last executing test programs: 37m33.730329875s ago: executing program 32 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0xa4000061) inotify_add_watch(r0, &(0x7f0000000340)='./file0\x00', 0x20f) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r1, 0x0, 0x0, 0x4) 35m32.941879223s ago: executing program 33 (id=1072): syz_io_uring_setup(0x469, &(0x7f00000002c0)={0x0, 0x86ed, 0x10100, 0x0, 0x39e}, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x2000, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 32m12.451316584s ago: executing program 34 (id=1626): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x7d, 0x19, 0x1, 0x43, 0x7, 0xc, 0x3e, 0x7, 0x14, 0x29, 0x81, 0xb5, 0xa, 0x81}, 0xe) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140), 0x8) 30m55.528391241s ago: executing program 35 (id=1883): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000340)="1f", 0xf000}], 0x1, 0x8, 0x7, 0x17) 24m2.524700171s ago: executing program 36 (id=3370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x40, r1, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 23m50.802580702s ago: executing program 37 (id=3407): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 23m8.018367574s ago: executing program 38 (id=3538): r0 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x1c) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r0, r1) 21m18.214108101s ago: executing program 39 (id=4058): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) unshare(0x22020600) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) fsync(r3) 17m43.500213682s ago: executing program 40 (id=5362): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x4040090, &(0x7f0000000140)={0xa, 0x4e22, 0xd563, @private1, 0xfffffffa}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) write$cgroup_pid(r3, &(0x7f0000000400), 0x12) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x2}}, 0x20) read$FUSE(r3, &(0x7f0000001940)={0x2020}, 0x2020) 17m41.519602242s ago: executing program 41 (id=5370): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x24040845) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m10.66776592s ago: executing program 42 (id=5526): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 15m20.605250976s ago: executing program 43 (id=5683): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100000fee702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x190) sendfile(r3, r3, 0x0, 0x7a680000) 13m57.150936181s ago: executing program 44 (id=5844): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) syz_open_procfs(0x0, &(0x7f00000004c0)='net/unix\x00') getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000380)={'syz1\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0xffff, 0x2, 0x0, 0xfffffffb, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x7, 0xb50, 0x0, 0x800, 0x3, 0x3, 0x6, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x7, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8ff, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0x200d5d, 0xa0c787d, 0x1, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x2, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0xf, 0x3, 0x103, 0x6, 0xcc, 0x8, 0x4000400, 0xffffffff, 0x5, 0x2, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x1, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffbfff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000180)='pstore\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x60) 13m39.963086841s ago: executing program 45 (id=5888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x30, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 11m39.89663466s ago: executing program 46 (id=6077): syz_open_dev$vcsn(0x0, 0x80, 0xc0000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000), 0x8, &(0x7f0000000c00)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6b]}}]}) 10m59.41631268s ago: executing program 47 (id=6150): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000780)="25d7fe", 0x3, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000300)={[{@sysvgroups}, {@noload}, {@nobh}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 10m46.280194453s ago: executing program 48 (id=6158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 9m57.287696181s ago: executing program 49 (id=6219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000400000008000000"], 0x50) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x44000) close(r3) accept4(r2, 0x0, 0x0, 0x400000000000000) 9m41.459497373s ago: executing program 50 (id=6245): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x7f}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}]}, 0x0, 0xd, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xb, 0x9, 0xe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x23f}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 8m29.590086368s ago: executing program 4 (id=6355): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) socket$packet(0x11, 0xa, 0x300) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) stat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x4b4b, &(0x7f0000000140)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) 8m28.105228077s ago: executing program 4 (id=6359): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0x241, &(0x7f00000020c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) copy_file_range(r6, 0x0, r6, &(0x7f0000000080)=0x87d, 0xd, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002500)={0x2020}, 0xfffffeec) 8m24.967633406s ago: executing program 4 (id=6361): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x6, 0x8, 0x3, 0x500, 0x3, 0x3020000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 8m8.298781228s ago: executing program 51 (id=6361): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x6, 0x8, 0x3, 0x500, 0x3, 0x3020000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 5m1.35298518s ago: executing program 6 (id=6647): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$key(0xf, 0x3, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdn', @ANYRESHEX=r1, @ANYRESHEX=r2]) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x184a62) socket$netlink(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x40000, 0x2d) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d700330dc4b, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/oops_count', 0x181000, 0x24) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES16=r0], 0x0) 4m57.94448512s ago: executing program 6 (id=6650): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xfffffffc]}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) madvise(&(0x7f00002cb000/0x1000)=nil, 0x1000, 0x8) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m56.05806166s ago: executing program 1 (id=6654): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f00000024c0)) 4m55.463543176s ago: executing program 1 (id=6657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x408, 0x0, 0x0, 0x108, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@remote, @local, 0xffffff00, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, 0x0, 0xff, 0x5, 0x2, {@mac=@multicast, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x2, 0x5, 0x7, 'ip6tnl0\x00', 'veth0_to_team\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x20, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @broadcast, 0x8}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) 4m54.629632722s ago: executing program 6 (id=6658): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x800, &(0x7f0000000240)={[{@orlov}, {@sysvgroups}]}, 0xc3, 0x4e0, &(0x7f0000000300)="$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") 4m54.131313446s ago: executing program 1 (id=6660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000043000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x002\x00'], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000180), 0x0}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0x3, 0x3) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000, 0x81010000000000}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x300) r5 = gettid() timer_create(0x1, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000380)=""/175, 0xaf}], 0x1, 0x4, 0x4, 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @random="a358321bd1e6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) 4m53.90175332s ago: executing program 6 (id=6661): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 4m53.423967935s ago: executing program 1 (id=6662): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRES8, @ANYBLOB=',errors=remount-ro,iocharset=cp936,errors=continue,iocharset=cp863,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,uid=', @ANYRESHEX, @ANYBLOB="2c00da9e6281ed732202e92d385b355a8b25d5f39dadafad4bb7987fd8e29441bbc6e82871b48b3edc068c8629dccf3f5b446c25368d6872e0b16e23dbb4468ad8f7bf9f04ce7af7b48e32c74faaa501363aaf927834ab5356364b36f24655f86b3fff40d19d5bb954f3da29015cdb001605b6d29039f7b166c8b2f5"], 0x1, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001280)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000001580)) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYRESDEC=r0], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300)={0x10000}, 0x8) epoll_create1(0x80000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) sendto$inet6(0xffffffffffffffff, &(0x7f0000001400)="16db7e9111c7ece420ec3aebc7de5e7342793b820ae88e80", 0x18, 0x10, &(0x7f0000001440)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}, 0x8}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') mount$bind(&(0x7f0000001480)='./file1\x00', &(0x7f00000014c0)='./file1\x00', 0x0, 0x2000000, 0x0) read$char_usb(r5, &(0x7f0000000040)=""/4109, 0x100d) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x2}, 0xa) 4m53.237251543s ago: executing program 6 (id=6663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020204d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x24000840) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="fffdffffffffbbbbbbbbbbbb86dd6000cdef00103afffe80000000000000099b72da2c57c6c581ed997400000000000000bbff020000000000000000000000000001860090780100"/82], 0x0) 4m52.461723711s ago: executing program 6 (id=6664): accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x180000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/176, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700", @ANYBLOB], 0x48) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r5, 0x0, 0x138) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000400)) mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x2020004, &(0x7f00000004c0)={'trans=unix,', {[{@access_uid}, {@cache_none}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, '.$'}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@dont_measure}]}}) request_key(0x0, &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) 4m51.184802592s ago: executing program 1 (id=6665): socket$inet(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) 4m46.758479049s ago: executing program 1 (id=6674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='bridge0\x00', 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 4m36.037581032s ago: executing program 52 (id=6664): accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x180000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/176, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700", @ANYBLOB], 0x48) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r5, 0x0, 0x138) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000400)) mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x2020004, &(0x7f00000004c0)={'trans=unix,', {[{@access_uid}, {@cache_none}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, '.$'}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@dont_measure}]}}) request_key(0x0, &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) 4m30.051959466s ago: executing program 53 (id=6674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='bridge0\x00', 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 3m25.57691433s ago: executing program 3 (id=6801): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 3m25.045735876s ago: executing program 3 (id=6805): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000100000018011300756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000000050000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 3m24.517720086s ago: executing program 3 (id=6806): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0x6, 0x88, 0x8, 0x9f9f, 0xcc, "09c7f9ffffff02000800ffe4ab5b00300600", 0x408, 0x80000009}) ioctl$TIOCSTI(r0, 0x5412, 0x0) 3m23.922592693s ago: executing program 3 (id=6809): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000780), 0x8, 0x61a, &(0x7f0000000f40)="$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") 3m19.305600852s ago: executing program 3 (id=6821): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000280)={0x40000000}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3m15.203296207s ago: executing program 3 (id=6831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 3m10.185597297s ago: executing program 8 (id=6837): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r3, @ANYRESHEX], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lstat(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 3m7.740701223s ago: executing program 8 (id=6839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x10, 0x6, @remote}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000009c0)={@broadcast, @dev, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x6, 0x24, 0x64, 0x1, 0x40, 0x21, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x3b}}, {{0x4e22, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0xa, 0x1, '\x00', 0x3, "e62bbd"}}}}}}, 0x0) 3m6.188182676s ago: executing program 8 (id=6843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r1) 3m5.228348491s ago: executing program 8 (id=6846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0xfffd, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000100)=""/92, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 3m4.917629117s ago: executing program 8 (id=6847): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x98, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '!-,\'),-($()]!