85696625e8ef65ce11c051dbd66af7f448837b2871ca21f6aa5521c108ee1ab88ebab414f1e60cbddc0d07dfb98720ab7e8ec3bc1a145b1ace1807379b79123d60da7e7525f7f15e2f71341774dd11f76f3d6b179613174cb703091c11ca173a41d56111deb81235e9c9297a82621905521103d11a421f7dc6a62815ac14675de433e8a030db12505dda28b3cdd7098436c0bea1b30ae7fbd728a7bdd7fa7e96946774ca3f9a00eac6fb71ad49b597c55bca7ca6ba7fc6883ad000a29ba7be6765af00da3573a34eb29c1ec117f76103d508825c1a2f74fd04b07b0af10842fe3e54778220b4b98d14ee1919dd542ae59c7febef84d13f8b58853935736fbbd79ea4747bdbb91421a7af922378a522383b6aa96db3a72d18cc144f6c5151a9cfc677cc2933188f78c78953ed345cee4f9a55bee94ef23a37ef4caafba79aff21aa9f34d753b3f1fb85a7a30028a41b1be9099a2711c62fbdd1f9fa02d1ddde2bc859a84c26285a5243d429136ae19c9053057e99a66cfa279484d2a9ffd4f2a87837a215d3c2a64967b30e2188ecf1e71f78f221fdef3eeb7b6e260071144f7e6dc6fc511c29dc9f05a2e351de14520d474b12566800f2cc80eabcd6ab6da47ffa4fee7b6cff648dff503b25c99ae9293f71638ef158b8b75c1dc7ae07a6a85bce1f92c4e4c9ff501136a01c444b9699bf04466a577a6ba3d3699eb7bcdbf3209142f8891387f1243a3cf22b1a2f509c475c1ee9c6e7f3ed4bd833432740237d932ac8d60fa0639fed912264347fb255da9729f2e9f07be78a4be7b3723233edda69bf69aa08857e47f413c0500942e2e136d79e21d35abeab638dd7128602a0854f2f73167794418e33d5d07dc9c226bf43822a16481f04a77595220185aa2b4b172a607fb31ac624ac648c31207071274be3cc2a2eed64516efaa9aaab1a62b18dfe1819ef4d6e6cbf75aaed931bbebbc8ee9264337693a20ebef52bf54ea3d2a86ce11e8a36d", 0x2000, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000080)='trans=rdma,') 6.791887423s ago: executing program 3 (id=1893): io_setup(0x5, &(0x7f0000000c00)=0x0) io_pgetevents(r0, 0x0, 0x2, &(0x7f0000000c40)=[{}, {}], 0x0, &(0x7f0000000d80)={0x0}) 6.558776483s ago: executing program 3 (id=1896): ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 5) 6.556142755s ago: executing program 1 (id=1897): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x12, &(0x7f0000000140)={[{@rescan_uuid_tree}, {@enospc_debug}, {@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x1, 0x510c, &(0x7f0000005180)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x21080a4, &(0x7f0000000540)={[{@noauto_da_alloc}, {@noinit_itable}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@norecovery}, {@barrier}, {@barrier}, {@nojournal_checksum}, {@commit}, {@noauto_da_alloc}, {@usrjquota}]}, 0x45, 0x7c2, &(0x7f0000001140)="$eJzs3c9rG9kdAPDvyPLPpLULhTY9GQptIESuUzdpoVCXHkqhgUB76qGJkRWTWraCJYfYmCahFHoptKW39pLz/rwse90fh73s/h9LQnbXCetlD4uX0Q9btiVHSmwpWX8+MNZ7M2/03nfeaOZJM5YCOLEm0z+ZiDMR8a8kYrw+P4mIwWoqGzFbK7e1uZFPpyS2t//waVIt82RzIx9N66RO1TPfj4j3/h5xLnOw3vLa+uJcsVhYqeenKks3p8pr6+dvLM0tFBYKyxenZ2YuXPrZpYtHF+vnH62ffvjv3/749dkv//a9N/75fhKzcbq+rDmOozIZk/VtMphuwj1+c9SV9c1bf+2gUNMekD3OxtCltGMG6r1yJsZj4LD+Ge1lywCA43InIrbbGWi7BAB4qSW18/+v+t0OAKBXGp8DPNncyDem/n4i0VuPfh0RI7X4G9c3a0uy9Wt2I9XroGNPkj1XRpKImDiC+icj4v9v//nVdIqOr0MmR1AzcNLdvRcR1yYmDx7/kwP3LHTrJ61nLzRnJvctPGnnH+ind9Lxz89bjf8yO+OfaDH+GW7x2n0WT3/9Zx4cQTVtpeO/Xzbd27bVFH/dxEA9963qmG8wuX6jWEiPbd+OiLMxOJzmpw+p4+zjrx63W9Y8/vvsP395Ja0/fdwtkXmQHd67zvxcZe55Ym726F7ED7Kt4k+P/8PV/k/ajH+vdFjH737xj/+1W5bGn8bbmA7Gf7y270f8qGX/746xk0PvT5yq7g5TjZ2ihTdnY6xd/ZPZ3f5Pp7T+xnuBXkj7f+zw+CeS5vs1yx0/9c7dYh/eH3+3XaHm/b91/K33/6Hkj9X0UH3e7blKZWU6Yij5/cH5F3bXbeQb5dP4z/6w9eu/cfxrsf//KX3+ax1uiOzDT1579viPVxr/fFf933UiRrYWB9rV31n/z+xZZ+f4t9U+rk4b+DzbDgAAAAAAAAAAAAAAAAAAAAAAAAA6lYmI05FkcjvpTCaXq/2G93djLFMslSvnrpdWl+ej+lvZEzGYaXzV5XjT96FO178Pv5G/sC//04j4TkT8d3i0ms/lS8X5fgcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHWn2vz+f+rj4X2FB/rRQgDgWIw4sQPASZNks/1uAgDQayNdlR49tnYAAL3T6vx/pw/tAAB6p7v3/wDAN8FTzv/7/w0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAunXl8uV02v5icyOf5udvra0ulm6dny+UF3NLq/lcvrRyM7dQKi0UC7l8aantE92tPRRLpZszsbx6e6pSKFemymvrV5dKq8uVqzeW5hYKVwuDPYsMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpXXltfnCsWCysSfUksflDrhxelPRLdJeJurf9elPa0Tow+w1oxtHuUGO3PwQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgJfB1AAAA//8XkySN") write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0xa4, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000001) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4, &(0x7f0000000200)={[{@nostrict}, {@unhide}, {@lastblock={'lastblock', 0x3d, 0x22}}, {@uid_forget}, {@gid}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@dmode={'dmode', 0x3d, 0x7ff}}, {@gid}, {@noadinicb}]}, 0xff, 0xc43, &(0x7f0000001040)="$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") syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="001652141c9bd7032c7ec1a4184d84442281c689afabaa49c0af97d57a83e5550cbfc8186dc8cae15f802dc5753da649574cc69bc225a4af2f8d4bbe25229bdb66b99e5773770aaf67d31799b4719f97b2939e1305bd74bd794d8eb49a5458d4a49e9502b3229e1f5d524daee5a143493b08a068d92472329fae5e65308a83a371ec90756305e6c2f5339749468f9e446279376c4adb"], 0x1, 0xd99, &(0x7f0000000e80)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000001500)) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 5.39262319s ago: executing program 3 (id=1898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000", @ANYRES8=r0], 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x452) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) r3 = syz_usbip_server_init(0x5) write(r3, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc50631fb02a0647a3c2ed4c85c8eef57d078ec", 0x2d) r4 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, 0x0, 0x1}, 0x18) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000280)) sendmmsg$inet6(r6, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0xfff, @mcast1, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="01fff52f904098ee90b257f4e63b933e31a92e0b3d3b72b9ea8d47564ed5a63582", 0x21}, {&(0x7f00000002c0)="a3b17c443cabe49a6c7ddbdeadb5b5231ea7970bdf103c66325609e7e5e55280174464823234a1b1213741a3c1f534e36ddb45ca28eb7bf166f704b4a6728fb3aa32b07f7971bab54d163b7ae5729a47208d963a417e816303", 0x59}, {0x0}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000029000000040000000000000000000000c204000001010000540000002900000039000000290801010000000000000000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffff0a010102200100000000000000000000000000008400000029000000360000003b0d000000000000c2040000002d010500000000000000000100000100000100040181f7508aa7a1a7b2700d4ad04b1beaecaea1b5391cb251dabf6ae37e2a40940c01ccce59a06b97f59563798f6d7088e958ac982257bdaf9e2d9919cf22bd00000000dd8eff835020c02ea19f9eb9aa6ef4706402d7d4"], 0xf4}}], 0x2, 0x4008800) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') mbind(&(0x7f0000596000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) msgget$private(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 5.003660205s ago: executing program 4 (id=1899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000", @ANYRES8=r0], 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x452) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) r3 = syz_usbip_server_init(0x5) write(r3, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc50631fb02a0647a3c2ed4c85c8eef57d078ec", 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000280)) sendmmsg$inet6(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0xfff, @mcast1, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="01fff52f904098ee90b257f4e63b933e31a92e0b3d3b72b9ea8d47564ed5a63582", 0x21}, {&(0x7f00000002c0)="a3b17c443cabe49a6c7ddbdeadb5b5231ea7970bdf103c66325609e7e5e55280174464823234a1b1213741a3c1f534e36ddb45ca28eb7bf166f704b4a6728fb3aa32b07f7971bab54d163b7ae5729a47208d963a417e816303", 0x59}, {0x0}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000029000000040000000000000000000000c204000001010000540000002900000039000000290801010000000000000000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffff0a010102200100000000000000000000000000008400000029000000360000003b0d000000000000c2040000002d010500000000000000000100000100000100040181f7508aa7a1a7b2700d4ad04b1beaecaea1b5391cb251dabf6ae37e2a40940c01ccce59a06b97f59563798f6d7088e958ac982257bdaf9e2d9919cf22bd00000000dd8eff835020c02ea19f9eb9aa6ef4706402d7d4"], 0xf4}}], 0x2, 0x4008800) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') mbind(&(0x7f0000596000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) msgget$private(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4.197642428s ago: executing program 3 (id=1900): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x28, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x6, 0x1, 0xc, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x80) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000003c0)=0x7fffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES64=r1]) r2 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = socket(0x10, 0x803, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x341b}}]}, 0x40}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x3, 0x7a6, &(0x7f0000000a80)="$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") open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) 3.207415488s ago: executing program 4 (id=1901): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x300, 0x0, 0x3}, 0x24}}, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80024322, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000440), 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000039000900000000000000000001000000040000000c0001803a00000005470000080002", @ANYRES32, @ANYBLOB="080005801000000060a37bbc31b7dfc4c682ee59d48cdea30de0c4dc72b9c2c5d3228955a6"], 0x34}}, 0x0) 2.964856815s ago: executing program 3 (id=1902): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x105) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x3b0, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0xea0, 0x0, 0x0, 0x0, 0x3, 0x1}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r0) msgsnd(0x0, &(0x7f0000000a40)=ANY=[@ANYRESDEC, @ANYRES8=r1], 0x401, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2.460995354s ago: executing program 1 (id=1903): r0 = socket(0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001d005f80004000000000000002000000000000000000080008000100000000ff", 0x24) 2.460552055s ago: executing program 3 (id=1904): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2}, {@in=@broadcast}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010"], 0x2c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzskj9OAkEUxr9Zlj9aGE2saCCRKBbKsqgxNlpi7wEksCJxUWE3UQjFGmMoLIylJ+AaJl5AC+MBqCmItVkzs28ns17B+RV8+755b2beG869npcF8DMfNXEEQQpL+GAMJoACi7yZEekz6SfpUyR4p7xj8u9J895geNFwXadfPChiJWEA+BaetLzDOwMzsdXXfNTkH6cAwjAMudcCeDrUnBSAnpKTN4FV0UQoc3gjPNgAUPG71xVvMNzqdBttp+1c2nZtz9qxrF27ctZxHSv6ZcoR1Aq4bgLg81pQ1tMAHihnEUmYcjVaZ2ptRplheS1Zayi1sTK8ytos4vcCTrCOHICbgCluSexiQrRUB0OKgqqp3C86KycWtptXbmsMBhaXTWDKPapTpGVgq0FtP4ivPSYtkdZJJ6RT0sKfv4wp3vaRonIAZHDb8P1+lQ8p+pKeLT17OVAHxk99MZLNvRnQaDQajUaj0Wg0mv/ObwAAAP///ip6PA==") pipe2$9p(&(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) open(0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 2.223648278s ago: executing program 4 (id=1905): io_setup(0x5, &(0x7f0000000c00)=0x0) io_pgetevents(r0, 0x0, 0x2, &(0x7f0000000c40)=[{}, {}], 0x0, &(0x7f0000000d80)={0x0}) 2.104039689s ago: executing program 1 (id=1906): ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.492656779s ago: executing program 4 (id=1907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) syz_io_uring_setup(0x2eac, &(0x7f00000001c0)={0x0, 0x0, 0x22, 0x0, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000080)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x3}}) 1.442732454s ago: executing program 1 (id=1908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000", @ANYRES8=r0], 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x452) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) r3 = syz_usbip_server_init(0x5) write(r3, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc50631fb02a0647a3c2ed4c85c8eef57d078ec", 0x2d) r4 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, 0x0, 0x1}, 0x18) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000280)) sendmmsg$inet6(r6, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0xfff, @mcast1, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="01fff52f904098ee90b257f4e63b933e31a92e0b3d3b72b9ea8d47564ed5a63582", 0x21}, {&(0x7f00000002c0)="a3b17c443cabe49a6c7ddbdeadb5b5231ea7970bdf103c66325609e7e5e55280174464823234a1b1213741a3c1f534e36ddb45ca28eb7bf166f704b4a6728fb3aa32b07f7971bab54d163b7ae5729a47208d963a417e816303", 0x59}, {0x0}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000029000000040000000000000000000000c204000001010000540000002900000039000000290801010000000000000000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffff0a010102200100000000000000000000000000008400000029000000360000003b0d000000000000c2040000002d010500000000000000000100000100000100040181f7508aa7a1a7b2700d4ad04b1beaecaea1b5391cb251dabf6ae37e2a40940c01ccce59a06b97f59563798f6d7088e958ac982257bdaf9e2d9919cf22bd00000000dd8eff835020c02ea19f9eb9aa6ef4706402d7d4"], 0xf4}}], 0x2, 0x4008800) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') mbind(&(0x7f0000596000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) msgget$private(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.288577732s ago: executing program 4 (id=1909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x11, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$TIOCSTI(r6, 0x5425, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'pimreg1\x00', 0x4000}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000600)='kfree\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000008a0000000000400000800000850000005079c8c64c0000080000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r10, &(0x7f0000000640)="19b426ac01d8d93b71d0cc58a41585a5818093c054535f8ad55c07c97a659b0569dca4bd11d2ae7639f7d11bcc9c26d3e43105b4552ad0ea89c0a11d34d6b4b81f9eadde37084329169fa90fdaf168d7760f18fbdc1ba6c5adcbc847d978d1ca88f64af98c4b415433e98482d40b205c9d7feb1f82a5629a357a6fd449af2a79ac46068776686af9637006d3fa69e816", &(0x7f00000005c0)=@tcp=r10, 0x2}, 0x20) write$binfmt_script(r10, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 434.619924ms ago: executing program 1 (id=1910): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000500)=""/236, 0xec}], 0x1, 0x0, 0x20000002) r2 = timerfd_create(0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000400)={{0x77359400}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000000100)={0x77359400}) clock_gettime(0x5, &(0x7f0000000140)) (async, rerun: 32) timerfd_settime(r1, 0x2, &(0x7f0000000300)={{0x0, 0x3938700}}, 0x0) (rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @tid=r3}, &(0x7f0000bbdffc)) (async) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async, rerun: 32) read(r0, &(0x7f0000000980)=""/273, 0x111) (rerun: 32) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r6 = getpid() sched_setscheduler(r6, 0x0, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0xda, @time={0x6, 0x1}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_clone(0x28009000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0xc08c5335, &(0x7f0000000180)) tkill(r4, 0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000000440)={[{@noblock_validity}, {@minixdf}, {@norecovery}, {@nolazytime}, {@noinit_itable}, {@nobarrier}, {@commit={'commit', 0x3d, 0x694}}, {@quota}, {@resgid}]}, 0x8, 0x60b, &(0x7f0000001b40)="$eJzs3c9vFGUfAPDvTH/Svu/bQt6oeJAmxkCitLSAIcZEejcEf/wDlRZCKJS0NbFIQkn0aLx4MPHkQfwvlMSb8eDVgxdPhoQYw0EMkTWznSnb7e7SX9sp3c8nWTrPzHaeZ5Z++33m6TMzAXSskeyfNOJwRFxPIoZqtnVHvnFk5X0P/rx5IXslUam890cSN28ly7X7SvKvg/k3/zMUyc9pxKGu9fUuLN24MjU7OzOfl8cWr14fW1i6cfzy1alLM5dmrk28PnHm9KnTZ8ZPbOv4ehqs++arR8n4t7+eS+JsPM7blh1X/fv6tlVz9pmNRGXFw9r12ed6Zpv73iv+Gip+Tp5I6lewZ13M4zaLk+djKLpq/jeH4tN3Sm0c0FaVJIocBXScpEn8/zjZ6jdDf9vaA+yWoh9QnNs3Og9eL21zrwTYDfcnVwakVmK/JyKK+O9eGRuM/urYwMCDZM04TxIR2xuZW5HV8dMP5z7JXtFkHA5oj+XbxSh3ff5PqrE5HP3V0sCDdG38L1cqad4TyNa/u8X6R+rK4h92z/LtiHghz/+9seH4T/PYLeL/gy3WL/4BAAAAAABg59ydjIjXGs3/S1fn//Q2mP8zGBFnd6D+p//9L72XLyQ7UB1Q4/5kxJsN5/+uzvEd7spL/63OB+hJLl6enTkREf+LiGPR05eVx+v2WztD+Phnh75sVn/t/L/sldVfzAXM93Svu+5C3OmpxantHjcQcf92xIvV+b9H8jVr5/9k+T9pkP+z+L6+wToOvXLnfLNtT49/oF0qX0ccbZj/n3S3k9b35xir9gfGil7Bei99/Pl3zeoX/1CeLP8PtI7/vqT2fj0Lm9t/b0ScXOquNNu+1f5/b/J+V7H/zEdTi4vz4xG9ydvr109srs2wXxXxUMRLFv/HXm49/rfa/6+JwwMRsbzBOp97PPhbs23yP5Qni//p1vl/eG3+3/zCxJ3h75vVf35D+f9UNacfy9cY/4Na6+/HsdEALaW5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCMSyPiP5Gko6vLaTo6GjEYEf+PgXR2bmHx1YtzH16bzrZVn/+fFk/6HVopJ8Xz/4dryhN15ZMRcTAivug6UC2PXpibnS774AEAAAAAAAAAAAAAAAAAAGCPGKxe81/pq7/+P/N7V9mtA9quO/8q3qHzdG/5Oyt9O9oQYNdtPf6BZ1h2zr+J+O9pZ1uAEjSP/4ePKlW72hxgF+n/Q+faYvz7cwHsA/I/dKoNjun1t7sdQBnkfwAAAAAA2FcOHrn7SxIRy28cqL4yvfk2k/1hf0vLbgBQGnN4oXN1z5XdAqAszvGBZHXp74YX+zef/Z+0p0EAAAAAAAAAAAAAwDpHD7v+HzpV6+v/ze2H/azF9f+Ngt/tAmAfaf7oD7kf9jvn+MDTsr3r/wEAAAAAAAAAAABgD+i/cWVqdnZmfmHp2Vt4a280Y3MLy1N7ohmbWKjcimj9nsftqb0nIvbKhzC/kLVmt+oqbsFR4iGX/HsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY9W8AAAD//yF2IgQ=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000002280)=""/4079, 0xfef) (async, rerun: 64) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) vmsplice(r8, &(0x7f0000000080), 0x0, 0x1) 0s ago: executing program 4 (id=1911): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x2715}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="c796bab467f30687940520a002ce823d54f55059d79b2fa8324cb02707eb0410ab", 