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5770574e}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x400c895) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x80000001, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x1d, 0x0, 0x1}, {0x15, 0x0, 0x0, 0x2000000}, {0x6}]}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008891) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x2000000000000, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10001, 0x7, 0x8, 0x1000000005, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m3.129922418s ago: executing program 8 (id=6852): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xa000, 0x9b) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000400), 0x12) r4 = openat$cgroup_int(r2, &(0x7f0000000600)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x1002, 0x12) 2m58.407004362s ago: executing program 54 (id=6831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 2m43.658435226s ago: executing program 55 (id=6852): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xa000, 0x9b) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000400), 0x12) r4 = openat$cgroup_int(r2, &(0x7f0000000600)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x1002, 0x12) 1m46.119351251s ago: executing program 5 (id=6962): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x3, 0x5e, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, 0x10, 0x700, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 1m45.215557109s ago: executing program 5 (id=6964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "9cab9e7a"}]}}, 0x0}, 0x0) 1m41.9567805s ago: executing program 5 (id=6971): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1m40.518682876s ago: executing program 5 (id=6976): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 1m39.981408722s ago: executing program 5 (id=6978): timer_create(0x3, &(0x7f0000000140)={0x0, 0x2e, 0x2, @thr={&(0x7f0000000080)="86d6a9f135832f72517903001729aa125aa5cee17480a102b9426b30f58c659b9a5103", 0x0}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x4, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002407fe3ffd8048200c0ef0102030109022f090280010904f48000c8748f0f004406"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1m37.835257812s ago: executing program 5 (id=6983): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000552000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m14.280104861s ago: executing program 56 (id=6983): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000552000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 25.427411248s ago: executing program 0 (id=7074): syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x1a5000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000280)={0x3, 0x10, 0x654d, 0x6, 0x0, 0x6, &(0x7f0000000040)}) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa4000021) 21.545526755s ago: executing program 9 (id=7083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 21.338700745s ago: executing program 7 (id=7084): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) 21.260268525s ago: executing program 2 (id=7085): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="eb010000000000086b1d01014000010203010902780003010000000904000000010100000a2401000000020102082408000000007009040100000102000009040101010102000007246b0cccf1ad912b2601060400002ae30905010900000000000725010100000009040200000103"], &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 21.049807373s ago: executing program 0 (id=7086): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$key(0xf, 0x3, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdn', @ANYRESHEX=r1]) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x184a62) socket$netlink(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x40000, 0x2d) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d700330dc4b, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/oops_count', 0x181000, 0x24) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 20.938120083s ago: executing program 9 (id=7087): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020) 20.852329235s ago: executing program 7 (id=7088): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2", 0xe) fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300fc0200000000000000000000000000011400020000000000000000000000000000000001"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) 18.847428384s ago: executing program 0 (id=7089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000e1"]) 18.485931805s ago: executing program 7 (id=7090): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ffff0000000000000000cd33b2989bdd", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 18.418550298s ago: executing program 9 (id=7091): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 17.894856077s ago: executing program 0 (id=7092): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@nouser_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0) 15.67399651s ago: executing program 2 (id=7093): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB], 0x30}], 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000008000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 15.670281629s ago: executing program 7 (id=7094): syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x41040, 0x0, 0x4, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 14.476037488s ago: executing program 2 (id=7095): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[], 0x0) 14.293816762s ago: executing program 9 (id=7096): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000001200)={'#! ', './file0'}, 0xb) close(r4) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_getlink={0x4c, 0x12, 0x487, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x4c}}, 0x0) setns(r7, 0x66020000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 14.293557086s ago: executing program 0 (id=7097): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) 14.285177322s ago: executing program 4 (id=7003): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syslog(0x0, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) 14.049573123s ago: executing program 7 (id=7098): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$key(0xf, 0x3, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2]) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x184a62) socket$netlink(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x40000, 0x2d) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d700330dc4b, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/oops_count', 0x181000, 0x24) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES16=r0], 0x0) 13.546091265s ago: executing program 0 (id=7099): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2", 0xe) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300fc0200000000000000000000000000011400020000000000000000000000000000000001"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) 13.334021906s ago: executing program 2 (id=7100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020) 11.752923993s ago: executing program 4 (id=7101): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 11.470788254s ago: executing program 2 (id=7102): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x247}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000100)=0x400, 0x4) socket$netlink(0x10, 0x3, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 10.905733554s ago: executing program 9 (id=7103): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ffff0000000000000000cd33b2989bdd", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 10.718540683s ago: executing program 4 (id=7104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 538.439825ms ago: executing program 2 (id=7105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f00000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b839994fb484510bef2e488fbac2fe6faaf75e5cc4815bd2051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dcab772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f015d885b4b8ffc0fa3f880287c862137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7fc6edc76600000000826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000000000000000000000000000000000250d623b48a29e330900b8c552202407804f1ba1817256caf1090b71f2928ed030f3c8194cc3cbf48e2f4c9248c4c00a32d4873da3b7d66b1ce6f72aab16c923b16c4bfdbb24fb17bd198139c21c46065c6922fd705e670d0b5d6d495a773b872e8f88"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 225.57553ms ago: executing program 7 (id=7106): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 0s ago: executing program 9 (id=7107): userfaultfd(0x1) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000200)) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x9}, {@in6=@loopback, 0xfffffffd, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0) kernel console output (not intermixed with test programs): 6 comm="syz.3.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ffa27d8eba9 code=0x7ffc0000 [ 2275.839249][ T30] audit: type=1326 audit(1757861433.334:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25466 comm="syz.3.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa27d8eba9 code=0x7ffc0000 [ 2275.862493][ T30] audit: type=1326 audit(1757861433.372:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25466 comm="syz.3.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ffa27d8eba9 code=0x7ffc0000 [ 2275.891135][ T30] audit: type=1326 audit(1757861433.372:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25466 comm="syz.3.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa27d8eba9 code=0x7ffc0000 [ 2275.915950][ T30] audit: type=1326 audit(1757861433.381:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25466 comm="syz.3.6598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffa27d8eba9 code=0x7ffc0000 [ 2276.012283][T25470] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2276.050898][T25467] loop3: detected capacity change from 0 to 512 [ 2276.197605][T23790] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2276.236559][T25467] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 2276.245258][T25467] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 2276.380590][T25467] EXT4-fs (loop3): 1 truncate cleaned up [ 2276.403096][T23793] Bluetooth: hci5: command 0x0406 tx timeout [ 2276.485313][T25467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2276.564705][T25481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6602'. [ 2276.670771][T25467] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 2276.694723][T25481] overlay: ./file0 is not a directory [ 2277.294908][T21359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2282.469254][T25513] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6615'. [ 2282.765844][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 2282.765925][ T30] audit: type=1326 audit(1757861440.182:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dee78eba9 code=0x7ffc0000 [ 2282.804809][ T30] audit: type=1326 audit(1757861440.191:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3dee78eba9 code=0x7ffc0000 [ 2282.827981][ T30] audit: type=1326 audit(1757861440.191:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dee78eba9 code=0x7ffc0000 [ 2282.851119][ T30] audit: type=1326 audit(1757861440.191:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dee78eba9 code=0x7ffc0000 [ 2282.874431][ T30] audit: type=1326 audit(1757861440.247:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3dee78eba9 code=0x7ffc0000 [ 2282.905566][ T30] audit: type=1326 audit(1757861440.247:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dee78eba9 code=0x7ffc0000 [ 2282.928663][ T30] audit: type=1326 audit(1757861440.275:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3dee78eba9 code=0x7ffc0000 [ 2283.271185][T25525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6617'. [ 2283.347834][T25525] overlay: ./file0 is not a directory [ 2283.428578][ T30] audit: type=1326 audit(1757861440.799:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25523 comm="syz.7.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2283.457835][ T30] audit: type=1326 audit(1757861440.808:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25523 comm="syz.7.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2283.484108][ T30] audit: type=1326 audit(1757861440.808:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25523 comm="syz.7.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2283.587760][T22062] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2283.834129][T22062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2283.845703][T22062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2283.858359][T22062] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2283.867851][T22062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.049870][T22062] usb 2-1: config 0 descriptor?? [ 2284.352337][T25526] loop1: detected capacity change from 0 to 128 [ 2289.051114][T22062] usbhid 2-1:0.0: can't add hid device: -71 [ 2289.057721][T22062] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2289.084472][T22062] usb 2-1: USB disconnect, device number 14 [ 2289.572766][T25553] loop3: detected capacity change from 0 to 512 [ 2289.806432][T25553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2289.819997][T25553] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2290.074697][T25562] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6630'. [ 2290.895463][T21359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2291.220547][ T30] audit: type=1326 audit(1757861448.076:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25569 comm="syz.6.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dee78eba9 code=0x7ffc0000 [ 2291.429635][ T30] audit: type=1326 audit(1757861448.170:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25569 comm="syz.6.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3dee78eba9 code=0x7ffc0000 [ 2291.453265][ T30] audit: type=1326 audit(1757861448.170:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25569 comm="syz.6.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dee78eba9 code=0x7ffc0000 [ 2291.477325][ T30] audit: type=1326 audit(1757861448.170:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25569 comm="syz.6.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3dee78eba9 code=0x7ffc0000 [ 2291.500582][ T30] audit: type=1326 audit(1757861448.170:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25569 comm="syz.6.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dee78eba9 code=0x7ffc0000 [ 2291.523667][ T30] audit: type=1326 audit(1757861448.198:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25569 comm="syz.6.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3dee78eba9 code=0x7ffc0000 [ 2291.678395][T25580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6633'. [ 2291.827667][T25583] loop1: detected capacity change from 0 to 256 [ 2291.858041][T25580] overlay: ./file0 is not a directory [ 2291.961148][T25583] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 2298.464742][T12878] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 2298.786615][T12878] usb 8-1: Using ep0 maxpacket: 16 [ 2298.819529][T25591] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2298.853685][T12878] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 2298.862034][T12878] usb 8-1: config 0 has no interface number 0 [ 2298.869909][T12878] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2298.880533][T12878] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2298.890971][T12878] usb 8-1: config 0 interface 41 has no altsetting 0 [ 2299.237980][T12878] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2299.247306][T12878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.255820][T12878] usb 8-1: Product: syz [ 2299.260437][T12878] usb 8-1: Manufacturer: syz [ 2299.266870][T12878] usb 8-1: SerialNumber: syz [ 2299.914100][T25596] loop3: detected capacity change from 0 to 1024 [ 2299.946504][T25596] EXT4-fs: inline encryption not supported [ 2299.953045][T25596] EXT4-fs: Ignoring removed nobh option [ 2299.959400][T25596] EXT4-fs: Ignoring removed bh option [ 2300.033207][T12878] usb 8-1: config 0 descriptor?? [ 2300.045993][T25589] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2300.054125][T25589] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2300.295382][T25599] overlayfs: failed to resolve './file0': -2 [ 2301.018659][T25589] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2301.168472][T25596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2301.190914][T25589] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2301.569050][T12878] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2301.581190][T12878] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 2301.916513][T12878] usb 8-1: USB disconnect, device number 13 [ 2302.197010][T25604] loop1: detected capacity change from 0 to 1024 [ 2302.393537][T24738] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2302.412181][T21359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2302.465755][T25604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2302.480366][T25604] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2302.616195][T24738] usb 7-1: Using ep0 maxpacket: 32 [ 2302.645041][T24738] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 2302.654825][T24738] usb 7-1: config 0 has no interface number 0 [ 2302.663099][T24738] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2302.674029][T24738] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2302.839625][T24738] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2302.849523][T24738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2302.857975][T24738] usb 7-1: Product: syz [ 2302.862451][T24738] usb 7-1: Manufacturer: syz [ 2302.867244][T24738] usb 7-1: SerialNumber: syz [ 2303.451370][T25618] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6644'. [ 2303.559946][T24738] usb 7-1: config 0 descriptor?? [ 2303.567979][T25606] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2303.577221][T25606] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2303.594061][T24738] usb-storage 7-1:0.20: USB Mass Storage device detected [ 2303.634741][T24738] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2303.948083][T24738] scsi host1: usb-storage 7-1:0.20 [ 2304.018275][T24738] usb 7-1: USB disconnect, device number 19 [ 2304.797604][T25602] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 2305.694339][T24387] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2305.770220][T24738] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2305.973236][T24738] usb 7-1: Using ep0 maxpacket: 16 [ 2306.018873][T24738] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2306.029540][T24738] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2306.087849][T24738] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2306.098228][T24738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2306.106991][T24738] usb 7-1: Product: syz [ 2306.111382][T24738] usb 7-1: Manufacturer: syz [ 2306.116298][T24738] usb 7-1: SerialNumber: syz [ 2306.370745][ T30] audit: type=1326 audit(1757861462.257:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbd38eba9 code=0x7ffc0000 [ 2306.537108][ T30] audit: type=1326 audit(1757861462.294:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bbd38eba9 code=0x7ffc0000 [ 2306.560366][ T30] audit: type=1326 audit(1757861462.294:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbd38eba9 code=0x7ffc0000 [ 2306.584848][ T30] audit: type=1326 audit(1757861462.313:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5bbd38eba9 code=0x7ffc0000 [ 2306.609841][ T30] audit: type=1326 audit(1757861462.313:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbd38eba9 code=0x7ffc0000 [ 2306.633670][ T30] audit: type=1326 audit(1757861462.332:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5bbd38eba9 code=0x7ffc0000 [ 2306.657677][ T30] audit: type=1326 audit(1757861462.360:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbd38eba9 code=0x7ffc0000 [ 2306.681060][ T30] audit: type=1326 audit(1757861462.360:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5bbd38eba9 code=0x7ffc0000 [ 2306.704243][ T30] audit: type=1326 audit(1757861462.360:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bbd38eba9 code=0x7ffc0000 [ 2306.729582][ T30] audit: type=1326 audit(1757861462.369:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.1.6648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5bbd38eba9 code=0x7ffc0000 [ 2306.899127][T25633] loop1: detected capacity change from 0 to 512 [ 2306.927957][T24738] usb 7-1: 0:2 : does not exist [ 2307.004841][T24738] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2307.013953][T25635] loop3: detected capacity change from 0 to 128 [ 2307.145352][T25633] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 2307.172366][T24738] usb 7-1: USB disconnect, device number 20 [ 2307.183602][T25633] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 2307.390345][T25633] EXT4-fs (loop1): 1 truncate cleaned up [ 2307.398475][T25633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2307.686168][T25364] udevd[25364]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2308.866702][T21287] kworker/u8:1: attempt to access beyond end of device [ 2308.866702][T21287] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 2309.034799][T24387] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2311.079775][T25655] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6655'. [ 2313.571223][T25672] loop1: detected capacity change from 0 to 256 [ 2313.602812][T25672] exfat: Bad value for 'gid' [ 2313.608237][T25672] exfat: Bad value for 'gid' [ 2314.719124][T23793] Bluetooth: hci1: command 0x0406 tx timeout [ 2318.045143][T25695] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6669'. [ 2323.023038][T25714] tipc: Cannot configure node identity twice [ 2323.579349][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2323.586452][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2324.082941][T24738] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 2324.351813][T24738] usb 9-1: Using ep0 maxpacket: 16 [ 2324.410323][T24738] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2324.422122][T24738] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2324.432340][T24738] usb 9-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 2324.443641][T24738] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.790060][T24738] usb 9-1: config 0 descriptor?? [ 2325.226057][T24738] usbhid 9-1:0.0: can't add hid device: -71 [ 2325.232787][T24738] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2325.268431][T24738] usb 9-1: USB disconnect, device number 8 [ 2328.451160][T25731] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6681'. [ 2329.942184][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2329.942262][ T30] audit: type=1326 audit(1757861484.314:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25733 comm="syz.7.6682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x0 [ 2331.109033][T25743] pim6reg1: entered promiscuous mode [ 2331.114571][T25743] pim6reg1: entered allmulticast mode [ 2332.017665][T23793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2332.032647][T23793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2332.058875][T23793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2332.075361][T23793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2332.089635][T23793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2334.320735][T23793] Bluetooth: hci0: command tx timeout [ 2334.417220][T25748] chnl_net:caif_netlink_parms(): no params data found [ 2335.291714][T25770] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6692'. [ 2336.296215][T25748] bridge0: port 1(bridge_slave_0) entered blocking state [ 2336.304018][T25748] bridge0: port 1(bridge_slave_0) entered disabled state [ 2336.320797][T25748] bridge_slave_0: entered allmulticast mode [ 2336.330646][T25748] bridge_slave_0: entered promiscuous mode [ 2336.354856][T25748] bridge0: port 2(bridge_slave_1) entered blocking state [ 2336.362603][T25748] bridge0: port 2(bridge_slave_1) entered disabled state [ 2336.370635][T25748] bridge_slave_1: entered allmulticast mode [ 2336.380402][T25748] bridge_slave_1: entered promiscuous mode [ 2336.449585][T24721] bridge_slave_1: left allmulticast mode [ 2336.456330][T24721] bridge_slave_1: left promiscuous mode [ 2336.463156][T24721] bridge0: port 2(bridge_slave_1) entered disabled state [ 2336.504458][T24721] bridge_slave_0: left allmulticast mode [ 2336.511265][T24721] bridge_slave_0: left promiscuous mode [ 2336.518091][T24721] bridge0: port 1(bridge_slave_0) entered disabled state [ 2336.538518][T23793] Bluetooth: hci0: command tx timeout [ 2337.116692][T24721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2337.164952][T24721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2337.229845][T24721] bond0 (unregistering): Released all slaves [ 2338.764519][T25786] ptrace attach of "./syz-executor exec"[25787] was attempted by "./syz-executor exec"[25786] [ 2338.853599][T23793] Bluetooth: hci0: command tx timeout [ 2339.078766][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2339.089047][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2339.116416][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2339.131748][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2339.149025][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2339.204507][T24721] tipc: Left network mode [ 2339.446975][T25748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2339.570845][T25748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2340.306138][T24721] hsr_slave_0: left promiscuous mode [ 2340.337736][T24721] hsr_slave_1: left promiscuous mode [ 2340.346644][T24721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2340.401466][T24721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2340.987570][T25791] loop7: detected capacity change from 0 to 512 [ 2341.012948][T25791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2341.060438][ T5815] Bluetooth: hci0: command tx timeout [ 2341.362636][T25791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2341.375826][T25791] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2341.410586][ T5815] Bluetooth: hci5: command tx timeout [ 2341.424823][T24721] team0 (unregistering): Port device team_slave_1 removed [ 2341.465510][T24721] team0 (unregistering): Port device team_slave_0 removed [ 2341.860281][T25748] team0: Port device team_slave_0 added [ 2341.958380][T25748] team0: Port device team_slave_1 added [ 2342.232797][T23790] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2342.486585][T25748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2342.494130][T25748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2342.520524][T25748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2342.703827][T25748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2342.711277][T25748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2342.737870][T25748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2342.966497][T24721] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2343.225178][T24721] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2343.386442][T25784] chnl_net:caif_netlink_parms(): no params data found [ 2343.563635][T24721] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2343.626690][ T5815] Bluetooth: hci5: command tx timeout [ 2343.834132][T24721] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2343.923343][T25748] hsr_slave_0: entered promiscuous mode [ 2343.933805][T25748] hsr_slave_1: entered promiscuous mode [ 2344.865383][T25816] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6704'. [ 2345.860215][ T5815] Bluetooth: hci5: command tx timeout [ 2346.529453][T24721] bridge_slave_1: left allmulticast mode [ 2346.535692][T24721] bridge_slave_1: left promiscuous mode [ 2346.542226][T24721] bridge0: port 2(bridge_slave_1) entered disabled state [ 2346.567407][T24721] bridge_slave_0: left allmulticast mode [ 2346.573391][T24721] bridge_slave_0: left promiscuous mode [ 2346.580620][T24721] bridge0: port 1(bridge_slave_0) entered disabled state [ 2346.933431][T20652] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 2347.154020][T20652] usb 9-1: Using ep0 maxpacket: 16 [ 2347.270974][T20652] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2347.283522][T20652] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2347.294649][T20652] usb 9-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 2347.304924][T20652] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2347.391366][T20652] usb 9-1: config 0 descriptor?? [ 2347.402597][T24721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2347.484199][T24721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2347.534054][T24721] bond0 (unregistering): Released all slaves [ 2347.710330][T20652] usbhid 9-1:0.0: can't add hid device: -71 [ 2347.717057][T20652] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2347.749329][T20652] usb 9-1: USB disconnect, device number 9 [ 2347.766985][T24721] tipc: Disabling bearer [ 2347.772884][T24721] tipc: Left network mode [ 2348.084567][T23793] Bluetooth: hci5: command tx timeout [ 2348.270616][T24721] hsr_slave_0: left promiscuous mode [ 2348.284172][T24721] hsr_slave_1: left promiscuous mode [ 2348.296235][T24721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2348.304076][T24721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2348.330965][T24721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2348.338685][T24721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2348.378589][T24721] veth1_macvtap: left promiscuous mode [ 2348.384693][T24721] veth0_macvtap: left promiscuous mode [ 2348.390597][T24721] veth1_vlan: left promiscuous mode [ 2348.396449][T24721] veth0_vlan: left promiscuous mode [ 2349.401567][T23793] Bluetooth: hci4: command 0x1003 tx timeout [ 2349.429063][T24721] team0 (unregistering): Port device team_slave_1 removed [ 2349.438223][ T5815] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2349.624452][T25836] overlayfs: failed to resolve './file1': -2 [ 2349.731101][T24721] team0 (unregistering): Port device team_slave_0 removed [ 2351.788660][T25784] bridge0: port 1(bridge_slave_0) entered blocking state [ 2351.798218][T25784] bridge0: port 1(bridge_slave_0) entered disabled state [ 2351.806197][T25784] bridge_slave_0: entered allmulticast mode [ 2351.816116][T25784] bridge_slave_0: entered promiscuous mode [ 2351.913290][T25784] bridge0: port 2(bridge_slave_1) entered blocking state [ 2351.920894][T25784] bridge0: port 2(bridge_slave_1) entered disabled state [ 2351.929406][T25784] bridge_slave_1: entered allmulticast mode [ 2351.939154][T25784] bridge_slave_1: entered promiscuous mode [ 2352.371583][T25846] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6714'. [ 2352.381277][T25846] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6714'. [ 2352.442583][T25784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2352.643687][T25784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2352.870394][T25748] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2352.994442][ T30] audit: type=1800 audit(1757861505.856:1300): pid=25846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6714" name="bus" dev="tmpfs" ino=310 res=0 errno=0 [ 2353.062311][T25784] team0: Port device team_slave_0 added [ 2353.085140][T25748] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2353.097549][T12878] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2353.126561][T25784] team0: Port device team_slave_1 added [ 