0x21}, {&(0x7f00000005c0)="0002d8ac5ac1a8898f6821e159d8e1115753af616dccdba5a3d597f01cf284763314215f62986a647c34ac683500d0d5a8b345c531d7052f66d7106470f20e27dfb4b45935acc0382e2a226e38440fafb2c89d0429e85c70e9097a0b9a93440ce1cde96736bbd314eec847ae2525f0750c9588dcc23dc6a22da85c30318a9f371ef8be7f973afe79cd7baa8d62c3c494afa92d944e0aedb9d267b21668551387d2db33178025b1595e2a72fdbfe69a09eb457aeee1f102a4e738469cb2dfff443040fcbb0303b34206826c795428d35091017c30d5acf3bcee644797cb27af81759c65f3a79241e2d6561a1bfc92d60be9ea0bc0d6a7d31561d7c024207cc0c330b49ef96591dc8ced05c193714f05f4ec4a97f8054061d9e8042e9aedaa0e9afb2f93a5a83f041fcdd88b04fc10630f292a77d3dc76ca27815612db0c32f093762f90eedd7516db9c0f76688633707cc24c991ab827aebbd1a3a1e5731be404b405e51f7d547a0e5f25d2ee67ce359ff0357373a3af49618d31f96fc445354185ad452ab3f90d94811a46bbc119fcd6555f2de3bfef33d57aaa2aae13c8a52b0321688bfad88886f71a9c781f5a5cf256dabb34165c6a228389fd80896491654e2897fac0a9d19b3f8830284c91956e9370cc5c0896b66d2b1efb879c94fe3cde1b4b6270f7648b5e37bc6ef424688e768e1ffdd184c3506c68844407d497535d4fb0231934719af316870818c5eaaee4464524b7fb6f41561f5cf4ebfe63ef70d13406f6d046aca18e4a0df77ce99993356564153f055ea7e71eb6218d549256c65105b8fcfd47e2770d5a2ff013b0b4af4daec3b88e212aff167b4bcd1b707f9af9f4db60b13d24f384fbbe542d3c57646753ec58fa1ee4f715eee0eb4568b31195d60b0e14c595399a2e70951bdef4ca727702b829736c927eb7adcf41dc8b0ab86390802862ff9d1962f3227758f4a0259274564871907125370c63673ebf3f41f1f0e97059eacb3822a57ada9dfbd7045938874bfe439bb861b3ebc8b36652ef6497060f83e9d6ac5e4b6029aee60bb0996c5eb137f2114e25c308ac3b6aaaa5a02383de217bdf66442aa1dd8399d83e92141cd858d239b33ae818091befe00249276b3e75c4c299b11cbe4ff5f1ec0209b2ea8d3510e9251634a7fe5f36f8280cf65622dcb4c2021a49f8983e7d628727ac8c125e1fa39b2dd7f0b3446552a9b23fa0447c26eb9387cb51c107ba1793fe353c3a9a42528d72a6cdef296beb090f93f078c7f66ffc12ff44fb6e922be5714dd636951ca815a6616029910d85b950ed1994c683e2fa05ea1e4c03282524708b3e3bf905a1838d7ed7272c5ed9bfa2e7ee64a89662608d064203577433b3e5a0394bfe8ae43afd68dbbb5f4b4102b753451ccc188a567a7aafc21e129436ae54cadc8a2e1484bf26f18c2ccf4e97aa71f4e4a8518e8a6d8020fa021525debcfc8ea561ab785fefa8bc072cab30d2fe3be6b717e10362ffcb7d869d8cbc3d0adfded96a94c04936451bfb2e113c4e73001775eb6ccd571a3a9c3574ee55f6fa91baa78f4439060aeee04bf68d2d85a15b1e260575a6abb4f2c29e988aaa7761aeaee19a9c83e07f862e4131d8ee1d89ce7ce8db288d5f84ef9066825ed1501e4f984f1fae14261d9f53d75235e4309d6e4a1d190d290245967411dd415a337d087c3abfc6995e46d2068ecc9e2119ffd13c7c60ec8a9d41e1ac147f90c52dacfae10c499fac5140784babb769090abff4b4ffe1372412aa9283b9b02abeb904707db9885e97410449bc8c4d29cbf7c62f7c2ddc27487677e19e4980ccf4e10c01ba66741977c696d1e75fba415717cea66de7902ce39b056a835a0303b0890a8687e5fab39a6415eb9431edf07b20d411ef62c341401e94976fc9e239c2d6bbd1b14e67fdbbf31a22e6d7a01e94f6197d6fdc236eaa7d31accb63e5cfcbc09abd3476f93e29e093ccfcde8e798df39ecced23a65c3634fc3ed524321edbf8d0735bb1f9c44ea3942cedf09c7a87dd4675717404e1b12e7016389254b4bc0bdd2980a93dbca956da354ab87630ea0d721d4cf861ab5a202997930d49e331204e3c0cd6bfb27afd430ed1d5806a9ad4c09c73a903b89bbe508574ba3ee24e7a57952a4a1b894ccb730bbb15c635e40ea61d05433c6b599c2c2295bfb4724d3c82056a76327daad5f44f09cba75a8c97c8fa6663fcd67904ccd9d43fd3eef43cb708f16b727467e003e125e2a6450567dd4fa254fe840a14dfc5adb34481262a759fee7990d7c5004585249b9930d16d48b0b559a0f68728733b1ce8edc5fd50f3a822d1879cce9a26eeb3f80f15a1cafb80744b58fca029ac1153996a4ab697d37ca557b866a56d7a173903356f6d4ef9e7e9471ec71c68dd306261def270816f001d00b93de8bb1d51612e1f813a5d67fb50851ee3685d499cd3e34321a74bbb21ffe795e48bd9a657d8c5e63800bbeeca25e8ff4c12ffecd374533351bbb82459eb925717dfb95da45cc6ef2213ece9a2b24358458c9162e81c9956216961162257c40ad5c99f6f32b1625ed68c4c0ebf82cb62bd1bebb6a064885c6c873892aa07af02a928ba7d18848ba9dcf8b4306c07d3a397871173879ad60d64fe09d85a092bb295c60f5d9b51fbdc1079ed59f1cccaa1d84d3de1e4cea4688e12dd6e0316297317bc1ef95b9ad72a44ddccf6618fb3fe6b37d404a948b7fbbf9fac5083666ffff260b6144143408ae66b8ba9c2de6998f8843a04e9e11c3df745281fab355044d9ba368ac408028072e88afedfdc406f64bb1a67e9b546feeb42d41b9b7249c448c4fb2a457a625cd0154618a945a543cb1887177c7c0be3c130d02f4a7c1ead4defa62bd9c411cdbb2f012e95cef07409464fcf9536b07bac2ef016694bef00019b66c6aca093ca412edb7f631bb86f64f5f2360340fa4590f6db881b96427edcba5efa8776e4f3f64147d505530a689e677840f2d2c26ef85750495bb7235cf062fb1c2f9d610cf273a427dd9e45960c32f332f35b056e294dfcf3c467ff484bad428deaaf76fef525dad8d4661200ed1c89f7ce9b6dc61f8194d4e8cc0127664c3bb52a8ceefc00277cfcf3d764f409073f7bc1f487c2b111e02a973c6f405ef8cabf28857a4c0f648dd8d405d547cc022d71a7acf6c87ec2dc3221b164dc3effe2081be1c45c9fb63d558fe7ca456571710d7ddfe4ad1368e8c2be00fd0ce938939f5180b17a510f2ab718929ae5c9b5cdd78d3ba2033e3c9e024b96872d5dc463a031c45632b50a96eb67ef6ad3685fe4039a8fe3b5728deafd7e4ab09dfa3d9c4a0fc82732454be5a6ad03958e90dba6326fdbaa35aeaf65a0c198aa224758c51d9cb8c2e481e540f2fc9e1068e981c4e339c8f482755489c77fa2a81a60aba226e355b9dcfa765bbb758fcabc633764e3f1730ce3852db784df8469bc29a89aa27b5a4449bfd3b201dcbb7098af77bfc350019a53fb0affd6051f89faba1865dbccbcd0973b9e6bd1f762dd478d9cdaae8ecded085eecd390eefe79ed03eafc890c7fd63aa54ab93dc2d5b0cf1413038c51d3dd83fb4c07c0bbfee7bda61c85b250be69cb189f11aba12799f691243d7d816dbea9bf792fd6ed69d6739f003f91e08fbc15ecc93b7ddf8c06ece9772c4c5578c242748925325eb0b3b29863892a7dfdecb4cab8a59342248e7cb6825518c61aace963167b3022ccb0e27e370780f680a96564b0defb6eb10db36897275b544d346e1371fba93dec9f110450487183cd9335b051d3ede338110d0f52e2a567dd9a4ad2d5ff7652b70ea777c231ec59d5660324cd03bdd7eaec0723a2e88c743dc83da10f1c0db9001860faaa94ee60b10d8cc6a031dd754ab6962cae4b5837d22afae538913039f6aa29f5d029c55e04cbe32d39c4a8f701ff660a8de1ca247945f6bc3a1fa20ac3fd161b50c82e1940cfddab7849fa971ff3f0c4e69746a6d7801adcf8c9a9e81067f8ef5be46602fbbacd0e4d5203dbc2b0a275cd71e73ed6573ad8c8fc5d2f436945ebcc80482e1ad462f8b2deb51a28f619230970070962aa001cb27a63943f3078b44922a6987895fef88ece93c2bcb27a984c0f94bc9984e8a202b22992f6df6a78cc375920aa7fe978a95d6299a7bf0770e853e300678205c29b4e513894d50c4bab9df26e8e10e095b87cad7ae7469e831ef4a0c7040a14b28a6ec555820d3460e9bf854537224922e10119acc96802e2bf8dceb7543382e05067b07f1d651641ced52eaef1af257140f407bf03b30e605ab31a386ae85111e5bda42c60bd280fa52f5d2469c304c96e3bfc5e7a5bac8edb13192fb393cbe8ab4f4f1a2119ad0929c16403776fbcb947cac00bc557f594c9097233f00419b9e1de410254b0b48d71567e661511fc859106be33df137d58ef58d11b0b9dcfafff7399b401e69c35a8bbc0c5732dc29f2e5e1b8a2e36c19df2c6a314562254772864bbfc9830527ad7deef2378ae70b1de8091b598e2c9e2a5198dd1e3ecf4739edbbb134d5a586afa13d0e1ed1c4cbd682f9076c7108b8fa0c4640d1b7774f711e89e7a2bcac5d68a9eeb2071696fc49085dc76633675cb874413d27aa535bb1e8b3f054bdb6c522b30119c4a89e4d3b33d4be8912b756924743c0c493b82fa70b746bfceab2ad091460def9f6d0c1e14a3958f1968e1caf731a49aeca66413e67cf5fc76da565623ca74ca3d3f5a6b1a88c49ad0b8465c5482f9372d7154f44a7704b7b6ee4dc5bd8f6777fed332527d8ad54302bbbb416e3c7bf7ab0bcd36a433108230f52fce211e7112ebe94948f8fa0bb9a7f2aa82cdef6298468e09bb68d8462cf126251d8158c99fce2330a2ca2b3f7ead3ba620ecbe1cc57bb28639ae3cafd51fdece9562ed47a7a545e5a65253f5e409667d61db011c338bed39ff38cbc3d0a63fc5d5b2475cdca2197002c5a4aa5b2ca56211e51e5a85a5590c7177ba18d356ceaf4103e064be52631edf188124e7c5524b55a60e31781e504c80210575dfbe9e76200616e2cb1d2ad03a771d322e066c2e48c5310e11fab420968dd9f9179c4dc8ca8a7d77dbbd36c94615ff28bf6479bc16e3f181c8febf20aad3cb08e2ffe6f915318331eae652e295e85237086ac44ea779d8c8d25f50e4181022b635002aca6071cb60e4bbafd43c72a1928bdedc830be23a4e25a5b6d1f49748142dd355fcd44432f2d9080247508629e40c83e6bbef26f48bb9a4e7dc12800b2e942e61c818766a2431d7783718406d6f8ee99c36bdee3409534575f5e41aec08f7caa69c261c9cc690604e8c685d5455f20668dcb79b565bb3fff791986680a1438b7e1f3aefd542d333160aeaf20870b1b61fb0545b91b248ab46d7bdbad39571411dbd456877ef1e946b0eb4afb27c3cef492d16e56a23fe439121e12215975df8cb43b8e7b0527f7b6978b01c69505c4d1218500f9d4ff181f2f1e8d25404749ad1cbe846f48ecc52e393d4e71eb39a0d74501d896e8f7b25684d534d2f1105b39495e0ed87c8683f6c6ff8bba6b1cf9de2f5c29116664d8b20c3bab8689d08663533a6d556048b65ff21ec7d5be2e4e519b151573d69204b5df792c88ae19afbd1ac787e8e6c8a8cd63a5a9c554e304fe9a33754f262d03ca4afdc4c51ef9f84186b57dc5f46f43c8fbdeede25a5afe9752969167e350c1e690af540a48047192b855e0f64f629d630995bc4a5ff4e7e329e0cf90c9abe85ba4fb927a2de8f8f84b41342a238578d90ed", 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1}}], 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x60000, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x22a2c0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x3) ioctl$TUNSETLINK(r4, 0x400454cd, 0x302) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x4e41, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0xfffffffffffffd81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) sync() kernel console output (not intermixed with test programs): uetooth: hci9: command tx timeout [ 728.456472][T12066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1721'. [ 728.550118][T12055] loop0: detected capacity change from 0 to 32768 [ 729.110191][ T6688] bio_check_eod: 12574 callbacks suppressed [ 729.110215][ T6688] syz.4.352: attempt to access beyond end of device [ 729.110215][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 729.119660][ T8773] syz.1.839: attempt to access beyond end of device [ 729.119660][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 729.190176][ T6688] syz.4.352: attempt to access beyond end of device [ 729.190176][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 729.204704][ T6688] syz.4.352: attempt to access beyond end of device [ 729.204704][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 729.238296][ T6688] syz.4.352: attempt to access beyond end of device [ 729.238296][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 729.256573][ T8773] syz.1.839: attempt to access beyond end of device [ 729.256573][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 729.278592][ T6688] syz.4.352: attempt to access beyond end of device [ 729.278592][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 729.341090][ T6688] syz.4.352: attempt to access beyond end of device [ 729.341090][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 729.381026][ T6688] syz.4.352: attempt to access beyond end of device [ 729.381026][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 729.397698][ T6688] syz.4.352: attempt to access beyond end of device [ 729.397698][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 729.648281][T12079] syz_tun: entered promiscuous mode [ 729.762774][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 729.777508][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 729.785255][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 729.794342][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 729.802424][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 729.810922][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 729.846060][T12079] syz_tun: left promiscuous mode [ 730.607728][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.888865][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.238691][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1735'. [ 731.382291][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.457940][T12106] lo speed is unknown, defaulting to 1000 [ 731.595555][ T5113] Bluetooth: hci0: command 0x0406 tx timeout [ 731.886961][ T5113] Bluetooth: hci2: command tx timeout [ 732.149620][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.189682][T12106] lo speed is unknown, defaulting to 1000 [ 732.245292][T12083] chnl_net:caif_netlink_parms(): no params data found [ 732.368475][ T9457] usb 16-1: device descriptor read/8, error -110 [ 732.377661][T12106] lo speed is unknown, defaulting to 1000 [ 732.547343][ T5113] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 732.579859][T12083] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.630545][ T5213] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 732.638513][T12083] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.675420][T12083] bridge_slave_0: entered allmulticast mode [ 732.692453][T12083] bridge_slave_0: entered promiscuous mode [ 732.737995][T12083] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.745161][T12083] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.826626][ T9457] usb usb16-port1: attempt power cycle [ 732.846771][T12083] bridge_slave_1: entered allmulticast mode [ 732.854062][T12083] bridge_slave_1: entered promiscuous mode [ 732.885758][ T5213] usb 1-1: Using ep0 maxpacket: 8 [ 732.896627][ T5213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 732.943520][ T5213] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=42.10 [ 732.975657][ T5213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.978133][ T12] bridge_slave_1: left allmulticast mode [ 732.983670][ T5213] usb 1-1: Product: syz [ 732.983690][ T5213] usb 1-1: Manufacturer: syz [ 732.983704][ T5213] usb 1-1: SerialNumber: syz [ 733.036199][ T5213] usb 1-1: config 0 descriptor?? [ 733.058275][ T5213] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 733.067256][ T12] bridge_slave_1: left promiscuous mode [ 733.073002][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.097832][ T5213] dvb-usb: bulk message failed: -8 (3/0) [ 733.143118][ T5213] dvb-usb: Artec T14 - USB2.0 DVB-T error while loading driver (-22) [ 733.151832][ T12] bridge_slave_0: left allmulticast mode [ 733.187474][ T12] bridge_slave_0: left promiscuous mode [ 733.195508][ T5213] dvb_usb_dibusb_mc 1-1:0.0: probe with driver dvb_usb_dibusb_mc failed with error -22 [ 733.220023][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.506238][ T9457] usb usb16-port1: unable to enumerate USB device [ 733.649231][T12106] infiniband syz1: set active [ 733.713555][T12106] infiniband syz1: added lo [ 733.790219][T12106] syz1: rxe_create_cq: returned err = -12 [ 733.854862][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.873242][T12106] infiniband syz1: Couldn't create ib_mad CQ [ 733.925619][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.965530][ T5113] Bluetooth: hci2: command tx timeout [ 733.989334][ T12] bond0 (unregistering): Released all slaves [ 734.005240][T12106] infiniband syz1: Couldn't open port 1 [ 734.106745][ T8] usb 1-1: USB disconnect, device number 17 [ 734.195109][ T8773] bio_check_eod: 23021 callbacks suppressed [ 734.195130][ T8773] syz.1.839: attempt to access beyond end of device [ 734.195130][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 734.246845][ T6688] syz.4.352: attempt to access beyond end of device [ 734.246845][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 734.278753][T12106] RDS/IB: syz1: added [ 734.295751][ T9457] lo speed is unknown, defaulting to 1000 [ 734.301635][T12106] smc: adding ib device syz1 with port count 1 [ 734.315654][ T8773] syz.1.839: attempt to access beyond end of device [ 734.315654][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 734.409480][T12083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.445153][ T5113] Bluetooth: hci6: command 0x0406 tx timeout [ 734.451558][ T6688] syz.4.352: attempt to access beyond end of device [ 734.451558][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 734.467441][T12083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.492584][T12106] smc: ib device syz1 port 1 has pnetid [ 734.534492][ T8773] syz.1.839: attempt to access beyond end of device [ 734.534492][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 734.603143][ T8773] syz.1.839: attempt to access beyond end of device [ 734.603143][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 734.612997][ T6688] syz.4.352: attempt to access beyond end of device [ 734.612997][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 734.674934][T12106] lo speed is unknown, defaulting to 1000 [ 734.724812][ T6688] syz.4.352: attempt to access beyond end of device [ 734.724812][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 734.746223][T12083] team0: Port device team_slave_0 added [ 734.752238][ T5107] lo speed is unknown, defaulting to 1000 [ 734.759118][ T8773] syz.1.839: attempt to access beyond end of device [ 734.759118][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 734.814702][T12083] team0: Port device team_slave_1 added [ 734.870440][ T8773] syz.1.839: attempt to access beyond end of device [ 734.870440][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 735.049208][T12083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.074901][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.177853][T12083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.247266][T12083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.254242][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.426613][T12083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.796832][T12083] hsr_slave_0: entered promiscuous mode [ 735.897101][T12083] hsr_slave_1: entered promiscuous mode [ 735.936023][T12083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 735.943941][T12083] Cannot create hsr debugfs directory [ 735.997773][T12148] kvm: emulating exchange as write [ 736.056626][ T5113] Bluetooth: hci2: command tx timeout [ 736.153787][T12106] lo speed is unknown, defaulting to 1000 [ 736.490512][T12166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1748'. [ 737.768917][T12181] fuse: Bad value for 'user_id' [ 737.774299][T12181] fuse: Bad value for 'user_id' [ 738.123131][ T5113] Bluetooth: hci2: command tx timeout [ 738.178154][ T29] audit: type=1326 audit(1720792915.377:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.2.1750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8000575bd9 code=0x0 [ 739.202936][ T6688] bio_check_eod: 14024 callbacks suppressed [ 739.202957][ T6688] syz.4.352: attempt to access beyond end of device [ 739.202957][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 739.210317][ T8773] syz.1.839: attempt to access beyond end of device [ 739.210317][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 739.248535][ T8773] syz.1.839: attempt to access beyond end of device [ 739.248535][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 739.312545][ T6688] syz.4.352: attempt to access beyond end of device [ 739.312545][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 739.451405][ T8773] syz.1.839: attempt to access beyond end of device [ 739.451405][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 739.453810][T12083] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 739.505337][ T8773] syz.1.839: attempt to access beyond end of device [ 739.505337][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 739.541016][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1754'. [ 739.662582][ T6688] syz.4.352: attempt to access beyond end of device [ 739.662582][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 739.972181][ T6688] syz.4.352: attempt to access beyond end of device [ 739.972181][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 740.004139][ T8773] syz.1.839: attempt to access beyond end of device [ 740.004139][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 740.071927][ T6688] syz.4.352: attempt to access beyond end of device [ 740.071927][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 740.214872][T12106] lo speed is unknown, defaulting to 1000 [ 740.222243][T12083] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 740.254924][T12083] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 740.355674][T12083] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 740.559481][T12196] overlayfs: failed to resolve './file0': -2 [ 740.682062][ T5152] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 740.715192][T12083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.815682][T12083] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.860203][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.867403][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.912032][ T5152] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 740.923458][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.930626][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.997319][ T5152] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 741.048271][ T5152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.486054][T12106] lo speed is unknown, defaulting to 1000 [ 741.494582][ T5152] usb 5-1: Product: syz [ 741.498783][ T5152] usb 5-1: Manufacturer: syz [ 741.605157][ T5152] usb 5-1: SerialNumber: syz [ 741.650197][T12212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1759'. [ 741.668004][ T5152] usb 5-1: config 0 descriptor?? [ 742.134718][T12216] fuse: Bad value for 'user_id' [ 742.140012][T12216] fuse: Bad value for 'user_id' [ 746.934399][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.940936][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.002226][ T5152] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110 [ 747.636042][ T5152] asix 5-1:0.0: probe with driver asix failed with error -110 [ 748.152521][ T8773] bio_check_eod: 8802 callbacks suppressed [ 748.152542][ T8773] syz.1.839: attempt to access beyond end of device [ 748.152542][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 748.211566][ T6688] syz.4.352: attempt to access beyond end of device [ 748.211566][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 748.377478][ T8773] syz.1.839: attempt to access beyond end of device [ 748.377478][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 748.480736][ T6688] syz.4.352: attempt to access beyond end of device [ 748.480736][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 748.494218][T10826] usb 5-1: USB disconnect, device number 13 [ 748.545814][ T8773] syz.1.839: attempt to access beyond end of device [ 748.545814][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 748.567938][ T6688] syz.4.352: attempt to access beyond end of device [ 748.567938][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 748.598829][ T5110] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 748.626024][ T5110] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 748.633640][ T5110] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 748.641746][ T5110] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 748.649352][ T5110] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 748.656651][ T5110] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 748.715914][ T8773] syz.1.839: attempt to access beyond end of device [ 748.715914][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 748.729489][ T8773] syz.1.839: attempt to access beyond end of device [ 748.729489][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 748.742979][ T8773] syz.1.839: attempt to access beyond end of device [ 748.742979][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 748.760171][ T8773] syz.1.839: attempt to access beyond end of device [ 748.760171][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 748.845122][T12083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.132107][T12083] veth0_vlan: entered promiscuous mode [ 749.201435][T12106] lo speed is unknown, defaulting to 1000 [ 749.233947][T12083] veth1_vlan: entered promiscuous mode [ 749.348970][T12083] veth0_macvtap: entered promiscuous mode [ 749.380782][T12083] veth1_macvtap: entered promiscuous mode [ 749.392471][ T29] audit: type=1326 audit(1720792926.593:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.4.1764" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa07a975bd9 code=0x0 [ 749.471285][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.541632][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.575881][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.637370][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.656924][ T6469] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 749.676088][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.699166][ T6469] Buffer I/O error on dev loop3, logical block 8833403, async page read [ 749.727343][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.730211][ T6469] Buffer I/O error on dev loop3, logical block 13269809, async page read [ 749.780114][ T6469] Buffer I/O error on dev loop3, logical block 8073606, async page read [ 749.787180][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.837202][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.885897][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.967479][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.997294][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.035527][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.062201][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.102600][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.134498][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.668354][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.741943][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.757968][ T5110] Bluetooth: hci9: command tx timeout [ 750.830411][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.918630][T12083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.955062][T12106] lo speed is unknown, defaulting to 1000 [ 750.966136][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.009281][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.040639][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.077771][T12250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1771'. [ 751.086523][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.128553][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.167780][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.200766][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.252685][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.287398][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.316489][T10826] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 751.341902][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.377796][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.416425][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.452684][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.496350][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.546537][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.583665][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.626670][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.668819][T10826] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 751.698632][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.736802][T10826] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 751.738464][T12083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.775456][T10826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.834995][T10826] usb 1-1: Product: syz [ 751.846186][T10826] usb 1-1: Manufacturer: syz [ 751.850817][T10826] usb 1-1: SerialNumber: syz [ 751.894145][T12083] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.916708][T10826] usb 1-1: config 0 descriptor?? [ 751.963756][T12083] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.008081][T12083] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.038344][T12083] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.253058][T12258] fuse: Bad value for 'user_id' [ 752.258835][T12258] fuse: Bad value for 'user_id' [ 752.846190][ T5110] Bluetooth: hci9: command tx timeout [ 753.162960][ T8773] bio_check_eod: 14460 callbacks suppressed [ 753.163157][ T8773] syz.1.839: attempt to access beyond end of device [ 753.163157][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 753.167668][ T6688] syz.4.352: attempt to access beyond end of device [ 753.167668][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 753.235582][T10826] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 753.300369][T10826] asix 1-1:0.0: probe with driver asix failed with error -71 [ 753.369269][ T8773] syz.1.839: attempt to access beyond end of device [ 753.369269][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 753.436401][ T5110] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 753.455559][T10826] usb 1-1: USB disconnect, device number 18 [ 753.488887][ T8773] syz.1.839: attempt to access beyond end of device [ 753.488887][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 753.526431][ T6688] syz.4.352: attempt to access beyond end of device [ 753.526431][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 753.567270][ T8773] syz.1.839: attempt to access beyond end of device [ 753.567270][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 753.630922][ T7748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.652341][ T7748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.662554][ T8773] syz.1.839: attempt to access beyond end of device [ 753.662554][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 753.662857][ T6688] syz.4.352: attempt to access beyond end of device [ 753.662857][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 753.748696][ T8773] syz.1.839: attempt to access beyond end of device [ 753.748696][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 753.778549][ T6688] syz.4.352: attempt to access beyond end of device [ 753.778549][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 753.794171][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.814557][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.027130][ T5110] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 754.101751][T12106] lo speed is unknown, defaulting to 1000 [ 754.307538][ T29] audit: type=1326 audit(1720792931.525:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.0.1777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2da175bd9 code=0x0 [ 754.914870][ T5110] Bluetooth: hci9: command tx timeout [ 754.978258][T12106] lo speed is unknown, defaulting to 1000 [ 755.111779][ T29] audit: type=1326 audit(1720792932.325:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12273 comm="syz.2.1779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8000575bd9 code=0x0 [ 755.209208][T12287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1781'. [ 755.569627][T12291] fuse: Bad value for 'fd' [ 756.993899][ T5110] Bluetooth: hci9: command tx timeout [ 761.083225][ T8773] bio_check_eod: 7078 callbacks suppressed [ 761.083248][ T8773] syz.1.839: attempt to access beyond end of device [ 761.083248][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 761.131763][ T8773] syz.1.839: attempt to access beyond end of device [ 761.131763][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 761.152524][ T8773] syz.1.839: attempt to access beyond end of device [ 761.152524][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 761.184299][ T6688] syz.4.352: attempt to access beyond end of device [ 761.184299][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 761.293326][ T8773] syz.1.839: attempt to access beyond end of device [ 761.293326][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 761.351617][ T6688] syz.4.352: attempt to access beyond end of device [ 761.351617][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 761.353920][ T8773] syz.1.839: attempt to access beyond end of device [ 761.353920][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 761.442241][ T6688] syz.4.352: attempt to access beyond end of device [ 761.442241][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 761.547370][ T6688] syz.4.352: attempt to access beyond end of device [ 761.547370][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 761.629187][T12106] lo speed is unknown, defaulting to 1000 [ 761.712846][ T6688] syz.4.352: attempt to access beyond end of device [ 761.712846][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 761.840290][T12295] FAULT_INJECTION: forcing a failure. [ 761.840290][T12295] name failslab, interval 1, probability 0, space 0, times 0 [ 761.890033][T12295] CPU: 0 UID: 0 PID: 12295 Comm: syz.0.1785 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 761.900375][T12295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 761.910450][T12295] Call Trace: [ 761.913739][T12295] [ 761.916678][T12295] dump_stack_lvl+0x241/0x360 [ 761.921373][T12295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 761.926588][T12295] ? __pfx__printk+0x10/0x10 [ 761.931194][T12295] ? ref_tracker_alloc+0x332/0x490 [ 761.936316][T12295] should_fail_ex+0x3b0/0x4e0 [ 761.941055][T12295] ? skb_clone+0x20c/0x390 [ 761.945475][T12295] should_failslab+0xac/0x100 [ 761.950147][T12295] ? skb_clone+0x20c/0x390 [ 761.954554][T12295] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 761.960096][T12295] skb_clone+0x20c/0x390 [ 761.964331][T12295] __netlink_deliver_tap+0x3cc/0x7c0 [ 761.969612][T12295] ? netlink_deliver_tap+0x2e/0x1b0 [ 761.974804][T12295] netlink_deliver_tap+0x19d/0x1b0 [ 761.979908][T12295] netlink_unicast+0x7be/0x990 [ 761.984670][T12295] ? __pfx_netlink_unicast+0x10/0x10 [ 761.989947][T12295] ? __virt_addr_valid+0x183/0x530 [ 761.995049][T12295] ? __check_object_size+0x49c/0x900 [ 762.000587][T12295] ? bpf_lsm_netlink_send+0x9/0x10 [ 762.005695][T12295] netlink_sendmsg+0x8e4/0xcb0 [ 762.010459][T12295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.015750][T12295] ? __import_iovec+0x536/0x820 [ 762.020589][T12295] ? aa_sock_msg_perm+0x91/0x160 [ 762.025519][T12295] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 762.030788][T12295] ? security_socket_sendmsg+0x87/0xb0 [ 762.036241][T12295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.041522][T12295] __sock_sendmsg+0x221/0x270 [ 762.046193][T12295] ____sys_sendmsg+0x525/0x7d0 [ 762.050950][T12295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 762.056315][T12295] __sys_sendmsg+0x2b0/0x3a0 [ 762.060895][T12295] ? __pfx___sys_sendmsg+0x10/0x10 [ 762.066008][T12295] ? vfs_write+0x7c4/0xc90 [ 762.070433][T12295] ? fput+0x193/0x210 [ 762.074504][T12295] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 762.080951][T12295] ? rcu_is_watching+0x15/0xb0 [ 762.085704][T12295] ? rcu_is_watching+0x15/0xb0 [ 762.090457][T12295] do_syscall_64+0xf3/0x230 [ 762.094958][T12295] ? clear_bhb_loop+0x35/0x90 [ 762.099624][T12295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.105506][T12295] RIP: 0033:0x7fa2da175bd9 [ 762.109913][T12295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.129511][T12295] RSP: 002b:00007fa2daeeb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.137922][T12295] RAX: ffffffffffffffda RBX: 00007fa2da303f60 RCX: 00007fa2da175bd9 [ 762.145966][T12295] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 762.153927][T12295] RBP: 00007fa2daeeb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 762.161881][T12295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.169841][T12295] R13: 000000000000000b R14: 00007fa2da303f60 R15: 00007ffe9442d528 [ 762.177809][T12295] [ 762.766334][T12306] FAULT_INJECTION: forcing a failure. [ 762.766334][T12306] name failslab, interval 1, probability 0, space 0, times 0 [ 762.777837][T12295] bridge0: entered promiscuous mode [ 762.836859][T12306] CPU: 1 UID: 0 PID: 12306 Comm: syz.3.1789 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 762.847142][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 762.857210][T12306] Call Trace: [ 762.860501][T12306] [ 762.863441][T12306] dump_stack_lvl+0x241/0x360 [ 762.868142][T12306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.873358][T12306] ? __pfx__printk+0x10/0x10 [ 762.877933][T12306] ? __pfx___might_resched+0x10/0x10 [ 762.883201][T12306] should_fail_ex+0x3b0/0x4e0 [ 762.887864][T12306] should_failslab+0xac/0x100 [ 762.892535][T12306] ? apparmor_sk_alloc_security+0x77/0x100 [ 762.898355][T12306] __kmalloc_cache_noprof+0x6c/0x2c0 [ 762.903641][T12306] apparmor_sk_alloc_security+0x77/0x100 [ 762.909270][T12306] security_sk_alloc+0x75/0xb0 [ 762.914048][T12306] sk_prot_alloc+0xfa/0x210 [ 762.918569][T12306] ? sk_alloc+0x26/0x370 [ 762.922796][T12306] sk_alloc+0x38/0x370 [ 762.926848][T12306] ? bpf_test_init+0x15a/0x180 [ 762.931633][T12306] ? bpf_ctx_init+0x162/0x1b0 [ 762.936291][T12306] bpf_prog_test_run_skb+0x3bd/0x1820 [ 762.941655][T12306] ? __pfx_lock_release+0x10/0x10 [ 762.946685][T12306] ? rcu_is_watching+0x15/0xb0 [ 762.951439][T12306] ? lock_release+0xbf/0xa30 [ 762.956533][T12306] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 762.962865][T12306] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 762.968664][T12306] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 762.974470][T12306] bpf_prog_test_run+0x33a/0x3b0 [ 762.979412][T12306] __sys_bpf+0x48d/0x810 [ 762.983647][T12306] ? __pfx___sys_bpf+0x10/0x10 [ 762.988398][T12306] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 762.994909][T12306] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 763.001259][T12306] ? rcu_is_watching+0x15/0xb0 [ 763.006044][T12306] __x64_sys_bpf+0x7c/0x90 [ 763.010478][T12306] do_syscall_64+0xf3/0x230 [ 763.015000][T12306] ? clear_bhb_loop+0x35/0x90 [ 763.019694][T12306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.025602][T12306] RIP: 0033:0x7f8be7f75bd9 [ 763.030023][T12306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.049814][T12306] RSP: 002b:00007f8be8d2c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 763.058251][T12306] RAX: ffffffffffffffda RBX: 00007f8be8103f60 RCX: 00007f8be7f75bd9 [ 763.066247][T12306] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 763.074227][T12306] RBP: 00007f8be8d2c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 763.082187][T12306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.090140][T12306] R13: 000000000000000b R14: 00007f8be8103f60 R15: 00007ffe4cbff5b8 [ 763.098105][T12306] [ 763.110200][T12295] bridge0: left promiscuous mode [ 763.273903][ T5110] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 763.315237][T12106] lo speed is unknown, defaulting to 1000 [ 763.330112][T12310] loop0: detected capacity change from 0 to 512 [ 763.364837][ T5110] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 763.481147][T12310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.592472][T12319] FAULT_INJECTION: forcing a failure. [ 763.592472][T12319] name failslab, interval 1, probability 0, space 0, times 0 [ 763.602033][T12310] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 763.670350][T12319] CPU: 0 UID: 0 PID: 12319 Comm: syz.2.1791 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 763.680622][T12319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 763.690675][T12319] Call Trace: [ 763.693942][T12319] [ 763.696862][T12319] dump_stack_lvl+0x241/0x360 [ 763.701629][T12319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 763.706826][T12319] ? __pfx__printk+0x10/0x10 [ 763.711409][T12319] ? ref_tracker_alloc+0x332/0x490 [ 763.716509][T12319] should_fail_ex+0x3b0/0x4e0 [ 763.721182][T12319] ? skb_clone+0x20c/0x390 [ 763.725592][T12319] should_failslab+0xac/0x100 [ 763.730262][T12319] ? skb_clone+0x20c/0x390 [ 763.734670][T12319] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 763.740042][T12319] skb_clone+0x20c/0x390 [ 763.744280][T12319] __netlink_deliver_tap+0x3cc/0x7c0 [ 763.749566][T12319] ? netlink_deliver_tap+0x2e/0x1b0 [ 763.754763][T12319] netlink_deliver_tap+0x19d/0x1b0 [ 763.759872][T12319] netlink_unicast+0x7be/0x990 [ 763.764632][T12319] ? __pfx_netlink_unicast+0x10/0x10 [ 763.769908][T12319] ? __virt_addr_valid+0x183/0x530 [ 763.775011][T12319] ? __check_object_size+0x49c/0x900 [ 763.780292][T12319] ? bpf_lsm_netlink_send+0x9/0x10 [ 763.785397][T12319] netlink_sendmsg+0x8e4/0xcb0 [ 763.790161][T12319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.795531][T12319] ? __import_iovec+0x536/0x820 [ 763.800384][T12319] ? aa_sock_msg_perm+0x91/0x160 [ 763.805320][T12319] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 763.810590][T12319] ? security_socket_sendmsg+0x87/0xb0 [ 763.816046][T12319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.821583][T12319] __sock_sendmsg+0x221/0x270 [ 763.826254][T12319] ____sys_sendmsg+0x525/0x7d0 [ 763.831020][T12319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 763.836306][T12319] __sys_sendmsg+0x2b0/0x3a0 [ 763.840887][T12319] ? __pfx___sys_sendmsg+0x10/0x10 [ 763.845985][T12319] ? vfs_write+0x7c4/0xc90 [ 763.850406][T12319] ? fput+0x193/0x210 [ 763.854642][T12319] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 763.860959][T12319] ? rcu_is_watching+0x15/0xb0 [ 763.865799][T12319] ? rcu_is_watching+0x15/0xb0 [ 763.870551][T12319] do_syscall_64+0xf3/0x230 [ 763.875134][T12319] ? clear_bhb_loop+0x35/0x90 [ 763.879802][T12319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.885687][T12319] RIP: 0033:0x7f8000575bd9 [ 763.890094][T12319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.909688][T12319] RSP: 002b:00007f7ffffff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.918094][T12319] RAX: ffffffffffffffda RBX: 00007f8000703f60 RCX: 00007f8000575bd9 [ 763.926057][T12319] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 763.934025][T12319] RBP: 00007f7ffffff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 763.941982][T12319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.950040][T12319] R13: 000000000000000b R14: 00007f8000703f60 R15: 00007ffd12ba6378 [ 763.958102][T12319] [ 764.287484][T12310] FAULT_INJECTION: forcing a failure. [ 764.287484][T12310] name failslab, interval 1, probability 0, space 0, times 0 [ 764.340219][T12310] CPU: 0 UID: 0 PID: 12310 Comm: syz.0.1790 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 764.350515][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 764.360578][T12310] Call Trace: [ 764.363860][T12310] [ 764.366793][T12310] dump_stack_lvl+0x241/0x360 [ 764.371484][T12310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.376694][T12310] ? __pfx__printk+0x10/0x10 [ 764.381295][T12310] ? __pfx_lock_release+0x10/0x10 [ 764.386326][T12310] ? __pfx___might_resched+0x10/0x10 [ 764.391620][T12310] should_fail_ex+0x3b0/0x4e0 [ 764.396327][T12310] ? ext4_find_extent+0x379/0xe20 [ 764.401378][T12310] should_failslab+0xac/0x100 [ 764.406068][T12310] ? ext4_find_extent+0x379/0xe20 [ 764.411104][T12310] __kmalloc_noprof+0xd8/0x400 [ 764.415880][T12310] ? ext4_es_remove_extent+0x339/0x570 [ 764.421350][T12310] ext4_find_extent+0x379/0xe20 [ 764.426208][T12310] ? rcu_is_watching+0x15/0xb0 [ 764.430975][T12310] ? lock_acquire+0xe3/0x550 [ 764.435664][T12310] ext4_swap_extents+0x2ac/0x2150 [ 764.440703][T12310] ? __pfx_lock_acquire+0x10/0x10 [ 764.445742][T12310] ? kmem_cache_free+0x145/0x350 [ 764.450699][T12310] ? __pfx_ext4_swap_extents+0x10/0x10 [ 764.456166][T12310] ? down_write_nested+0x195/0x220 [ 764.461278][T12310] ? __pfx_down_write_nested+0x10/0x10 [ 764.466744][T12310] move_extent_per_page+0x17f3/0x3110 [ 764.472147][T12310] ? __pfx_move_extent_per_page+0x10/0x10 [ 764.477882][T12310] ext4_move_extents+0xa06/0xec0 [ 764.482835][T12310] ? __pfx_ext4_move_extents+0x10/0x10 [ 764.488295][T12310] ? __fget_files+0x3f6/0x470 [ 764.493065][T12310] ext4_ioctl+0x34b8/0x5590 [ 764.497574][T12310] ? kasan_save_track+0x51/0x80 [ 764.502433][T12310] ? kfree+0x149/0x360 [ 764.506502][T12310] ? do_syscall_64+0xf3/0x230 [ 764.511184][T12310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.517273][T12310] ? do_vfs_ioctl+0x1e77/0x2e50 [ 764.522155][T12310] ? __pfx_ext4_ioctl+0x10/0x10 [ 764.527019][T12310] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 764.532072][T12310] ? rcu_is_watching+0x15/0xb0 [ 764.536860][T12310] ? lock_release+0xbf/0xa30 [ 764.541469][T12310] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 764.547827][T12310] ? __pfx_lock_release+0x10/0x10 [ 764.552870][T12310] ? rcu_is_watching+0x15/0xb0 [ 764.557656][T12310] ? kfree+0x149/0x360 [ 764.562715][T12310] ? tomoyo_path_number_perm+0x71a/0x880 [ 764.568454][T12310] ? tomoyo_path_number_perm+0x208/0x880 [ 764.574117][T12310] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 764.580110][T12310] ? __pfx_lock_acquire+0x10/0x10 [ 764.585150][T12310] ? fput+0x193/0x210 [ 764.589138][T12310] ? __fget_files+0x29/0x470 [ 764.593734][T12310] ? __fget_files+0x3f6/0x470 [ 764.598409][T12310] ? __fget_files+0x29/0x470 [ 764.603000][T12310] ? bpf_lsm_file_ioctl+0x9/0x10 [ 764.607941][T12310] ? security_file_ioctl+0x87/0xb0 [ 764.613055][T12310] ? __pfx_ext4_ioctl+0x10/0x10 [ 764.617910][T12310] __se_sys_ioctl+0xfc/0x170 [ 764.622510][T12310] do_syscall_64+0xf3/0x230 [ 764.627026][T12310] ? clear_bhb_loop+0x35/0x90 [ 764.631717][T12310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.637613][T12310] RIP: 0033:0x7fa2da175bd9 [ 764.642029][T12310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.661645][T12310] RSP: 002b:00007fa2daeeb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.670073][T12310] RAX: ffffffffffffffda RBX: 00007fa2da303f60 RCX: 00007fa2da175bd9 [ 764.678045][T12310] RDX: 00000000200000c0 RSI: 00000000c028660f RDI: 0000000000000004 [ 764.686029][T12310] RBP: 00007fa2daeeb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 764.694022][T12310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.702014][T12310] R13: 000000000000000b R14: 00007fa2da303f60 R15: 00007ffe9442d528 [ 764.710008][T12310] [ 764.790658][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 764.895750][T12106] lo speed is unknown, defaulting to 1000 [ 764.928755][T11358] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.202269][T12332] fuse: Bad value for 'fd' [ 765.860740][T12106] lo speed is unknown, defaulting to 1000 [ 766.119425][ T6688] bio_check_eod: 19184 callbacks suppressed [ 766.119448][ T6688] syz.4.352: attempt to access beyond end of device [ 766.119448][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 766.150875][ T8773] syz.1.839: attempt to access beyond end of device [ 766.150875][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 766.201571][T12339] loop0: detected capacity change from 0 to 32768 [ 766.229734][ T8773] syz.1.839: attempt to access beyond end of device [ 766.229734][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 766.257608][T12339] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1799 (12339) [ 766.291377][ T6688] syz.4.352: attempt to access beyond end of device [ 766.291377][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 766.308078][ T8773] syz.1.839: attempt to access beyond end of device [ 766.308078][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 766.328339][T12339] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 766.362522][T12339] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 766.365726][ T6688] syz.4.352: attempt to access beyond end of device [ 766.365726][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 766.379692][T12339] BTRFS info (device loop0): using free-space-tree [ 766.425642][ T8773] syz.1.839: attempt to access beyond end of device [ 766.425642][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 766.449793][ T6688] syz.4.352: attempt to access beyond end of device [ 766.449793][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 766.484607][ T6688] syz.4.352: attempt to access beyond end of device [ 766.484607][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 766.489734][ T8773] syz.1.839: attempt to access beyond end of device [ 766.489734][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 766.777777][ T5110] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 766.972523][ T5110] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 767.280280][T11358] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 767.460688][T12373] FAULT_INJECTION: forcing a failure. [ 767.460688][T12373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.529665][T12373] CPU: 0 UID: 0 PID: 12373 Comm: syz.4.1806 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 767.539949][T12373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 767.550110][T12373] Call Trace: [ 767.553398][T12373] [ 767.556331][T12373] dump_stack_lvl+0x241/0x360 [ 767.561035][T12373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 767.566253][T12373] ? __pfx__printk+0x10/0x10 [ 767.570861][T12373] ? snprintf+0xda/0x120 [ 767.575114][T12373] should_fail_ex+0x3b0/0x4e0 [ 767.579811][T12373] _copy_to_user+0x2f/0xb0 [ 767.584238][T12373] simple_read_from_buffer+0xca/0x150 [ 767.589621][T12373] proc_fail_nth_read+0x1e9/0x250 [ 767.594663][T12373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.600235][T12373] ? bpf_lsm_file_permission+0x9/0x10 [ 767.605617][T12373] ? rw_verify_area+0x520/0x6b0 [ 767.610486][T12373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.616051][T12373] vfs_read+0x204/0xbc0 [ 767.620224][T12373] ? __pfx_lock_release+0x10/0x10 [ 767.625283][T12373] ? __pfx_vfs_read+0x10/0x10 [ 767.630266][T12373] ? __fget_files+0x29/0x470 [ 767.634874][T12373] ? __fget_files+0x3f6/0x470 [ 767.639572][T12373] ksys_read+0x1a0/0x2c0 [ 767.643852][T12373] ? __pfx_ksys_read+0x10/0x10 [ 767.648662][T12373] ? rcu_is_watching+0x15/0xb0 [ 767.653439][T12373] ? rcu_is_watching+0x15/0xb0 [ 767.658215][T12373] do_syscall_64+0xf3/0x230 [ 767.662736][T12373] ? clear_bhb_loop+0x35/0x90 [ 767.667430][T12373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.673339][T12373] RIP: 0033:0x7fa07a9746bc [ 767.677769][T12373] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 767.697396][T12373] RSP: 002b:00007fa07b81e040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 767.705925][T12373] RAX: ffffffffffffffda RBX: 00007fa07ab03f60 RCX: 00007fa07a9746bc [ 767.713918][T12373] RDX: 000000000000000f RSI: 00007fa07b81e0b0 RDI: 0000000000000005 [ 767.721906][T12373] RBP: 00007fa07b81e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 767.729892][T12373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.737966][T12373] R13: 000000000000000b R14: 00007fa07ab03f60 R15: 00007ffef3352958 [ 767.745961][T12373] [ 767.883770][ T12] hsr_slave_0: left promiscuous mode [ 767.891722][ T12] hsr_slave_1: left promiscuous mode [ 767.905065][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.941398][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.017573][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.072294][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.158065][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'. [ 768.170090][T12380] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1807'. [ 768.238970][ T12] veth1_macvtap: left promiscuous mode [ 768.246055][ T12] veth0_macvtap: left promiscuous mode [ 768.283196][ T12] veth1_vlan: left promiscuous mode [ 768.313817][ T12] veth0_vlan: left promiscuous mode [ 769.061576][T12390] fuse: Bad value for 'fd' [ 770.276259][ T12] team0 (unregistering): Port device team_slave_1 removed [ 770.354198][ T12] team0 (unregistering): Port device team_slave_0 removed [ 770.369416][T12392] loop0: detected capacity change from 0 to 8192 [ 770.696619][T12392] loop0: detected capacity change from 0 to 512 [ 771.126401][ T6688] bio_check_eod: 28399 callbacks suppressed [ 771.126424][ T6688] syz.4.352: attempt to access beyond end of device [ 771.126424][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 771.149961][ T8773] syz.1.839: attempt to access beyond end of device [ 771.149961][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 771.174290][ T8773] syz.1.839: attempt to access beyond end of device [ 771.174290][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 771.198279][ T6688] syz.4.352: attempt to access beyond end of device [ 771.198279][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 771.232540][ T8773] syz.1.839: attempt to access beyond end of device [ 771.232540][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 771.257992][ T6688] syz.4.352: attempt to access beyond end of device [ 771.257992][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 771.285577][ T8773] syz.1.839: attempt to access beyond end of device [ 771.285577][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 771.301055][ T6688] syz.4.352: attempt to access beyond end of device [ 771.301055][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 771.343517][ T8773] syz.1.839: attempt to access beyond end of device [ 771.343517][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 771.470134][ T8773] syz.1.839: attempt to access beyond end of device [ 771.470134][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 771.750897][T12223] chnl_net:caif_netlink_parms(): no params data found [ 771.764160][ T5110] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 771.873113][ T5110] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 772.258074][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.303172][T12223] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.335314][T12223] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.369979][T12223] bridge_slave_0: entered allmulticast mode [ 772.377139][T12223] bridge_slave_0: entered promiscuous mode [ 772.435464][T12223] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.459605][T12223] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.466871][T12223] bridge_slave_1: entered allmulticast mode [ 772.517787][T12223] bridge_slave_1: entered promiscuous mode [ 