2353.222554][T25748] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2353.306706][T12878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2353.318274][T12878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2353.328483][T12878] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2353.337988][T12878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2353.373170][T25784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2353.381927][T25784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2353.399542][T12878] usb 4-1: config 0 descriptor?? [ 2353.413540][T25784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2353.440383][T25748] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2353.535135][T25784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2353.542737][T25784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2353.570425][T25784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2353.886285][T25784] hsr_slave_0: entered promiscuous mode [ 2353.896805][T25784] hsr_slave_1: entered promiscuous mode [ 2353.907169][T25784] debugfs: 'hsr0' already exists in 'hsr' [ 2353.913405][T25784] Cannot create hsr debugfs directory [ 2353.971978][T12878] hid-steam 0003:28DE:1142.0025: unknown main item tag 0x0 [ 2354.017707][T12878] hid-steam 0003:28DE:1142.0025: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 2354.091682][T12878] hid-steam 0003:28DE:1142.0025: Steam wireless receiver connected [ 2354.100168][T12878] hid-steam 0003:28DE:1142.0025: No HID_FEATURE_REPORT submitted - nothing to read [ 2354.192997][T12878] hid-steam 0003:28DE:1142.0026: unknown main item tag 0x0 [ 2354.297380][T12878] hid-steam 0003:28DE:1142.0026: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 2354.387911][T12878] usb 4-1: USB disconnect, device number 27 [ 2354.442127][T12878] hid-steam 0003:28DE:1142.0025: Steam wireless receiver disconnected [ 2354.703055][T25748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2354.926896][T25748] 8021q: adding VLAN 0 to HW filter on device team0 [ 2354.987232][T22062] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 2355.066515][T25857] fido_id[25857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2355.156894][T24721] bridge0: port 1(bridge_slave_0) entered blocking state [ 2355.164574][T24721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2355.224907][T22062] usb 9-1: Using ep0 maxpacket: 16 [ 2355.262656][T22062] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2355.274193][T22062] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2355.284831][T22062] usb 9-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 2355.294363][T22062] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2355.397087][T22062] usb 9-1: config 0 descriptor?? [ 2355.401334][T24721] bridge0: port 2(bridge_slave_1) entered blocking state [ 2355.409675][T24721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2355.635144][T22062] usbhid 9-1:0.0: can't add hid device: -71 [ 2355.642378][T22062] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2355.700279][T22062] usb 9-1: USB disconnect, device number 10 [ 2357.790381][T25784] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2357.814095][T25784] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2359.013302][T25784] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2359.254629][T25784] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2362.371818][T25888] loop3: detected capacity change from 0 to 512 [ 2362.382897][T25888] EXT4-fs: Ignoring removed oldalloc option [ 2364.521149][T25892] netlink: 12 bytes leftover after parsing attributes in process `'. [ 2364.960144][T25748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2365.444111][T25784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2365.873792][T25784] 8021q: adding VLAN 0 to HW filter on device team0 [ 2365.972944][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2365.980549][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2366.181953][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2366.189568][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2367.626871][T21221] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2367.894979][T21221] usb 9-1: Using ep0 maxpacket: 16 [ 2367.959088][T21221] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2367.970656][T21221] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2367.980904][T21221] usb 9-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 2367.990599][T21221] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2368.248031][T21221] usb 9-1: config 0 descriptor?? [ 2368.535094][T21221] usbhid 9-1:0.0: can't add hid device: -71 [ 2368.541983][T21221] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2368.712929][T21221] usb 9-1: USB disconnect, device number 11 [ 2369.984932][T25784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2369.994679][T25748] veth0_vlan: entered promiscuous mode [ 2370.114420][T25748] veth1_vlan: entered promiscuous mode [ 2370.154010][T25919] loop3: detected capacity change from 0 to 512 [ 2370.238405][T25919] EXT4-fs: Ignoring removed i_version option [ 2370.249461][T25919] EXT4-fs: Ignoring removed mblk_io_submit option [ 2370.340316][T25919] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2370.443923][T25919] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c018, mo2=0103] [ 2370.579703][T25919] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.6732: inode #13: comm syz.3.6732: iget: illegal inode # [ 2370.643010][T25748] veth0_macvtap: entered promiscuous mode [ 2370.700283][T25919] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6732: couldn't read orphan inode 13 (err -117) [ 2370.852309][T25925] binder: 25917:25925 ioctl c0306201 200000000080 returned -14 [ 2370.868604][T25919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2370.937300][T25748] veth1_macvtap: entered promiscuous mode [ 2371.097054][T25748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2371.151284][T25748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2371.956486][T25919] EXT4-fs (loop3): shut down requested (1) [ 2372.730813][T21359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2372.976848][ T5100] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2372.997667][ T5100] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2373.029521][ T5100] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2373.067790][T24721] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.870345][T25784] veth0_vlan: entered promiscuous mode [ 2374.972879][T25784] veth1_vlan: entered promiscuous mode [ 2375.256019][T25784] veth0_macvtap: entered promiscuous mode [ 2375.347859][T25784] veth1_macvtap: entered promiscuous mode [ 2375.546457][T25784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2375.621342][T25784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2375.724636][ T3668] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2375.795271][ T3668] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2375.847273][ T3668] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2375.902696][ T3668] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2379.276307][T25985] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6745'. [ 2380.924911][T24721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2380.932970][T24721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2381.149824][T24676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2381.157865][T24676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2381.656557][T26002] loop7: detected capacity change from 0 to 128 [ 2381.789009][T26002] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2381.826563][T26002] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2382.436783][T23790] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2383.448366][T22062] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 2383.456158][T26023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6754'. [ 2383.680167][T23169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2383.689236][T23169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2383.788545][T22062] usb 9-1: not running at top speed; connect to a high speed hub [ 2383.812693][T24721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2383.823191][T24721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2383.836059][T22062] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2383.845265][T22062] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2383.856439][T22062] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2383.865879][T22062] usb 9-1: config 1 has no interface number 1 [ 2383.872195][T22062] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2383.883566][T22062] usb 9-1: config 1 interface 2 has no altsetting 0 [ 2383.918372][T22062] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2383.932888][T22062] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2383.942924][T22062] usb 9-1: Product: syz [ 2383.947302][T22062] usb 9-1: Manufacturer: syz [ 2383.952448][T22062] usb 9-1: SerialNumber: syz [ 2384.277159][T22062] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 2384.286662][T22062] usb 9-1: 2:1 : format type 9 is not supported yet [ 2384.293916][T22062] usb 9-1: selecting invalid altsetting 0 [ 2384.517563][T22062] usb 9-1: USB disconnect, device number 12 [ 2384.827666][T25364] udevd[25364]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2385.127223][T24738] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2385.355056][T24738] usb 4-1: Using ep0 maxpacket: 32 [ 2385.374909][T24738] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2385.388372][T24738] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2385.398060][T24738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2385.451808][T24738] usb 4-1: config 0 descriptor?? [ 2386.858697][T22062] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2387.075890][T22062] usb 6-1: Using ep0 maxpacket: 8 [ 2387.161862][T22062] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2387.174263][T22062] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2387.184503][T22062] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2387.191515][T22062] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2387.201101][T22062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2387.361627][T22062] usb 6-1: config 0 descriptor?? [ 2389.158145][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2389.164854][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2390.868203][T21221] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 2391.105828][T24738] usbhid 4-1:0.0: can't add hid device: -32 [ 2391.115117][T24738] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 2391.175294][T21221] usb 10-1: Using ep0 maxpacket: 16 [ 2391.266253][T21221] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 2391.274983][T21221] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2391.285724][T21221] usb 10-1: config 0 has no interface number 0 [ 2391.294157][T22062] usbhid 6-1:0.0: can't add hid device: -71 [ 2391.301378][T22062] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2391.315075][T22062] usb 6-1: USB disconnect, device number 24 [ 2391.526783][T21221] usb 10-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 2391.536614][T21221] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2391.547475][T21221] usb 10-1: Product: syz [ 2391.552618][T21221] usb 10-1: Manufacturer: syz [ 2391.557480][T21221] usb 10-1: SerialNumber: syz [ 2391.824271][T26068] overlay: ./file0 is not a directory [ 2391.889027][T21221] usb 10-1: config 0 descriptor?? [ 2391.998231][T21221] usb 10-1: Found UVC 0.00 device syz (046d:08d3) [ 2392.005075][T21221] usb 10-1: No valid video chain found. [ 2393.796519][T21221] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 2394.074486][T21221] usb 9-1: Using ep0 maxpacket: 8 [ 2394.199489][T21221] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2394.207519][T21221] usb 9-1: can't read configurations, error -61 [ 2394.235096][T24738] usb 10-1: USB disconnect, device number 8 [ 2394.534670][T21221] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 2394.757970][ T30] audit: type=1326 audit(1757861544.937:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.7.6775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x0 [ 2394.837600][T21221] usb 9-1: Using ep0 maxpacket: 8 [ 2394.936986][T21221] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2394.946916][T21221] usb 9-1: can't read configurations, error -61 [ 2395.061296][T21221] usb usb9-port1: attempt power cycle [ 2395.475716][T21221] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2395.578480][T21221] usb 9-1: Using ep0 maxpacket: 8 [ 2395.686294][T21221] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2395.694652][T21221] usb 9-1: can't read configurations, error -61 [ 2395.882394][T15596] usb 4-1: USB disconnect, device number 28 [ 2395.903847][T21221] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2395.982104][T21221] usb 9-1: Using ep0 maxpacket: 8 [ 2396.013328][T21221] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2396.021696][T21221] usb 9-1: can't read configurations, error -61 [ 2396.046305][T21221] usb usb9-port1: unable to enumerate USB device [ 2396.286027][ T30] audit: type=1326 audit(1757861546.368:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26097 comm="syz.9.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2396.364523][ T30] audit: type=1326 audit(1757861546.396:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26097 comm="syz.9.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2396.387807][ T30] audit: type=1326 audit(1757861546.396:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26097 comm="syz.9.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2396.413733][ T30] audit: type=1326 audit(1757861546.396:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26097 comm="syz.9.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2396.437896][ T30] audit: type=1326 audit(1757861546.434:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26097 comm="syz.9.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2396.461053][ T30] audit: type=1326 audit(1757861546.434:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26097 comm="syz.9.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2396.485798][ T30] audit: type=1326 audit(1757861546.434:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26097 comm="syz.9.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2396.509439][ T30] audit: type=1326 audit(1757861546.443:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26097 comm="syz.9.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2396.532819][ T30] audit: type=1326 audit(1757861546.537:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26097 comm="syz.9.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2397.861111][T26113] sch_tbf: burst 511 is lower than device veth0 mtu (1514) ! [ 2398.564674][T24738] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 2398.768552][T24738] usb 10-1: Using ep0 maxpacket: 16 [ 2398.796151][T24738] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2398.806419][T24738] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2398.821229][T24738] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2398.913627][T24738] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2398.923226][T24738] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.935064][T24738] usb 10-1: Product: syz [ 2398.940698][T24738] usb 10-1: Manufacturer: syz [ 2398.945595][T24738] usb 10-1: SerialNumber: syz [ 2399.486976][T24738] usb 10-1: USB disconnect, device number 9 [ 2399.629778][T25364] udevd[25364]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2399.794073][T15596] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2400.008316][T15596] usb 9-1: Using ep0 maxpacket: 8 [ 2400.054609][T15596] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2400.065536][T15596] usb 9-1: config 0 has no interfaces? [ 2400.071275][T15596] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2400.083635][T15596] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2400.120996][T15596] usb 9-1: config 0 descriptor?? [ 2400.522387][T15596] usb 9-1: USB disconnect, device number 17 [ 2400.728517][T26138] loop7: detected capacity change from 0 to 8192 [ 2400.785055][T26138] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2401.258612][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2401.258687][ T30] audit: type=1326 audit(1757861551.017:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26146 comm="syz.9.6800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x0 [ 2402.178942][T24738] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2402.382543][T24738] usb 9-1: Using ep0 maxpacket: 16 [ 2402.433091][T24738] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2402.444659][T24738] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2402.455227][T24738] usb 9-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 2402.464697][T24738] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2402.519500][ T30] audit: type=1107 audit(1757861552.168:1317): pid=26168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 2402.576771][T24738] usb 9-1: config 0 descriptor?? [ 2403.441007][T24738] usbhid 9-1:0.0: can't add hid device: -71 [ 2403.447725][T24738] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2403.464362][T24738] usb 9-1: USB disconnect, device number 18 [ 2405.673912][T24738] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2405.877104][T21221] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2405.916260][T24738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2405.927891][T24738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2405.941719][T24738] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2405.952282][T24738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2406.053422][T24738] usb 6-1: config 0 descriptor?? [ 2406.069612][T21221] usb 9-1: Using ep0 maxpacket: 8 [ 2406.085922][T21221] usb 9-1: config 0 has no interfaces? [ 2406.092232][T21221] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2406.101805][T21221] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2406.201851][T21221] usb 9-1: config 0 descriptor?? [ 2406.305711][ T30] audit: type=1326 audit(1757861555.722:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26194 comm="syz.7.6818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x0 [ 2406.404098][T24738] usbhid 6-1:0.0: can't add hid device: -71 [ 2406.410732][T24738] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2406.470664][ T30] audit: type=1326 audit(1757861555.778:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.5.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2406.487496][T24738] usb 6-1: USB disconnect, device number 25 [ 2406.498583][ T30] audit: type=1326 audit(1757861555.778:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.5.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2406.523547][ T30] audit: type=1326 audit(1757861555.788:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.5.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2406.547018][ T30] audit: type=1326 audit(1757861555.788:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.5.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2406.570050][ T30] audit: type=1326 audit(1757861555.788:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.5.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2406.597407][ T30] audit: type=1326 audit(1757861555.788:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.5.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2406.622501][ T30] audit: type=1326 audit(1757861555.788:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.5.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2406.645733][ T30] audit: type=1326 audit(1757861555.788:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.5.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2406.669490][ T30] audit: type=1326 audit(1757861555.797:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.5.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2406.692516][ T30] audit: type=1326 audit(1757861555.797:1328): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=26186 comm="syz.5.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2406.720326][ T30] audit: type=1326 audit(1757861555.825:1329): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=26186 comm="syz.5.6814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2406.771062][T21221] usb 9-1: USB disconnect, device number 19 [ 2411.768262][T21221] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 2412.287486][T21221] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2412.299125][T21221] usb 10-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 2412.308714][T21221] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2412.515482][T21221] usb 10-1: config 0 descriptor?? [ 2412.524166][T26233] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2415.252300][T21221] usbhid 10-1:0.0: can't add hid device: -71 [ 2415.259181][T21221] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2415.344248][ T30] audit: type=1326 audit(1757861564.178:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26237 comm="syz.8.6832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed8cd8eba9 code=0x0 [ 2415.490544][T21221] usb 10-1: USB disconnect, device number 10 [ 2417.433783][T15596] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 2417.631388][T15596] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2417.642001][T15596] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2417.740994][T15596] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2417.752763][T15596] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.766711][T15596] usb 9-1: Product: syz [ 2417.771084][T15596] usb 9-1: Manufacturer: syz [ 2417.778324][T15596] usb 9-1: SerialNumber: syz [ 2418.129984][T15596] usb 9-1: 0:2 : does not exist [ 2418.186228][T15596] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 2418.355196][T15596] usb 9-1: USB disconnect, device number 20 [ 2418.498458][T25364] udevd[25364]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2418.517699][T26257] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2418.531328][T26257] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2418.582541][T26257] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2418.591452][T26257] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2418.676794][T26257] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2418.683240][T26257] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2418.752170][T26257] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2418.758924][T26257] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2418.777644][T26257] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2418.821796][T26257] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2418.829060][T26257] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2418.918406][T26257] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2419.918470][ T5815] Bluetooth: hci7: command 0x0406 tx timeout [ 2420.769148][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 2420.854698][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 2420.940858][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout [ 2421.036650][ T5815] Bluetooth: hci5: command 0x0c1a tx timeout [ 2421.236425][T26275] loop7: detected capacity change from 0 to 1024 [ 2421.334143][T26275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2421.347900][T26275] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2422.042007][ T30] audit: type=1326 audit(1757861570.445:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26281 comm="syz.8.6847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed8cd8eba9 code=0x0 [ 2422.144615][ T5815] Bluetooth: hci7: command 0x0406 tx timeout [ 2422.596926][ T30] audit: type=1326 audit(1757861570.979:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26287 comm="syz.9.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2422.711060][ T30] audit: type=1326 audit(1757861571.025:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26287 comm="syz.9.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2422.734130][ T30] audit: type=1326 audit(1757861571.025:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26287 comm="syz.9.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2422.758301][ T30] audit: type=1326 audit(1757861571.025:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26287 comm="syz.9.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2422.781375][ T30] audit: type=1326 audit(1757861571.025:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26287 comm="syz.9.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2422.808936][ T30] audit: type=1326 audit(1757861571.025:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26287 comm="syz.9.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2422.833675][ T30] audit: type=1326 audit(1757861571.025:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26287 comm="syz.9.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2422.939396][T26278] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 2423.004840][T26290] tipc: Started in network mode [ 2423.016048][T26290] tipc: Node identity 528d87077c65, cluster identity 4711 [ 2423.026182][T26290] tipc: Enabled bearer , priority 0 [ 2423.045897][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 2423.061122][T26290] syzkaller0: entered promiscuous mode [ 2423.066975][T26290] syzkaller0: entered allmulticast mode [ 2423.089149][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 2423.156274][T26290] tipc: Resetting bearer [ 2423.163918][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout [ 2423.173536][T26289] tipc: Resetting bearer [ 2423.217260][T26289] tipc: Disabling bearer [ 2423.249024][ T5815] Bluetooth: hci5: command 0x0c1a tx timeout [ 2423.394535][T26293] pim6reg0: tun_chr_ioctl cmd 2147767506 [ 2423.413182][T26293] pim6reg0: tun_chr_ioctl cmd 2147767507 [ 2423.563949][T26295] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6851'. [ 2424.745113][T26305] serio: Serial port ptm0 [ 2425.224885][T23790] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2425.388414][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout [ 2425.473182][ T5815] Bluetooth: hci5: command 0x0c1a tx timeout [ 2427.273488][T26314] fuse: Bad value for 'fd' [ 2429.197928][ T30] audit: type=1326 audit(1757861577.143:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26322 comm="syz.5.6862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x0 [ 2429.227043][T26328] syzkaller0: entered promiscuous mode [ 2429.232745][T26328] syzkaller0: entered allmulticast mode [ 2429.409763][T26329] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6864'. [ 2429.520175][T23793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2429.536593][T23793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2429.547994][T23793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2429.572139][T23793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2429.600917][T23793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2430.462460][T26331] chnl_net:caif_netlink_parms(): no params data found [ 2430.549587][T26340] pim6reg1: entered promiscuous mode [ 2430.555527][T26340] pim6reg1: entered allmulticast mode [ 2430.583879][T15596] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 2430.799366][T15596] usb 10-1: Using ep0 maxpacket: 8 [ 2430.838482][T15596] usb 10-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 2430.848110][T15596] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2430.856898][T15596] usb 10-1: Product: syz [ 2430.861945][T15596] usb 10-1: Manufacturer: syz [ 2430.866807][T15596] usb 10-1: SerialNumber: syz [ 2430.938457][T15596] usb 10-1: config 0 descriptor?? [ 2431.825837][ T5815] Bluetooth: hci4: command tx timeout [ 2431.959114][T15596] usb 10-1: USB disconnect, device number 11 [ 2432.164982][T25364] udevd[25364]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2432.251337][T26347] fuse: Bad value for 'fd' [ 2433.197868][T26331] bridge0: port 1(bridge_slave_0) entered blocking state [ 2433.206083][T26331] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.214390][T26331] bridge_slave_0: entered allmulticast mode [ 2433.224216][T26331] bridge_slave_0: entered promiscuous mode [ 2433.648985][T26331] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.656858][T26331] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.665354][T26331] bridge_slave_1: entered allmulticast mode [ 2433.675511][T26331] bridge_slave_1: entered promiscuous mode [ 2434.156181][ T5815] Bluetooth: hci4: command tx timeout [ 2434.709570][T21221] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 2434.767392][T26331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2436.410932][T26331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2436.452413][ T5815] Bluetooth: hci4: command tx timeout [ 2437.137975][T26331] team0: Port device team_slave_0 added [ 2437.275751][T26331] team0: Port device team_slave_1 added [ 2438.133979][T21221] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2438.142787][T21221] usb 6-1: can't read configurations, error -71 [ 2438.386599][T26331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2438.396581][T26331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2438.424953][T26331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2438.596267][ T30] audit: type=1326 audit(1757861585.889:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26365 comm="syz.9.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2438.602032][T26331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2438.622676][ T30] audit: type=1326 audit(1757861585.889:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26365 comm="syz.9.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2438.626892][T26331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2438.650957][ T30] audit: type=1326 audit(1757861585.889:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26365 comm="syz.9.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2438.683048][T26331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2438.703594][ T30] audit: type=1326 audit(1757861585.917:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26365 comm="syz.9.