772.684647][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.844381][T12427] fuse: Bad value for 'fd' [ 774.589696][ T5113] Bluetooth: hci0: command 0x0406 tx timeout [ 775.253021][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.271410][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 775.408146][T12223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.657087][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.735664][T12223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.747395][T12434] fuse: Bad value for 'fd' [ 775.752984][T12434] kAFS: Can only specify source 'none' with -o dyn [ 775.844200][T12223] team0: Port device team_slave_0 added [ 775.875340][T12223] team0: Port device team_slave_1 added [ 776.015916][T12223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.059536][T12223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.129740][ T6688] bio_check_eod: 18656 callbacks suppressed [ 776.129763][ T6688] syz.4.352: attempt to access beyond end of device [ 776.129763][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 776.151406][ T8773] syz.1.839: attempt to access beyond end of device [ 776.151406][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 776.153229][T12223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.187032][ T8773] syz.1.839: attempt to access beyond end of device [ 776.187032][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 776.208439][ T6688] syz.4.352: attempt to access beyond end of device [ 776.208439][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 776.235863][ T8773] syz.1.839: attempt to access beyond end of device [ 776.235863][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 776.255550][ T6688] syz.4.352: attempt to access beyond end of device [ 776.255550][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 776.261590][T12223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.279099][ T8773] syz.1.839: attempt to access beyond end of device [ 776.279099][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 776.310816][ T6688] syz.4.352: attempt to access beyond end of device [ 776.310816][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 776.323989][T12223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.370167][ T8773] syz.1.839: attempt to access beyond end of device [ 776.370167][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 776.393974][ T6688] syz.4.352: attempt to access beyond end of device [ 776.393974][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 776.501223][T12223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.858056][ T12] bridge_slave_1: left allmulticast mode [ 776.864208][ T12] bridge_slave_1: left promiscuous mode [ 776.889722][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.921576][ T12] bridge_slave_0: left allmulticast mode [ 776.927304][ T12] bridge_slave_0: left promiscuous mode [ 776.949570][ T5110] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 777.033676][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.190008][ T5110] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 777.634663][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.707422][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.745961][ T12] bond0 (unregistering): Released all slaves [ 777.804258][T12223] hsr_slave_0: entered promiscuous mode [ 777.827127][T12223] hsr_slave_1: entered promiscuous mode [ 777.868514][T12223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 777.887749][T12223] Cannot create hsr debugfs directory [ 778.033373][T12451] lo speed is unknown, defaulting to 1000 [ 778.867981][T12459] fuse: Bad value for 'fd' [ 779.999593][ T12] hsr_slave_0: left promiscuous mode [ 780.045590][ T12] hsr_slave_1: left promiscuous mode [ 780.140770][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.148569][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.233311][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.268136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.357034][ T12] veth1_macvtap: left promiscuous mode [ 780.366902][ T12] veth0_macvtap: left promiscuous mode [ 780.377295][ T5113] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 780.389650][ T5113] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 780.401636][ T5113] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 780.401770][ T12] veth1_vlan: left promiscuous mode [ 780.415227][ T5113] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 780.427832][ T5113] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 780.435289][ T5113] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 780.442827][ T12] veth0_vlan: left promiscuous mode [ 780.568743][T12464] rdma_rxe: rxe_newlink: failed to add lo [ 780.800558][ T12] infiniband syz1: set down [ 781.141346][ T6688] bio_check_eod: 38464 callbacks suppressed [ 781.141369][ T6688] syz.4.352: attempt to access beyond end of device [ 781.141369][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 781.164772][ T8773] syz.1.839: attempt to access beyond end of device [ 781.164772][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 781.191623][ T8773] syz.1.839: attempt to access beyond end of device [ 781.191623][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 781.215961][ T6688] syz.4.352: attempt to access beyond end of device [ 781.215961][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 781.230049][ T8773] syz.1.839: attempt to access beyond end of device [ 781.230049][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 781.245448][ T6688] syz.4.352: attempt to access beyond end of device [ 781.245448][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 781.299770][ T8773] syz.1.839: attempt to access beyond end of device [ 781.299770][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 781.325591][ T6688] syz.4.352: attempt to access beyond end of device [ 781.325591][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 781.354290][ T8773] syz.1.839: attempt to access beyond end of device [ 781.354290][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 781.372574][ T6688] syz.4.352: attempt to access beyond end of device [ 781.372574][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 781.413013][ T12] team0 (unregistering): Port device team_slave_1 removed [ 781.512344][ T12] team0 (unregistering): Port device team_slave_0 removed [ 782.073308][ T5298] smc: removing ib device syz1 [ 782.140682][ T5150] lo speed is unknown, defaulting to 1000 [ 782.522882][ T5110] Bluetooth: hci8: command tx timeout [ 782.608073][T12479] fuse: Bad value for 'fd' [ 782.613768][T12479] kAFS: Can only specify source 'none' with -o dyn [ 782.856967][ T5113] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 782.998984][ T5113] Bluetooth: Unexpected continuation frame (len 18) [ 783.551233][ T5113] Bluetooth: hci2: link tx timeout [ 783.556563][ T5113] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 784.285933][T12223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 784.421911][T12495] afs: Unknown parameter 'obj_user' [ 784.589688][T12488] Bluetooth: hci8: command tx timeout [ 784.686329][T12223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 784.829927][T12488] Bluetooth: hci5: command 0x0406 tx timeout [ 785.119902][T12223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 785.172535][T12223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 785.383533][T12465] chnl_net:caif_netlink_parms(): no params data found [ 785.478865][ T5110] Bluetooth: hci2: command tx timeout [ 785.651876][T12500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1842'. [ 785.830513][T12501] bridge0: port 3(vlan2) entered blocking state [ 785.837586][T12501] bridge0: port 3(vlan2) entered disabled state [ 785.930127][T12501] vlan2: entered allmulticast mode [ 786.063190][T12502] rdma_rxe: rxe_newlink: failed to add lo [ 786.082825][T12501] vlan2: left allmulticast mode [ 786.149733][ T6688] bio_check_eod: 35933 callbacks suppressed [ 786.149753][ T6688] syz.4.352: attempt to access beyond end of device [ 786.149753][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 786.171638][ T8773] syz.1.839: attempt to access beyond end of device [ 786.171638][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 786.249920][ T8773] syz.1.839: attempt to access beyond end of device [ 786.249920][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 786.269398][ T6688] syz.4.352: attempt to access beyond end of device [ 786.269398][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 786.346665][ T8773] syz.1.839: attempt to access beyond end of device [ 786.346665][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 786.362302][ T8773] syz.1.839: attempt to access beyond end of device [ 786.362302][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 786.376258][ T8773] syz.1.839: attempt to access beyond end of device [ 786.376258][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 786.392587][ T6688] syz.4.352: attempt to access beyond end of device [ 786.392587][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 786.406258][ T8773] syz.1.839: attempt to access beyond end of device [ 786.406258][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 786.486521][ T8773] syz.1.839: attempt to access beyond end of device [ 786.486521][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 786.651026][T12510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.669573][ T5113] Bluetooth: hci8: command tx timeout [ 786.701589][T12465] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.708860][T12465] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.782937][T12465] bridge_slave_0: entered allmulticast mode [ 786.800995][T12465] bridge_slave_0: entered promiscuous mode [ 786.849682][T12465] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.867056][T12465] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.909589][T12465] bridge_slave_1: entered allmulticast mode [ 786.917889][T12465] bridge_slave_1: entered promiscuous mode [ 787.088483][T12465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.136398][T12465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.224259][ T5113] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 787.232922][ T5113] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 787.319605][T12465] team0: Port device team_slave_0 added [ 787.358977][ T5113] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 787.374729][T12465] team0: Port device team_slave_1 added [ 787.549710][ T5113] Bluetooth: hci2: command 0x0406 tx timeout [ 787.783283][T12465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.848704][T12465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.874647][ C0] vkms_vblank_simulate: vblank timer overrun [ 787.942232][T12465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.017222][T12523] NILFS (nullb0): couldn't find nilfs on the device [ 788.115924][ T5110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 788.124222][ T5110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 788.133708][ T5110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 788.144408][ T5110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 788.154188][ T5110] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 788.163123][ T5110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 788.407800][T12223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.426395][T12465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.455121][T12465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.509966][T12465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.624587][ T9368] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.759584][ T5110] Bluetooth: hci8: command tx timeout [ 788.785071][ T9368] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.883984][T12223] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.011733][ T9368] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.399152][T12465] hsr_slave_0: entered promiscuous mode [ 789.480103][T12465] hsr_slave_1: entered promiscuous mode [ 789.499583][T12465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 789.507510][T12465] Cannot create hsr debugfs directory [ 789.556990][ T29] audit: type=1326 audit(1720792968.751:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12525 comm="syz.3.1849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8be7f75bd9 code=0x0 [ 789.578810][ C0] vkms_vblank_simulate: vblank timer overrun [ 789.596561][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.604114][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.689286][ T9368] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.877914][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.885430][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.189895][ T5110] Bluetooth: hci5: command tx timeout [ 790.441650][ C1] eth0: bad gso: type: 1, size: 1408 [ 790.664832][ T9368] bridge_slave_1: left allmulticast mode [ 790.692107][ T9368] bridge_slave_1: left promiscuous mode [ 790.698234][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.732107][ T9368] bridge_slave_0: left allmulticast mode [ 790.738065][ T9368] bridge_slave_0: left promiscuous mode [ 790.766481][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.879836][ T9698] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 791.109244][ T9698] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 791.150004][ T9698] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 791.170131][ T8773] bio_check_eod: 46673 callbacks suppressed [ 791.170159][ T8773] syz.1.839: attempt to access beyond end of device [ 791.170159][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 791.174606][ T6688] syz.4.352: attempt to access beyond end of device [ 791.174606][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 791.177345][ T8773] syz.1.839: attempt to access beyond end of device [ 791.177345][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 791.209559][ T9698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 791.226554][ T8773] syz.1.839: attempt to access beyond end of device [ 791.226554][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 791.249750][ T6688] syz.4.352: attempt to access beyond end of device [ 791.249750][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 791.250266][ T8773] syz.1.839: attempt to access beyond end of device [ 791.250266][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 791.267764][ T9698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 791.292886][ T8773] syz.1.839: attempt to access beyond end of device [ 791.292886][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 791.299683][ T6688] syz.4.352: attempt to access beyond end of device [ 791.299683][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 791.308278][ T8773] syz.1.839: attempt to access beyond end of device [ 791.308278][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 791.344540][ T9368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.353727][ T6688] syz.4.352: attempt to access beyond end of device [ 791.353727][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 791.370329][ T9368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.384884][ T9368] bond0 (unregistering): Released all slaves [ 791.389578][ T9698] usb 3-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.fb [ 791.409594][ T9698] usb 3-1: New USB device strings: Mfr=7, Product=130, SerialNumber=11 [ 791.417892][ T9698] usb 3-1: Product: syz [ 791.459633][ T9698] usb 3-1: Manufacturer: syz [ 791.464263][ T9698] usb 3-1: SerialNumber: syz [ 791.526414][ T9698] usb 3-1: config 0 descriptor?? [ 791.536060][T12538] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 791.623347][ T9698] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 791.812520][T12465] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.902162][T12522] chnl_net:caif_netlink_parms(): no params data found [ 791.948719][ T9698] imon:send_packet: packet tx failed (-71) [ 791.994468][ T9698] imon 3-1:0.0: panel buttons/knobs setup failed [ 792.120785][ T9698] rc_core: IR keymap rc-imon-pad not found [ 792.126756][ T9698] Registered IR keymap rc-empty [ 792.145713][T12465] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.149644][ T9698] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 792.219532][ T9698] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 792.239794][ T9698] imon:send_packet: packet tx failed (-71) [ 792.273744][ T5110] Bluetooth: hci5: command tx timeout [ 792.310137][ T9698] imon 3-1:0.0: remote input dev register failed [ 792.316827][ T9698] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 792.366351][ T9698] imon 3-1:0.0: unable to initialize intf0, err 0 [ 792.378304][T12465] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.379525][ T9698] imon:imon_probe: failed to initialize context! [ 792.406071][ T9698] imon 3-1:0.0: unable to register, err -19 [ 792.416046][ T9698] usb 3-1: USB disconnect, device number 20 [ 792.454072][ T9368] hsr_slave_0: left promiscuous mode [ 792.481192][ T9368] hsr_slave_1: left promiscuous mode [ 792.499713][ T9368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.549686][ T9368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.598144][ T9368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.649575][ T9368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.690040][ T9368] veth1_macvtap: left promiscuous mode [ 792.695600][ T9368] veth0_macvtap: left promiscuous mode [ 792.728314][ T9368] veth1_vlan: left promiscuous mode [ 792.739629][ T9368] veth0_vlan: left promiscuous mode [ 793.404007][ T9368] team0 (unregistering): Port device team_slave_1 removed [ 793.450971][ T9368] team0 (unregistering): Port device team_slave_0 removed [ 793.898807][T12465] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.136652][T12522] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.169913][T12522] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.177189][T12522] bridge_slave_0: entered allmulticast mode [ 794.208614][T12522] bridge_slave_0: entered promiscuous mode [ 794.256122][T12522] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.286946][T12522] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.339808][T12522] bridge_slave_1: entered allmulticast mode [ 794.348174][T12522] bridge_slave_1: entered promiscuous mode [ 794.360192][ T5110] Bluetooth: hci5: command tx timeout [ 794.418711][T12223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.501544][T12522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.542159][T12522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.697132][T12522] team0: Port device team_slave_0 added [ 794.725901][T12522] team0: Port device team_slave_1 added [ 794.903237][T12465] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 794.945448][T12465] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 795.014665][T12522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.032125][T12522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.103005][T12522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.130709][T12465] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 795.174196][T12223] veth0_vlan: entered promiscuous mode [ 795.204187][T12522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.239940][T12522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.330359][T12522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.371654][T12465] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 795.456082][T12223] veth1_vlan: entered promiscuous mode [ 795.539552][T10826] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 795.760777][T10826] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 795.806176][T12522] hsr_slave_0: entered promiscuous mode [ 795.817455][T10826] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 795.860598][T10826] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 795.886396][T12522] hsr_slave_1: entered promiscuous mode [ 795.905756][T10826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.920562][T12522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 795.928149][T12522] Cannot create hsr debugfs directory [ 796.014771][T12547] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 796.078629][T12223] veth0_macvtap: entered promiscuous mode [ 796.185808][T12223] veth1_macvtap: entered promiscuous mode [ 796.193206][ T8773] bio_check_eod: 51673 callbacks suppressed [ 796.193226][ T8773] syz.1.839: attempt to access beyond end of device [ 796.193226][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 796.194236][ T6688] syz.4.352: attempt to access beyond end of device [ 796.194236][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 796.199436][ T8773] syz.1.839: attempt to access beyond end of device [ 796.199436][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 796.272168][ T8773] syz.1.839: attempt to access beyond end of device [ 796.272168][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 796.297731][ T6688] syz.4.352: attempt to access beyond end of device [ 796.297731][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 796.330494][ T8773] syz.1.839: attempt to access beyond end of device [ 796.330494][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 796.339945][ T6688] syz.4.352: attempt to access beyond end of device [ 796.339945][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 796.401364][ T8773] syz.1.839: attempt to access beyond end of device [ 796.401364][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 796.411734][ T6688] syz.4.352: attempt to access beyond end of device [ 796.411734][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 796.434163][ T8773] syz.1.839: attempt to access beyond end of device [ 796.434163][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 796.440078][ T5110] Bluetooth: hci5: command tx timeout [ 796.458456][ T5107] usb 3-1: USB disconnect, device number 21 [ 796.547609][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.601633][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.611875][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.644729][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.678310][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.708068][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.739529][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.778806][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.814273][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.852524][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.883456][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.920318][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.954989][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.989532][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.027675][T12223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.175856][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.209560][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.263467][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.293054][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.329545][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.370342][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.403437][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.439516][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.480585][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.504417][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.539596][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.580363][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.619524][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.669795][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.701725][T12223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.912321][T12223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.959541][T12223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.989810][T12223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.998547][T12223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.154596][T12465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.322150][T12465] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.444575][ T9368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.479613][ T9368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.526152][ T1793] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.533652][ T1793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.575557][ T1793] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.583058][ T1793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.711518][ T9368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.741139][ T9368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.883306][T12522] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 798.950068][T12522] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 799.055471][T12522] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 799.104370][T12522] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 799.925548][T12522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.032386][T12522] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.129963][ T5113] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 800.129980][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.144171][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.153791][ T5113] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 800.179622][ T5113] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 800.201530][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.208691][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.219871][ T5113] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 800.253244][ T5113] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 800.264416][ T5113] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 800.406369][T12522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 800.452002][T12522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 800.533739][T12573] warning: `syz.1.1858' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 800.632799][T12465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.049945][T12579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.191223][T12579] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 801.197789][T12579] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 801.215734][ T6688] bio_check_eod: 37392 callbacks suppressed [ 801.215756][ T6688] syz.4.352: attempt to access beyond end of device [ 801.215756][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 801.263861][ T8773] syz.1.839: attempt to access beyond end of device [ 801.263861][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 801.298320][T12579] vhci_hcd vhci_hcd.0: Device attached [ 801.319648][ T8773] syz.1.839: attempt to access beyond end of device [ 801.319648][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 801.356519][ T6688] syz.4.352: attempt to access beyond end of device [ 801.356519][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 801.430588][T12522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.441315][ T6688] syz.4.352: attempt to access beyond end of device [ 801.441315][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 801.477451][ T8773] syz.1.839: attempt to access beyond end of device [ 801.477451][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 801.480516][T12585] vhci_hcd: connection closed [ 801.515924][ T6688] syz.4.352: attempt to access beyond end of device [ 801.515924][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 801.548629][ T12] vhci_hcd: stop threads [ 801.560850][ T12] vhci_hcd: release socket [ 801.564926][ T8773] syz.1.839: attempt to access beyond end of device [ 801.564926][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 801.599809][ T12] vhci_hcd: disconnect device [ 801.610032][ T6688] syz.4.352: attempt to access beyond end of device [ 801.610032][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 801.633992][T12569] chnl_net:caif_netlink_parms(): no params data found [ 801.673089][ T8773] syz.1.839: attempt to access beyond end of device [ 801.673089][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 801.753497][T12465] veth0_vlan: entered promiscuous mode [ 801.835344][T12465] veth1_vlan: entered promiscuous mode [ 801.959235][ C1] eth0: bad gso: type: 1, size: 1408 [ 802.016737][T12522] veth0_vlan: entered promiscuous mode [ 802.256327][T12465] veth0_macvtap: entered promiscuous mode [ 802.268456][T12465] veth1_macvtap: entered promiscuous mode [ 802.359904][ T5110] Bluetooth: hci10: command tx timeout [ 802.402014][T12522] veth1_vlan: entered promiscuous mode [ 802.493504][ T5110] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 802.553137][T12569] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.599944][T12569] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.641521][T12569] bridge_slave_0: entered allmulticast mode [ 802.656428][T12569] bridge_slave_0: entered promiscuous mode [ 802.718376][T12569] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.761269][T12569] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.967982][T12569] bridge_slave_1: entered allmulticast mode [ 803.075449][T12609] NILFS (nullb0): couldn't find nilfs on the device [ 803.241501][T12569] bridge_slave_1: entered promiscuous mode [ 803.892890][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.935289][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.979538][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.040342][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.070133][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.122400][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.169785][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.179569][ T5107] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 804.190104][ T5110] Bluetooth: hci0: command 0x0406 tx timeout [ 804.209619][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.270629][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.328898][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.369612][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.419520][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.429377][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.429893][ T5110] Bluetooth: hci10: command tx timeout [ 804.452436][ T5107] usb 3-1: Using ep0 maxpacket: 16 [ 804.471748][ T5107] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 804.491361][ T5107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.510132][ T5107] usb 3-1: Product: syz [ 804.514446][ T5107] usb 3-1: Manufacturer: syz [ 804.529792][ T5107] usb 3-1: SerialNumber: syz [ 804.542287][ T5107] r8152-cfgselector 3-1: Unknown version 0x0000 [ 804.551036][ T5107] r8152-cfgselector 3-1: config 0 descriptor?? [ 804.670017][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.714845][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.759557][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.801068][T12465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.844987][T12569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.936976][T12569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.064560][T12569] team0: Port device team_slave_0 added [ 805.130829][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.144741][ T9432] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 805.174082][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.230028][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.269595][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.310111][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.351580][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.389560][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.429559][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.465582][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.509164][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.559522][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.599512][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.649528][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.689515][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.699410][T12465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.769554][T12465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.803104][T12465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.835707][T12569] team0: Port device team_slave_1 added [ 806.085273][T12522] veth0_macvtap: entered promiscuous mode [ 806.132340][T12465] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.161927][T12465] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.199626][T12465] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.219973][ T8773] bio_check_eod: 29906 callbacks suppressed [ 806.220007][ T8773] syz.1.839: attempt to access beyond end of device [ 806.220007][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 806.229533][T12465] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.252984][ T6688] syz.4.352: attempt to access beyond end of device [ 806.252984][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 806.290262][T12569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.297236][T12569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.297365][ T6688] syz.4.352: attempt to access beyond end of device [ 806.297365][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 806.369767][ T8773] syz.1.839: attempt to access beyond end of device [ 806.369767][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 806.394761][T12569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.433534][ T6688] syz.4.352: attempt to access beyond end of device [ 806.433534][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 806.457267][ T8773] syz.1.839: attempt to access beyond end of device [ 806.457267][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 806.473375][ T6688] syz.4.352: attempt to access beyond end of device [ 806.473375][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 806.489888][ T8773] syz.1.839: attempt to access beyond end of device [ 806.489888][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 806.504978][T12522] veth1_macvtap: entered promiscuous mode [ 806.516103][ T5110] Bluetooth: hci10: command tx timeout [ 806.557339][ T6688] syz.4.352: attempt to access beyond end of device [ 806.557339][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 806.584177][T12569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.619700][T12569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.625547][ T8773] syz.1.839: attempt to access beyond end of device [ 806.625547][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 806.760067][T12569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.878250][T12569] hsr_slave_0: entered promiscuous mode [ 807.900594][T12569] hsr_slave_1: entered promiscuous mode [ 807.930864][T12569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.957606][T12569] Cannot create hsr debugfs directory [ 808.051684][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.095725][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.129031][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.190574][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.229596][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.263084][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.294075][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.318837][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.354347][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.361145][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.369551][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.463090][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.499670][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.520959][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.553063][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.582485][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.592818][ T5110] Bluetooth: hci10: command tx timeout [ 808.624765][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.636995][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.647379][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.658335][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.670578][T12522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.697519][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.721099][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.741255][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.769519][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.796139][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.831370][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.859798][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.903561][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.939696][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.976864][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.014200][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.028448][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.038603][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.052892][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.063103][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.075694][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.094937][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.119565][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.146789][ C1] eth0: bad gso: type: 1, size: 1408 [ 809.151244][T12522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.197923][ T9368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.224093][ T9368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.275711][T12522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.298643][T12522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.329874][T12522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.350370][T12522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.441775][ T9368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.470618][T12625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.477107][ T9368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.792267][T12569] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.819724][T12625] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 809.826274][T12625] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 809.893259][ T5298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.914759][T12625] vhci_hcd vhci_hcd.0: Device attached [ 809.932630][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.936141][ T5298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.969380][T12569] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.008149][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.065069][T12569] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.082168][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'. [ 810.148794][T12569] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.198675][T12628] vhci_hcd: connection closed [ 810.198952][ T5298] vhci_hcd: stop threads [ 810.242492][ T5298] vhci_hcd: release socket [ 810.247025][ T5298] vhci_hcd: disconnect device [ 810.274746][ T9432] usb 14-1: enqueue for inactive port 0 [ 810.494660][T12634] fuse: Bad value for 'fd' [ 810.500143][T12634] kAFS: Can only specify source 'none' with -o dyn [ 810.565676][T12569] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 810.602980][T12569] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 810.614937][T12569] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 810.789062][T12569] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 810.850666][ T9432] usb usb14-port1: attempt power cycle [ 811.337343][ T8773] bio_check_eod: 22437 callbacks suppressed [ 811.337587][ T8773] syz.1.839: attempt to access beyond end of device [ 811.337587][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 811.339639][ T6688] syz.4.352: attempt to access beyond end of device [ 811.339639][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 811.389356][ T8773] syz.1.839: attempt to access beyond end of device [ 811.389356][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 811.447175][ T8773] syz.1.839: attempt to access beyond end of device [ 811.447175][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 812.035889][T12569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.043123][ T6688] syz.4.352: attempt to access beyond end of device [ 812.043123][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 812.049392][ T8773] syz.1.839: attempt to access beyond end of device [ 812.049392][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 812.074095][ T6688] syz.4.352: attempt to access beyond end of device [ 812.074095][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 812.088044][ T8773] syz.1.839: attempt to access beyond end of device [ 812.088044][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 812.124950][ T8773] syz.1.839: attempt to access beyond end of device [ 812.124950][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 812.141264][T12643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.151889][ T6688] syz.4.352: attempt to access beyond end of device [ 812.151889][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 812.152699][T12569] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.230730][ T9432] usb usb14-port1: unable to enumerate USB device [ 812.336536][T12638] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 812.343080][T12638] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 812.379656][T12638] vhci_hcd vhci_hcd.0: Device attached [ 812.428935][T12648] lo speed is unknown, defaulting to 1000 [ 812.437311][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.450202][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.511406][T12652] vhci_hcd: connection closed [ 812.521206][ T9368] vhci_hcd: stop threads [ 812.604028][ T9368] vhci_hcd: release socket [ 812.616681][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.623867][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.672505][ T5107] usb 18-1: SetAddress Request (6) to port 0 [ 812.694593][ T9368] vhci_hcd: disconnect device [ 812.701004][ T5107] usb 18-1: new SuperSpeed USB device number 6 using vhci_hcd [ 812.789607][ T5107] usb 18-1: enqueue for inactive port 0 [ 812.899775][T12648] lo speed is unknown, defaulting to 1000 [ 813.101219][T12648] lo speed is unknown, defaulting to 1000 [ 813.250820][ T5107] usb usb18-port1: attempt power cycle [ 813.554102][T12658] loop0: detected capacity change from 0 to 32768 [ 813.619993][T12658] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1875 (12658) [ 813.772096][T12658] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 813.845699][T12658] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 813.876405][T12569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.899434][T12658] BTRFS info (device loop0): using free-space-tree [ 813.922856][ T5107] usb usb18-port1: unable to enumerate USB device [ 814.254072][T12569] veth0_vlan: entered promiscuous mode [ 814.331035][T12569] veth1_vlan: entered promiscuous mode [ 814.372816][T12648] infiniband syz1: set active [ 814.409055][ T8] lo speed is unknown, defaulting to 1000 [ 814.442038][T12648] infiniband syz1: added lo [ 814.486027][T12569] veth0_macvtap: entered promiscuous mode [ 814.564269][T12569] veth1_macvtap: entered promiscuous mode [ 814.570086][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1878'. [ 814.592913][T12648] syz1: rxe_create_cq: returned err = -12 [ 814.598791][T12648] infiniband syz1: Couldn't create ib_mad CQ [ 814.661661][T12648] infiniband syz1: Couldn't open port 1 [ 814.675257][T12522] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 814.699246][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.759286][T12648] RDS/IB: syz1: added [ 814.780419][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.802471][T12648] smc: adding ib device syz1 with port count 1 [ 814.815659][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.824693][T12690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.841333][T12648] smc: ib device syz1 port 1 has pnetid [ 814.902971][T12690] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 814.909504][T12690] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 814.939564][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.975997][T12690] vhci_hcd vhci_hcd.0: Device attached [ 814.992412][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.035814][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.089554][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.129604][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.180228][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.278325][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.279585][ T9432] usb 18-1: SetAddress Request (10) to port 0 [ 815.329580][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.372738][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.379672][ T9432] usb 18-1: new SuperSpeed USB device number 10 using vhci_hcd [ 815.431392][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.480785][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.514247][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.592068][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.623451][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.636992][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 815.640012][T12691] vhci_hcd: connection reset by peer [ 815.677653][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.709728][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.711075][ T1034] vhci_hcd: stop threads [ 815.749517][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.779518][ T1034] vhci_hcd: release socket [ 815.784068][ T1034] vhci_hcd: disconnect device [ 815.802365][T12569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.856613][ T1793] lo speed is unknown, defaulting to 1000 [ 815.861413][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.873184][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 815.901710][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 815.941007][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.965713][ T8] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=42.10 [ 816.010158][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.020690][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.028695][ T8] usb 2-1: Product: syz [ 816.055855][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.076208][ T8] usb 2-1: Manufacturer: syz [ 816.088812][ T8] usb 2-1: SerialNumber: syz [ 816.099519][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.130139][ T8] usb 2-1: config 0 descriptor?? [ 816.145694][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.163093][ T8] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 816.195554][ T8] dvb-usb: bulk message failed: -8 (3/0) [ 816.209565][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.252719][ T8] dvb-usb: Artec T14 - USB2.0 DVB-T error while loading driver (-22) [ 816.264345][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.293124][ T8] dvb_usb_dibusb_mc 2-1:0.0: probe with driver dvb_usb_dibusb_mc failed with error -22 [ 816.309823][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.340915][ T8773] bio_check_eod: 22161 callbacks suppressed [ 816.340933][ T8773] syz.1.839: attempt to access beyond end of device [ 816.340933][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 816.348640][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.384286][ T6688] syz.4.352: attempt to access beyond end of device [ 816.384286][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 816.412944][ T8773] syz.1.839: attempt to access beyond end of device [ 816.412944][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 816.433586][ T6688] syz.4.352: attempt to access beyond end of device [ 816.433586][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 816.453852][ T8773] syz.1.839: attempt to access beyond end of device [ 816.453852][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 816.477669][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.498439][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.522247][ T6688] syz.4.352: attempt to access beyond end of device [ 816.522247][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 816.543108][ T8773] syz.1.839: attempt to access beyond end of device [ 816.543108][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 816.556938][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.579028][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.612357][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.624911][ T6688] syz.4.352: attempt to access beyond end of device [ 816.624911][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 816.650080][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.654824][ T5115] usb 2-1: USB disconnect, device number 21 [ 816.674090][ T8773] syz.1.839: attempt to access beyond end of device [ 816.674090][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 816.683661][ T6688] syz.4.352: attempt to access beyond end of device [ 816.683661][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 816.709856][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.730231][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.762903][T12569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.809851][T12569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.850968][T12569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.901636][T12648] lo speed is unknown, defaulting to 1000 [ 816.924780][T12569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.970787][T12569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.000706][T12569] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.033161][T12569] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.418316][ T5297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.428952][T12704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.455447][ T5297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.603679][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.638550][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.659595][T12704] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 817.666156][T12704] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 817.697057][T12704] vhci_hcd vhci_hcd.0: Device attached [ 817.730906][T12709] vhci_hcd: connection closed [ 817.731179][ T1034] vhci_hcd: stop threads [ 817.790535][ T1034] vhci_hcd: release socket [ 817.817370][T12711] netlink: 'syz.1.1887': attribute type 1 has an invalid length. [ 817.825657][ T1034] vhci_hcd: disconnect device [ 817.853814][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 817.867546][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 817.876328][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 817.894254][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 817.902350][T12711] netlink: 9364 bytes leftover after parsing attributes in process `syz.1.1887'. [ 817.912374][ T5113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 817.927566][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 817.967257][T12711] netlink: 'syz.1.1887': attribute type 1 has an invalid length. [ 817.973008][ T5298] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.112319][ T5298] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.164068][T12648] lo speed is unknown, defaulting to 1000 [ 818.224757][ T5298] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.462180][ T5298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.673507][T12720] fuse: Bad value for 'fd' [ 820.061025][ T5110] Bluetooth: hci5: command tx timeout [ 820.153352][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 820.182631][ T5298] bridge_slave_1: left allmulticast mode [ 820.229560][ T5298] bridge_slave_1: left promiscuous mode [ 820.235393][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.288106][ T5298] bridge_slave_0: left allmulticast mode [ 820.300168][ T5298] bridge_slave_0: left promiscuous mode [ 820.333982][ T5298] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.511433][ T9432] usb 18-1: device descriptor read/8, error -110 [ 820.737848][ T5298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.780576][ T5298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.846185][ T5298] bond0 (unregistering): Released all slaves [ 820.931397][ T9432] usb usb18-port1: attempt power cycle [ 820.947450][T12648] lo speed is unknown, defaulting to 1000 [ 821.323832][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'. [ 821.795287][ T8773] bio_check_eod: 17993 callbacks suppressed [ 821.795306][ T8773] syz.1.839: attempt to access beyond end of device [ 821.795306][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 821.839607][ T6688] syz.4.352: attempt to access beyond end of device [ 821.839607][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 821.852440][ T8773] syz.1.839: attempt to access beyond end of device [ 821.852440][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 821.866265][ T8773] syz.1.839: attempt to access beyond end of device [ 821.866265][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 821.892484][ T6688] syz.4.352: attempt to access beyond end of device [ 821.892484][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 821.939873][ T8773] syz.1.839: attempt to access beyond end of device [ 821.939873][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 821.972815][ T6688] syz.4.352: attempt to access beyond end of device [ 821.972815][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 821.989940][ T6688] syz.4.352: attempt to access beyond end of device [ 821.989940][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 822.064342][ T6688] syz.4.352: attempt to access beyond end of device [ 822.064342][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 822.069575][ T8773] syz.1.839: attempt to access beyond end of device [ 822.069575][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 822.131266][ T5110] Bluetooth: hci5: command tx timeout [ 822.162774][T12746] FAULT_INJECTION: forcing a failure. [ 822.162774][T12746] name failslab, interval 1, probability 0, space 0, times 0 [ 822.209951][ T9432] usb usb18-port1: unable to enumerate USB device [ 822.302095][T12746] CPU: 0 UID: 0 PID: 12746 Comm: syz.3.1896 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 822.312394][T12746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 822.322461][T12746] Call Trace: [ 822.325751][T12746] [ 822.328687][T12746] dump_stack_lvl+0x241/0x360 [ 822.333401][T12746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.338617][T12746] ? __pfx__printk+0x10/0x10 [ 822.343219][T12746] ? ref_tracker_alloc+0x332/0x490 [ 822.348342][T12746] should_fail_ex+0x3b0/0x4e0 [ 822.353036][T12746] ? skb_clone+0x20c/0x390 [ 822.357476][T12746] should_failslab+0xac/0x100 [ 822.362183][T12746] ? skb_clone+0x20c/0x390 [ 822.366621][T12746] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 822.372036][T12746] skb_clone+0x20c/0x390 [ 822.376393][T12746] __netlink_deliver_tap+0x3cc/0x7c0 [ 822.381692][T12746] ? netlink_deliver_tap+0x2e/0x1b0 [ 822.386901][T12746] netlink_deliver_tap+0x19d/0x1b0 [ 822.392017][T12746] netlink_unicast+0x7be/0x990 [ 822.396792][T12746] ? __pfx_netlink_unicast+0x10/0x10 [ 822.402089][T12746] ? __virt_addr_valid+0x183/0x530 [ 822.407213][T12746] ? __check_object_size+0x49c/0x900 [ 822.412504][T12746] ? bpf_lsm_netlink_send+0x9/0x10 [ 822.417642][T12746] netlink_sendmsg+0x8e4/0xcb0 [ 822.422531][T12746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.427840][T12746] ? __import_iovec+0x536/0x820 [ 822.432705][T12746] ? aa_sock_msg_perm+0x91/0x160 [ 822.437656][T12746] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 822.442947][T12746] ? security_socket_sendmsg+0x87/0xb0 [ 822.448420][T12746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.453719][T12746] __sock_sendmsg+0x221/0x270 [ 822.458415][T12746] ____sys_sendmsg+0x525/0x7d0 [ 822.463187][T12746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.468481][T12746] __sys_sendmsg+0x2b0/0x3a0 [ 822.473077][T12746] ? __pfx___sys_sendmsg+0x10/0x10 [ 822.478277][T12746] ? vfs_write+0x7c4/0xc90 [ 822.482719][T12746] ? fput+0x193/0x210 [ 822.486712][T12746] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 822.493057][T12746] ? rcu_is_watching+0x15/0xb0 [ 822.497841][T12746] ? rcu_is_watching+0x15/0xb0 [ 822.502619][T12746] do_syscall_64+0xf3/0x230 [ 822.507135][T12746] ? clear_bhb_loop+0x35/0x90 [ 822.511826][T12746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.517725][T12746] RIP: 0033:0x7f6a49175bd9 [ 822.522143][T12746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.541755][T12746] RSP: 002b:00007f6a49ee6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.550177][T12746] RAX: ffffffffffffffda RBX: 00007f6a49303f60 RCX: 00007f6a49175bd9 [ 822.558248][T12746] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 822.566231][T12746] RBP: 00007f6a49ee60a0 R08: 0000000000000000 R09: 0000000000000000 [ 822.574204][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.582172][T12746] R13: 000000000000000b R14: 00007f6a49303f60 R15: 00007ffc7cc88488 [ 822.590152][T12746] [ 822.836051][T12712] lo speed is unknown, defaulting to 1000 [ 823.146987][ T5113] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 823.177427][ T5113] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 823.190013][ T5113] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 823.207779][ T5113] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 823.218891][ T5113] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 823.227567][ T5113] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 823.306576][T12648] lo speed is unknown, defaulting to 1000 [ 823.390448][T12751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.480716][T12751] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 823.487269][T12751] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 823.549748][T12751] vhci_hcd vhci_hcd.0: Device attached [ 823.784310][T12753] vhci_hcd: connection closed [ 823.790817][ T7748] vhci_hcd: stop threads [ 823.825669][T12757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.871122][ T7748] vhci_hcd: release socket [ 823.875866][ T7748] vhci_hcd: disconnect device [ 823.949915][ T5213] usb 16-1: enqueue for inactive port 0 [ 824.019618][T12757] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 824.026173][T12757] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 824.064539][T12712] chnl_net:caif_netlink_parms(): no params data found [ 824.126092][T12757] vhci_hcd vhci_hcd.0: Device attached [ 824.196582][ T5110] Bluetooth: hci5: command tx timeout [ 824.429965][ T5115] usb 18-1: SetAddress Request (14) to port 0 [ 824.436576][ T5115] usb 18-1: new SuperSpeed USB device number 14 using vhci_hcd [ 824.500446][ T5213] usb usb16-port1: attempt power cycle [ 824.583138][T12761] vhci_hcd: connection reset by peer [ 824.644999][ T52] vhci_hcd: stop threads [ 824.680046][ T52] vhci_hcd: release socket [ 824.699593][ T52] vhci_hcd: disconnect device [ 824.741400][T12648] lo speed is unknown, defaulting to 1000 [ 824.747712][T12712] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.780132][T12712] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.787789][T12712] bridge_slave_0: entered allmulticast mode [ 824.811761][T12768] capability: warning: `syz.3.1900' uses deprecated v2 capabilities in a way that may be insecure [ 824.834592][T12712] bridge_slave_0: entered promiscuous mode [ 824.879180][T12712] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.919800][T12712] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.952579][T12712] bridge_slave_1: entered allmulticast mode [ 824.988748][T12712] bridge_slave_1: entered promiscuous mode [ 825.174815][ T5213] usb usb16-port1: unable to enumerate USB device [ 825.251799][T12712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.309727][ T5110] Bluetooth: hci11: command tx timeout [ 825.310989][T12648] lo speed is unknown, defaulting to 1000 [ 825.318339][T12712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.620686][T12712] team0: Port device team_slave_0 added [ 825.697098][T12712] team0: Port device team_slave_1 added [ 825.885907][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 825.986994][T12712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.053817][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.133898][T12712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.171283][T12712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.213290][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.283581][ T5110] Bluetooth: hci5: command tx timeout [ 826.306087][T12712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.478170][T12648] lo speed is unknown, defaulting to 1000 [ 826.616887][T12712] hsr_slave_0: entered promiscuous mode [ 826.641269][T12712] hsr_slave_1: entered promiscuous mode [ 826.661217][T12712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 826.677831][T12712] Cannot create hsr debugfs directory [ 826.801154][ T6688] bio_check_eod: 29351 callbacks suppressed [ 826.801175][ T6688] syz.4.352: attempt to access beyond end of device [ 826.801175][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 826.828514][ T8773] syz.1.839: attempt to access beyond end of device [ 826.828514][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 826.886089][ T8773] syz.1.839: attempt to access beyond end of device [ 826.886089][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 826.945431][ T6688] syz.4.352: attempt to access beyond end of device [ 826.945431][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 827.011317][ T6688] syz.4.352: attempt to access beyond end of device [ 827.011317][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 827.044228][ T8773] syz.1.839: attempt to access beyond end of device [ 827.044228][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 827.101445][ T8773] syz.1.839: attempt to access beyond end of device [ 827.101445][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 827.118248][ T6688] syz.4.352: attempt to access beyond end of device [ 827.118248][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 827.220822][ T6688] syz.4.352: attempt to access beyond end of device [ 827.220822][ T6688] loop4: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 827.234596][ T8773] syz.1.839: attempt to access beyond end of device [ 827.234596][ T8773] loop1: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 827.278532][T12790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.389680][ T5110] Bluetooth: hci11: command tx timeout [ 827.422268][T12791] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 827.428809][T12791] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 827.468628][T12648] lo speed is unknown, defaulting to 1000 [ 827.539709][T12791] vhci_hcd vhci_hcd.0: Device attached [ 827.604684][T12793] vhci_hcd: connection closed [ 827.605017][T10790] vhci_hcd: stop threads [ 827.619193][T10790] vhci_hcd: release socket [ 827.641408][T10790] vhci_hcd: disconnect device [ 828.280074][T12648] lo speed is unknown, defaulting to 1000 [ 829.510596][ T5110] Bluetooth: hci11: command tx timeout [ 831.559650][ T5110] Bluetooth: hci11: command tx timeout [ 855.109926][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P6688 1-...D } 2675 jiffies s: 38565 root: 0x2/T [ 855.109978][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 855.109991][ T19] Sending NMI from CPU 0 to CPUs 1: [ 855.110029][ C1] NMI backtrace for cpu 1 [ 855.110043][ C1] CPU: 1 UID: 0 PID: 12797 Comm: syz.1.1910 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 855.110063][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 855.110073][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc7/0x140 [ 855.110099][ C1] Code: 4c 89 f7 e8 db 5a 5d f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ce 59 5d f6 f6 44 24 21 02 <75> 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 e8 d3 e9 c4 f5 [ 855.110113][ C1] RSP: 0018:ffffc90000a18ba0 EFLAGS: 00000046 [ 855.110127][ C1] RAX: 0000000000000001 RBX: 1ffff92000143178 RCX: 0000000000000001 [ 855.110139][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff94a5ed30 [ 855.110150][ C1] RBP: ffffc90000a18c30 R08: ffffffff94a5ed33 R09: 1ffffffff294bda6 [ 855.110163][ C1] R10: dffffc0000000000 R11: fffffbfff294bda7 R12: dffffc0000000000 [ 855.110181][ C1] R13: 1ffff92000143174 R14: ffffc90000a18bc0 R15: 0000000000000046 [ 855.110193][ C1] FS: 0000555594254500(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 855.110208][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 855.110220][ C1] CR2: 00007f7f7b316fa8 CR3: 00000000631d0000 CR4: 00000000003506f0 [ 855.110235][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 855.110244][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 855.110255][ C1] Call Trace: [ 855.110263][ C1] [ 855.110270][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 855.110288][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 855.110311][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 855.110333][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 855.110353][ C1] ? nmi_handle+0x14f/0x5a0 [ 855.110369][ C1] ? nmi_handle+0x2a/0x5a0 [ 855.110384][ C1] ? _raw_spin_unlock_irqrestore+0xc7/0x140 [ 855.110401][ C1] ? default_do_nmi+0x63/0x160 [ 855.110418][ C1] ? exc_nmi+0x123/0x1f0 [ 855.110433][ C1] ? end_repeat_nmi+0xf/0x53 [ 855.110455][ C1] ? _raw_spin_unlock_irqrestore+0xc7/0x140 [ 855.110472][ C1] ? _raw_spin_unlock_irqrestore+0xc7/0x140 [ 855.110490][ C1] ? _raw_spin_unlock_irqrestore+0xc7/0x140 [ 855.110507][ C1] [ 855.110513][ C1] [ 855.110519][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 855.110540][ C1] debug_object_deactivate+0x2d5/0x390 [ 855.110559][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 855.110577][ C1] ? timerqueue_add+0x260/0x290 [ 855.110597][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 855.110616][ C1] debug_deactivate+0x1b/0x220 [ 855.110636][ C1] __hrtimer_run_queues+0x305/0xd50 [ 855.110654][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 855.110681][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 855.110700][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 855.110724][ C1] hrtimer_interrupt+0x396/0x990 [ 855.110751][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 855.110775][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 855.110793][ C1] [ 855.110799][ C1] [ 855.110806][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 855.110823][ C1] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 855.110841][ C1] Code: c9 50 e8 39 b8 0b 00 48 83 c4 08 4c 89 f7 e8 dd 38 00 00 e9 de 04 00 00 4c 89 f7 e8 10 ff 39 0a e8 1b 85 37 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 855.110854][ C1] RSP: 0018:ffffc900047276e8 EFLAGS: 00000282 [ 855.110868][ C1] RAX: 47ff858f7c8e2f00 RBX: ffff888027638000 RCX: ffffffff819b7b4c [ 855.110880][ C1] RDX: dffffc0000000000 RSI: ffffffff8c209f40 RDI: ffffffff8163f735 [ 855.110893][ C1] RBP: ffffc90004727730 R08: ffffffff8faffd6f R09: 1ffffffff1f5ffad [ 855.110905][ C1] R10: dffffc0000000000 R11: fffffbfff1f5ffae R12: 1ffff110172a7ef3 [ 855.110917][ C1] R13: dffffc0000000000 R14: ffff8880b943ea00 R15: ffff8880b953f798 [ 855.110933][ C1] ? trace_irq_enable+0x2c/0x120 [ 855.110954][ C1] ? finish_task_switch+0x1e5/0x870 [ 855.110971][ C1] ? finish_task_switch+0x1e5/0x870 [ 855.110988][ C1] __schedule+0x1808/0x4a60 [ 855.111014][ C1] ? __pfx___schedule+0x10/0x10 [ 855.111030][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.111045][ C1] ? lock_release+0xbf/0xa30 [ 855.111067][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.111081][ C1] ? __pfx_lock_release+0x10/0x10 [ 855.111099][ C1] ? lock_release+0xbf/0xa30 [ 855.111118][ C1] ? preempt_schedule+0xe1/0xf0 [ 855.111134][ C1] preempt_schedule_common+0x84/0xd0 [ 855.111152][ C1] preempt_schedule+0xe1/0xf0 [ 855.111173][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 855.111189][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.111205][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 855.111221][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 855.111239][ C1] preempt_schedule_thunk+0x1a/0x30 [ 855.111258][ C1] try_to_wake_up+0x9a1/0x1470 [ 855.111283][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 855.111304][ C1] ? __pfx_lock_release+0x10/0x10 [ 855.111322][ C1] ? plist_del+0x3f1/0x410 [ 855.111340][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 855.111359][ C1] wake_up_q+0xc8/0x120 [ 855.111378][ C1] futex_wake+0x523/0x5c0 [ 855.111397][ C1] ? __pfx_futex_wake+0x10/0x10 [ 855.111413][ C1] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 855.111433][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 855.111454][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.111470][ C1] do_futex+0x392/0x560 [ 855.111491][ C1] ? __pfx_do_futex+0x10/0x10 [ 855.111514][ C1] __se_sys_futex+0x3f9/0x480 [ 855.111534][ C1] ? xfd_validate_state+0x6e/0x150 [ 855.111555][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 855.111575][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 855.111595][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.111610][ C1] ? __x64_sys_futex+0x21/0xf0 [ 855.111631][ C1] do_syscall_64+0xf3/0x230 [ 855.111651][ C1] ? clear_bhb_loop+0x35/0x90 [ 855.111668][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.111684][ C1] RIP: 0033:0x7f7f7a575bd9 [ 855.111699][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.111711][ C1] RSP: 002b:00007ffe28616348 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 855.111727][ C1] RAX: ffffffffffffffda RBX: 00000000000000d8 RCX: 00007f7f7a575bd9 [ 855.111739][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7f7a704040 [ 855.111750][ C1] RBP: 0000000000000099 R08: 0000000000000004 R09: 000000092861666f [ 855.111760][ C1] R10: 00007f7f7a400000 R11: 0000000000000246 R12: 00007f7f7a704044 [ 855.111771][ C1] R13: 0000000000000001 R14: 00007f7f7a703f60 R15: 00007f7f7a704038 [ 855.111790][ C1]