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2438.703834][ T30] audit: type=1326 audit(1757861585.917:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26365 comm="syz.9.6874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2438.762308][ T5815] Bluetooth: hci4: command tx timeout [ 2439.252808][T26331] hsr_slave_0: entered promiscuous mode [ 2439.263100][T26331] hsr_slave_1: entered promiscuous mode [ 2439.272010][T26331] debugfs: 'hsr0' already exists in 'hsr' [ 2439.280156][T26331] Cannot create hsr debugfs directory [ 2439.327067][T26368] syzkaller0: entered promiscuous mode [ 2439.333195][T26368] syzkaller0: entered allmulticast mode [ 2444.443625][T26331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2445.480767][T26331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2445.904314][T26331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2446.160590][T26331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2447.070286][T23793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2447.080901][T23793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2447.105661][T23793] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2447.122882][T23793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2447.190805][T23793] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2448.057959][T26395] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6884'. [ 2448.068314][T26395] netlink: 'syz.5.6884': attribute type 6 has an invalid length. [ 2448.076539][T26395] netlink: 'syz.5.6884': attribute type 5 has an invalid length. [ 2448.090156][T26395] netlink: 'syz.5.6884': attribute type 4 has an invalid length. [ 2448.907548][T26403] syzkaller0: entered promiscuous mode [ 2448.915933][T26403] syzkaller0: entered allmulticast mode [ 2448.972618][T26331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2449.308408][T26331] 8021q: adding VLAN 0 to HW filter on device team0 [ 2449.467587][T23793] Bluetooth: hci6: command tx timeout [ 2449.512963][T12931] bridge0: port 1(bridge_slave_0) entered blocking state [ 2449.520643][T12931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2449.607070][T12931] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.614686][T12931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2450.168866][T26390] chnl_net:caif_netlink_parms(): no params data found [ 2451.710272][T23793] Bluetooth: hci6: command tx timeout [ 2452.915027][T26331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2453.360771][T26390] bridge0: port 1(bridge_slave_0) entered blocking state [ 2453.368663][T26390] bridge0: port 1(bridge_slave_0) entered disabled state [ 2453.376604][T26390] bridge_slave_0: entered allmulticast mode [ 2453.386379][T26390] bridge_slave_0: entered promiscuous mode [ 2453.484814][T26390] bridge0: port 2(bridge_slave_1) entered blocking state [ 2453.492366][T26390] bridge0: port 2(bridge_slave_1) entered disabled state [ 2453.501053][T26390] bridge_slave_1: entered allmulticast mode [ 2453.514079][T26390] bridge_slave_1: entered promiscuous mode [ 2453.868693][T23793] Bluetooth: hci6: command tx timeout [ 2454.024550][T26390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2454.124794][T26331] veth0_vlan: entered promiscuous mode [ 2454.159481][T26390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2454.553274][T26390] team0: Port device team_slave_0 added [ 2454.566655][T26331] veth1_vlan: entered promiscuous mode [ 2454.685703][T26390] team0: Port device team_slave_1 added [ 2454.834852][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2454.841741][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2455.311369][T26390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2455.318518][T26390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2455.346134][T26390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2455.487494][T26331] veth0_macvtap: entered promiscuous mode [ 2455.547008][T26390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2455.554145][T26390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2455.582510][T26390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2455.622928][T26331] veth1_macvtap: entered promiscuous mode [ 2455.887799][T26331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2456.092917][T23793] Bluetooth: hci6: command tx timeout [ 2456.249361][T26390] hsr_slave_0: entered promiscuous mode [ 2456.259832][T26390] hsr_slave_1: entered promiscuous mode [ 2456.268920][T26390] debugfs: 'hsr0' already exists in 'hsr' [ 2456.274966][T26390] Cannot create hsr debugfs directory [ 2456.349096][T26331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2456.499394][ T3864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2456.813928][ T3864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2456.967339][ T3864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2457.006230][ T3864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2457.777646][ T30] audit: type=1326 audit(1757861603.877:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26447 comm="syz.5.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2457.902478][ T30] audit: type=1326 audit(1757861603.942:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26447 comm="syz.5.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2457.925676][ T30] audit: type=1326 audit(1757861603.979:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26447 comm="syz.5.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2457.951909][ T30] audit: type=1326 audit(1757861603.979:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26447 comm="syz.5.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2457.976075][ T30] audit: type=1326 audit(1757861603.979:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26447 comm="syz.5.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2458.531021][ T30] audit: type=1326 audit(1757861604.129:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26447 comm="syz.5.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2458.556462][ T30] audit: type=1326 audit(1757861604.148:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26447 comm="syz.5.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2458.581880][ T30] audit: type=1326 audit(1757861604.148:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26447 comm="syz.5.6902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a8f8eba9 code=0x7ffc0000 [ 2459.282998][T26390] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2459.416652][T26390] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2459.656452][T26390] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2459.759050][T26390] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2460.409764][T21221] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2460.647660][T21221] usb 6-1: config 0 has no interfaces? [ 2460.699322][T21221] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2460.708639][T21221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2460.717724][T21221] usb 6-1: Product: syz [ 2460.722247][T21221] usb 6-1: Manufacturer: syz [ 2460.727025][T21221] usb 6-1: SerialNumber: syz [ 2460.848451][T21221] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2460.854932][T21221] r8152-cfgselector 6-1: config 0 descriptor?? [ 2461.525346][T26390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2461.930168][T26390] 8021q: adding VLAN 0 to HW filter on device team0 [ 2462.142194][T26483] loop7: detected capacity change from 0 to 256 [ 2462.363433][T26483] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 2462.995576][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 2463.003338][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2463.362228][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 2463.369756][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2464.375901][ T3711] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2464.495514][T24738] r8152-cfgselector 6-1: USB disconnect, device number 28 [ 2464.991472][ T3711] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2465.429406][ T3711] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2465.881301][ T3711] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2467.826726][ T3711] bridge_slave_1: left allmulticast mode [ 2467.832861][ T3711] bridge_slave_1: left promiscuous mode [ 2467.839788][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 2467.936245][T24738] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2468.201355][ T3711] bridge_slave_0: left allmulticast mode [ 2468.207615][ T3711] bridge_slave_0: left promiscuous mode [ 2468.214510][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 2468.253304][T24738] usb 10-1: Using ep0 maxpacket: 16 [ 2468.347188][T24738] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2468.357805][T24738] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2468.531925][T24738] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2468.542219][T24738] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2468.553862][T24738] usb 10-1: Product: syz [ 2468.559470][T24738] usb 10-1: Manufacturer: syz [ 2468.564357][T24738] usb 10-1: SerialNumber: syz [ 2469.870083][T24738] usb 10-1: 0:2 : does not exist [ 2469.926091][T24738] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 2469.989619][ T3711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2470.114162][ T3711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2470.177047][ T3711] bond0 (unregistering): Released all slaves [ 2470.214752][T24738] usb 10-1: USB disconnect, device number 12 [ 2470.500473][T26452] udevd[26452]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2470.702879][ T3711] tipc: Left network mode [ 2471.461759][ T3711] hsr_slave_0: left promiscuous mode [ 2471.485187][ T3711] hsr_slave_1: left promiscuous mode [ 2471.493115][ T3711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2471.501351][ T3711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2471.584340][ T3711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2471.592108][ T3711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2471.672405][ T3711] veth1_macvtap: left promiscuous mode [ 2471.678332][ T3711] veth0_macvtap: left promiscuous mode [ 2471.686343][ T3711] veth1_vlan: left promiscuous mode [ 2471.692087][ T3711] veth0_vlan: left promiscuous mode [ 2472.837159][ T3711] team0 (unregistering): Port device team_slave_1 removed [ 2472.973955][ T3711] team0 (unregistering): Port device team_slave_0 removed [ 2473.728793][T26390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2474.264810][T24738] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2474.282339][T26390] veth0_vlan: entered promiscuous mode [ 2474.434199][T26390] veth1_vlan: entered promiscuous mode [ 2474.489438][T24738] usb 6-1: Using ep0 maxpacket: 32 [ 2474.496473][T24738] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2474.496654][T24738] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2474.496825][T24738] usb 6-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 2474.496972][T24738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2474.508280][T24738] usb 6-1: config 0 descriptor?? [ 2474.701520][T16126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2474.701687][T16126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2474.887822][T26528] futex_wake_op: syz.9.6922 tries to shift op by 32; fix this program [ 2475.085864][T24676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2475.085974][T24676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2475.129100][T24738] wacom 0003:056A:00F4.0027: item fetching failed at offset 0/1 [ 2475.144814][T26390] veth0_macvtap: entered promiscuous mode [ 2475.170681][T24738] wacom 0003:056A:00F4.0027: parse failed [ 2475.203343][T24738] wacom 0003:056A:00F4.0027: probe with driver wacom failed with error -22 [ 2475.249433][T26390] veth1_macvtap: entered promiscuous mode [ 2475.379633][T24738] usb 6-1: USB disconnect, device number 29 [ 2475.464073][T26390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2475.531803][T26390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2475.674163][T24676] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2475.722461][T24721] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2475.788234][T24721] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2475.831565][T24721] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2476.886575][T15596] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2477.170632][T15596] usb 3-1: Using ep0 maxpacket: 16 [ 2477.333896][T26546] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6924'. [ 2478.223343][T15596] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2478.233880][T15596] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2479.306807][T15596] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2479.316400][T15596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2479.324864][T15596] usb 3-1: Product: syz [ 2479.329220][T15596] usb 3-1: Manufacturer: syz [ 2479.334124][T15596] usb 3-1: SerialNumber: syz [ 2480.035925][ T30] audit: type=1326 audit(1757861624.699:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26555 comm="syz.7.6928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x0 [ 2480.321703][T15596] usb 3-1: 0:2 : does not exist [ 2480.490607][T15596] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2480.755602][T15596] usb 3-1: USB disconnect, device number 6 [ 2481.125176][T26452] udevd[26452]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2481.805037][T12878] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2482.019231][T12878] usb 6-1: Using ep0 maxpacket: 16 [ 2482.043699][T12878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2482.055222][T12878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2482.065480][T12878] usb 6-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 2482.074952][T12878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2482.224040][T12878] usb 6-1: config 0 descriptor?? [ 2482.520408][T12878] usbhid 6-1:0.0: can't add hid device: -71 [ 2482.526995][T12878] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2482.602442][T12878] usb 6-1: USB disconnect, device number 30 [ 2483.812509][T12878] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2484.012566][T12878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 2484.024171][T12878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33049, setting to 1024 [ 2484.036028][T12878] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2484.045303][T12878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2484.163169][T12878] usb 6-1: config 0 descriptor?? [ 2484.261012][T24738] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2484.463572][T24738] usb 3-1: Using ep0 maxpacket: 16 [ 2484.480026][T24738] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2484.492285][T24738] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2484.588806][T24738] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2484.600167][T24738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2484.609185][T24738] usb 3-1: Product: syz [ 2484.613892][T24738] usb 3-1: Manufacturer: syz [ 2484.618824][T24738] usb 3-1: SerialNumber: syz [ 2484.671716][T12878] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 2484.833825][T12878] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0028/input/input25 [ 2484.847835][ C1] usb 6-1: input irq status -75 received [ 2485.032469][T24738] usb 3-1: 0:2 : does not exist [ 2485.141078][T12878] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 2485.162452][ T4314] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2485.164853][T24738] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2485.237056][T12878] usb 6-1: USB disconnect, device number 31 [ 2485.416334][T24738] usb 3-1: USB disconnect, device number 7 [ 2485.504022][ T4314] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2485.648187][T12931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2485.656706][T12931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2485.875075][ T4314] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2485.995063][T26452] udevd[26452]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2486.063223][ T3668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2486.075412][ T3668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2486.135535][T26606] fido_id[26606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2486.190062][ T4314] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2486.551895][T26612] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6945'. [ 2487.642887][ T4314] bridge_slave_1: left allmulticast mode [ 2487.648822][ T4314] bridge_slave_1: left promiscuous mode [ 2487.675947][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2488.302654][T26629] loop0: detected capacity change from 0 to 256 [ 2488.517659][ T4314] bridge_slave_0: left allmulticast mode [ 2488.523640][ T4314] bridge_slave_0: left promiscuous mode [ 2488.530790][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2488.541809][T26629] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xf47d8e63, utbl_chksum : 0xe619d30d) [ 2489.320402][ T30] audit: type=1326 audit(1757861633.370:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26611 comm="syz.7.6944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2489.738915][T26615] syz.7.6944 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2489.842197][ T30] audit: type=1326 audit(1757861633.463:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26611 comm="syz.7.6944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07fdf85b67 code=0x7ffc0000 [ 2489.867393][ T30] audit: type=1326 audit(1757861633.501:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26611 comm="syz.7.6944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07fdf2ada9 code=0x7ffc0000 [ 2489.890784][ T30] audit: type=1326 audit(1757861633.501:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26611 comm="syz.7.6944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07fdf85b67 code=0x7ffc0000 [ 2489.918133][ T30] audit: type=1326 audit(1757861633.501:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26611 comm="syz.7.6944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07fdf2ada9 code=0x7ffc0000 [ 2489.942566][ T30] audit: type=1326 audit(1757861633.519:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26611 comm="syz.7.6944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07fdf85b67 code=0x7ffc0000 [ 2489.966908][ T30] audit: type=1326 audit(1757861633.519:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26611 comm="syz.7.6944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07fdf2ada9 code=0x7ffc0000 [ 2489.990459][ T30] audit: type=1326 audit(1757861633.519:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26611 comm="syz.7.6944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2490.017786][ T30] audit: type=1326 audit(1757861633.519:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26611 comm="syz.7.6944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2490.042131][ T30] audit: type=1326 audit(1757861633.519:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26611 comm="syz.7.6944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07fdf85b67 code=0x7ffc0000 [ 2491.862198][ T4314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2492.012986][ T4314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2492.071640][ T4314] bond0 (unregistering): Released all slaves [ 2492.555688][ T4314] tipc: Disabling bearer [ 2492.561925][ T4314] tipc: Left network mode [ 2492.794250][T26644] serio: Serial port ptm0 [ 2493.932232][ T4314] hsr_slave_0: left promiscuous mode [ 2494.014230][ T4314] hsr_slave_1: left promiscuous mode [ 2494.023737][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2494.031497][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2494.209586][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2494.217411][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2494.329017][T26653] loop7: detected capacity change from 0 to 256 [ 2494.569979][ T4314] veth1_macvtap: left promiscuous mode [ 2494.575905][ T4314] veth0_macvtap: left promiscuous mode [ 2494.583664][ T4314] veth1_vlan: left promiscuous mode [ 2494.589483][ T4314] veth0_vlan: left promiscuous mode [ 2494.686083][T26653] FAT-fs (loop7): bogus number of FAT sectors [ 2494.695943][T26653] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2496.929955][T26663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6958'. [ 2497.923514][ T4314] team0 (unregistering): Port device team_slave_1 removed [ 2498.069240][ T4314] team0 (unregistering): Port device team_slave_0 removed [ 2499.153096][T26652] veth0: entered promiscuous mode [ 2499.166091][T26663] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2499.175902][T26663] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2499.185910][T26663] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2499.200174][T26652] veth0: left promiscuous mode [ 2500.608077][T26673] loop0: detected capacity change from 0 to 512 [ 2500.666575][T26673] EXT4-fs: Ignoring removed oldalloc option [ 2500.889959][T26673] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.6961: bg 0: block 16: invalid block bitmap [ 2501.006994][T26673] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 2501.104406][T26673] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.6961: invalid indirect mapped block 5 (level 0) [ 2501.215242][T26673] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.6961: invalid indirect mapped block 4294967295 (level 1) [ 2501.320607][T26673] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.6961: invalid indirect mapped block 4294967295 (level 2) [ 2501.603626][T26673] EXT4-fs (loop0): 1 truncate cleaned up [ 2501.617377][T26673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2502.244974][T21221] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2502.520323][T21221] usb 6-1: Using ep0 maxpacket: 32 [ 2502.571886][T26390] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2502.666348][T21221] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2502.679820][T21221] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2502.689322][T21221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2502.960542][T21221] usb 6-1: config 0 descriptor?? [ 2503.499072][T21221] steelseries 0003:1038:1410.0029: collection stack underflow [ 2503.507288][T21221] steelseries 0003:1038:1410.0029: item 0 4 0 12 parsing failed [ 2503.711712][T21221] steelseries 0003:1038:1410.0029: parse failed [ 2503.719251][T21221] steelseries 0003:1038:1410.0029: probe with driver steelseries failed with error -22 [ 2503.889244][T26689] serio: Serial port ptm0 [ 2503.964500][T21221] usb 6-1: USB disconnect, device number 32 [ 2504.255357][T26692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6965'. [ 2505.055182][T26348] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 2505.279612][T26348] usb 8-1: Using ep0 maxpacket: 8 [ 2505.312792][T26348] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2505.321602][T26348] usb 8-1: config 179 has no interface number 0 [ 2505.328074][T26348] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2505.343008][T26348] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2505.356029][T26348] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2505.367565][T26348] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2505.379398][T26348] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2505.393208][T26348] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2505.402889][T26348] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.597807][T26696] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2505.863517][T26696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2505.873634][T26696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2506.229868][T26348] usb 8-1: USB disconnect, device number 14 [ 2506.236202][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2506.236425][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2507.119634][T26348] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2507.177869][T26723] loop7: detected capacity change from 0 to 256 [ 2507.353046][T26348] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 2507.361708][T26348] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2507.371297][T26348] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2507.381943][T26348] usb 6-1: config 220 has no interface number 2 [ 2507.388687][T26348] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2507.402229][T26348] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2507.409472][T26348] usb 6-1: config 220 interface 76 has no altsetting 0 [ 2507.419819][T26348] usb 6-1: config 220 interface 1 has no altsetting 0 [ 2507.577610][T26348] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2507.587768][T26348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2507.596247][T26348] usb 6-1: Product: syz [ 2507.600861][T26348] usb 6-1: Manufacturer: syz [ 2507.605658][T26348] usb 6-1: SerialNumber: syz [ 2507.978487][T26348] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 2507.985405][T26348] usb 6-1: No valid video chain found. [ 2507.991293][T26348] usb 6-1: selecting invalid altsetting 0 [ 2508.148659][T26348] usb 6-1: selecting invalid altsetting 0 [ 2508.154931][T26348] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 2508.252869][T26728] serio: Serial port ptm0 [ 2508.326859][T26348] usb 6-1: USB disconnect, device number 33 [ 2510.475595][T21221] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2510.705692][T21221] usb 10-1: Using ep0 maxpacket: 8 [ 2510.747150][T21221] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 64512, setting to 1024 [ 2510.759546][T21221] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2510.859723][T21221] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2510.869329][T21221] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2510.879354][T21221] usb 10-1: Product: syz [ 2510.884597][T21221] usb 10-1: Manufacturer: syz [ 2510.889493][T21221] usb 10-1: SerialNumber: syz [ 2510.960246][T26736] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2511.641978][T21221] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2511.709203][T21221] usb 10-1: USB disconnect, device number 13 [ 2511.753644][T21221] usblp0: removed [ 2512.296792][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 2512.296871][ T30] audit: type=1326 audit(1757861654.893:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26743 comm="syz.2.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa37b8eba9 code=0x7ffc0000 [ 2512.326480][ T30] audit: type=1326 audit(1757861654.912:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26743 comm="syz.2.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa37b8eba9 code=0x7ffc0000 [ 2512.536162][ T30] audit: type=1326 audit(1757861654.949:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26743 comm="syz.2.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa37b8eba9 code=0x7ffc0000 [ 2512.564542][ T30] audit: type=1326 audit(1757861654.959:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26743 comm="syz.2.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa37b8eba9 code=0x7ffc0000 [ 2512.589229][ T30] audit: type=1326 audit(1757861654.968:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26743 comm="syz.2.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa37b8eba9 code=0x7ffc0000 [ 2512.612658][ T30] audit: type=1326 audit(1757861655.043:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26743 comm="syz.2.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa37b8eba9 code=0x7ffc0000 [ 2512.637120][ T30] audit: type=1326 audit(1757861655.043:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26743 comm="syz.2.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa37b8eba9 code=0x7ffc0000 [ 2512.660680][ T30] audit: type=1326 audit(1757861655.052:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26743 comm="syz.2.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa37b8eba9 code=0x7ffc0000 [ 2512.688265][ T30] audit: type=1326 audit(1757861655.052:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26743 comm="syz.2.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa37b8eba9 code=0x7ffc0000 [ 2512.712799][ T30] audit: type=1326 audit(1757861655.071:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26743 comm="syz.2.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa37b8eba9 code=0x7ffc0000 [ 2520.871122][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2520.881681][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2521.521758][T26768] serio: Serial port ptm0 [ 2525.597417][T26791] loop0: detected capacity change from 0 to 256 [ 2531.995290][T26791] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6d9bc45, utbl_chksum : 0xe619d30d) [ 2533.866144][T26348] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2534.153504][T26348] usb 3-1: Using ep0 maxpacket: 16 [ 2534.199699][T26348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2534.211250][T26348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2534.221505][T26348] usb 3-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 2534.230970][T26348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2534.723774][T26348] usb 3-1: config 0 descriptor?? [ 2535.094908][T26348] usbhid 3-1:0.0: can't add hid device: -71 [ 2535.101625][T26348] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2535.346024][T26348] usb 3-1: USB disconnect, device number 8 [ 2535.459364][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2535.473203][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2535.483977][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2535.533364][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2535.549779][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2537.767309][ T5815] Bluetooth: hci1: command tx timeout [ 2538.218685][T26818] serio: Serial port ptm0 [ 2538.304608][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 2538.304687][ T30] audit: type=1326 audit(1757861679.223:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26819 comm="syz.7.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2538.585368][ T30] audit: type=1326 audit(1757861679.289:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26819 comm="syz.7.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2538.608717][ T30] audit: type=1326 audit(1757861679.307:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26819 comm="syz.7.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2538.634897][ T30] audit: type=1326 audit(1757861679.307:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26819 comm="syz.7.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2538.658966][ T30] audit: type=1326 audit(1757861679.307:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26819 comm="syz.7.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2538.681894][ T30] audit: type=1326 audit(1757861679.326:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26819 comm="syz.7.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2538.704796][ T30] audit: type=1326 audit(1757861679.382:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26819 comm="syz.7.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2538.730897][ T30] audit: type=1326 audit(1757861679.382:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26819 comm="syz.7.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2538.755006][ T30] audit: type=1326 audit(1757861679.382:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26819 comm="syz.7.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2538.777962][ T30] audit: type=1326 audit(1757861679.382:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26819 comm="syz.7.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2539.896847][T26802] chnl_net:caif_netlink_parms(): no params data found [ 2540.018385][ T5815] Bluetooth: hci1: command tx timeout [ 2542.259648][ T5815] Bluetooth: hci1: command tx timeout [ 2543.667025][T21287] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2544.208166][T21287] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2544.353992][T21221] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2544.458621][ T5815] Bluetooth: hci1: command tx timeout [ 2544.652222][T21221] usb 10-1: Using ep0 maxpacket: 16 [ 2544.716687][T21221] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2544.728280][T21221] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2544.738621][T21221] usb 10-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 2544.753107][T21221] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2546.584210][T21287] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2546.608653][T21221] usb 10-1: config 0 descriptor?? [ 2549.773734][T21221] usb 10-1: can't set config #0, error -71 [ 2550.089337][T21221] usb 10-1: USB disconnect, device number 14 [ 2550.779665][T26802] bridge0: port 1(bridge_slave_0) entered blocking state [ 2550.787247][T26802] bridge0: port 1(bridge_slave_0) entered disabled state [ 2550.795391][T26802] bridge_slave_0: entered allmulticast mode [ 2550.805115][T26802] bridge_slave_0: entered promiscuous mode [ 2551.099735][T26802] bridge0: port 2(bridge_slave_1) entered blocking state [ 2551.107264][T26802] bridge0: port 2(bridge_slave_1) entered disabled state [ 2551.115383][T26802] bridge_slave_1: entered allmulticast mode [ 2551.125036][T26802] bridge_slave_1: entered promiscuous mode [ 2551.413581][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2551.413664][ T30] audit: type=1326 audit(1757861691.458:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.7.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2551.450149][ T30] audit: type=1326 audit(1757861691.477:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.7.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2551.473019][ T30] audit: type=1326 audit(1757861691.477:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.7.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2552.703666][ T30] audit: type=1326 audit(1757861691.636:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.7.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2552.726624][ T30] audit: type=1326 audit(1757861691.645:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.7.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2553.201919][T26863] loop7: detected capacity change from 0 to 1024 [ 2553.307360][T26863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2553.320345][T26863] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2553.452254][T21287] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2553.853883][T26802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2553.968564][T26802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2554.005455][T26867] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7024: bg 0: block 393: padding at end of block bitmap is not set [ 2554.093727][T26867] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 316 with error 117 [ 2554.106795][T26867] EXT4-fs (loop7): This should not happen!! Data will be lost [ 2554.106795][T26867] [ 2554.230730][T26802] team0: Port device team_slave_0 added [ 2554.284452][T26802] team0: Port device team_slave_1 added [ 2554.310939][T26867] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 2554.324223][T26867] EXT4-fs (loop7): This should not happen!! Data will be lost [ 2554.324223][T26867] [ 2554.336197][T26867] EXT4-fs (loop7): Total free blocks count 0 [ 2554.343214][T26867] EXT4-fs (loop7): Free/Dirty block details [ 2554.349427][T26867] EXT4-fs (loop7): free_blocks=0 [ 2554.354645][T26867] EXT4-fs (loop7): dirty_blocks=16 [ 2554.360118][T26867] EXT4-fs (loop7): Block reservation details [ 2554.396823][T21287] bridge_slave_1: left allmulticast mode [ 2554.403356][T21287] bridge_slave_1: left promiscuous mode [ 2554.409965][T21287] bridge0: port 2(bridge_slave_1) entered disabled state [ 2554.427352][T21287] bridge_slave_0: left allmulticast mode [ 2554.434221][T21287] bridge_slave_0: left promiscuous mode [ 2554.440818][T21287] bridge0: port 1(bridge_slave_0) entered disabled state [ 2554.540814][T21221] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2554.872783][T21221] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2554.884069][T21221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2554.892905][T21221] usb 3-1: Product: syz [ 2554.897507][T21221] usb 3-1: Manufacturer: syz [ 2554.902400][T21221] usb 3-1: SerialNumber: syz [ 2555.105056][T21287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2555.203642][T21287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2555.222164][T21287] bond0 (unregistering): Released all slaves [ 2555.406840][ T30] audit: type=1326 audit(1757861695.209:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26878 comm="syz.7.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2555.432323][ T30] audit: type=1326 audit(1757861695.209:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26878 comm="syz.7.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2555.456017][ T30] audit: type=1326 audit(1757861695.228:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26878 comm="syz.7.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2555.483738][ T30] audit: type=1326 audit(1757861695.228:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26878 comm="syz.7.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2555.679894][T21287] tipc: Left network mode [ 2555.685523][T26802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2555.685606][T26802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2555.685755][T26802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2555.746390][T26802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2555.756307][T26802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2555.783374][T26802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2556.658269][T21221] (unnamed net_device) (uninitialized): Assigned a random MAC address: 9a:3b:5f:e1:af:50 [ 2556.718027][T21221] rtl8150 3-1:1.0: eth25: rtl8150 is detected [ 2556.745349][T26802] hsr_slave_0: entered promiscuous mode [ 2556.755825][T21221] usb 3-1: USB disconnect, device number 9 [ 2556.761323][T26802] hsr_slave_1: entered promiscuous mode [ 2556.775666][T26802] debugfs: 'hsr0' already exists in 'hsr' [ 2556.781585][T26802] Cannot create hsr debugfs directory [ 2557.503965][T21287] hsr_slave_0: left promiscuous mode [ 2557.577487][T21287] hsr_slave_1: left promiscuous mode [ 2557.585724][T21287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2557.594403][T21287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2557.733093][T21287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2557.741109][T21287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2557.941055][T21287] veth1_macvtap: left promiscuous mode [ 2557.949059][T21287] veth0_macvtap: left promiscuous mode [ 2557.955273][T21287] veth1_vlan: left promiscuous mode [ 2557.960808][T21287] veth0_vlan: left promiscuous mode [ 2557.984205][T26888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7031'. [ 2558.340166][T26889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7031'. [ 2559.871236][T15596] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2559.938587][T21287] team0 (unregistering): Port device team_slave_1 removed [ 2561.758996][T23793] Bluetooth: hci4: command 0x0406 tx timeout [ 2562.618671][T21287] team0 (unregistering): Port device team_slave_0 removed [ 2567.072262][T26920] serio: Serial port ptm0 [ 2569.053386][T26929] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7044'. [ 2569.360026][T21221] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2569.551316][T21221] usb 10-1: Using ep0 maxpacket: 16 [ 2569.608649][T21221] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2569.619214][T21221] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2569.654301][T26802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2569.707122][T21221] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2569.716758][T21221] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2569.725238][T21221] usb 10-1: Product: syz [ 2569.728430][T26802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2569.729639][T21221] usb 10-1: Manufacturer: syz [ 2569.729750][T21221] usb 10-1: SerialNumber: syz [ 2569.768908][T26802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2569.852053][T26802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2570.117532][T21221] usb 10-1: 0:2 : does not exist [ 2570.184857][T21221] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 2570.354974][T21221] usb 10-1: USB disconnect, device number 16 [ 2570.602952][T26776] udevd[26776]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2570.916512][T26802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2571.062681][T26802] 8021q: adding VLAN 0 to HW filter on device team0 [ 2571.163142][T12931] bridge0: port 1(bridge_slave_0) entered blocking state [ 2571.170793][T12931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2571.269954][T12931] bridge0: port 2(bridge_slave_1) entered blocking state [ 2571.277593][T12931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2573.243766][ T30] audit: type=1326 audit(1757861712.779:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26948 comm="syz.9.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2573.267332][ T30] audit: type=1326 audit(1757861712.779:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26948 comm="syz.9.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2573.290400][ T30] audit: type=1326 audit(1757861712.845:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26948 comm="syz.9.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2573.316567][ T30] audit: type=1326 audit(1757861712.845:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26948 comm="syz.9.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2573.340474][ T30] audit: type=1326 audit(1757861712.873:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26948 comm="syz.9.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2574.368928][ T30] audit: type=1326 audit(1757861713.013:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26948 comm="syz.9.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2574.392057][ T30] audit: type=1326 audit(1757861713.013:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26948 comm="syz.9.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2574.417635][ T30] audit: type=1326 audit(1757861713.032:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26948 comm="syz.9.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2574.441411][ T30] audit: type=1326 audit(1757861713.032:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26948 comm="syz.9.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2574.464517][ T30] audit: type=1326 audit(1757861713.060:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26948 comm="syz.9.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2575.146812][T26802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2575.392153][T26960] serio: Serial port ptm0 [ 2575.900625][T26348] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2576.082950][T26348] usb 10-1: Using ep0 maxpacket: 16 [ 2576.116050][T26348] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2576.126743][T26348] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2576.182482][T26348] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2576.192095][T26348] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2576.200637][T26348] usb 10-1: Product: syz [ 2576.205085][T26348] usb 10-1: Manufacturer: syz [ 2576.209968][T26348] usb 10-1: SerialNumber: syz [ 2576.504227][T26348] usb 10-1: 0:2 : does not exist [ 2576.578231][T26348] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 2576.697187][T26348] usb 10-1: USB disconnect, device number 17 [ 2577.214623][T26983] udevd[26983]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2579.289394][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2579.289474][ T30] audit: type=1326 audit(1757861718.551:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz.7.7067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2579.319152][ T30] audit: type=1326 audit(1757861718.551:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz.7.7067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2579.360964][T26348] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2579.427134][ T30] audit: type=1326 audit(1757861718.616:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz.7.7067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2579.455033][ T30] audit: type=1326 audit(1757861718.616:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz.7.7067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2579.480034][ T30] audit: type=1326 audit(1757861718.654:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26995 comm="syz.7.7067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07fdf8eba9 code=0x7ffc0000 [ 2579.631998][T26348] usb 1-1: Using ep0 maxpacket: 32 [ 2579.675253][T26348] usb 1-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 2579.685246][T26348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2579.693463][T26348] usb 1-1: Product: syz [ 2579.698209][T26348] usb 1-1: Manufacturer: syz [ 2579.702995][T26348] usb 1-1: SerialNumber: syz [ 2579.789482][T26348] usb 1-1: config 0 descriptor?? [ 2579.822605][T26348] usb 1-1: bad CDC descriptors [ 2580.127728][T26994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2580.138384][T26994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2580.236514][T26802] veth0_vlan: entered promiscuous mode [ 2580.293987][T26802] veth1_vlan: entered promiscuous mode [ 2580.380323][T26994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2580.392130][T26994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2580.443432][T21221] usb 1-1: USB disconnect, device number 15 [ 2580.690619][T26802] veth0_macvtap: entered promiscuous mode [ 2580.736829][T26802] veth1_macvtap: entered promiscuous mode [ 2580.928428][T26802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2581.013603][T26802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2581.055821][T26543] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2581.056874][ T30] audit: type=1326 audit(1757861720.197:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27009 comm="syz.9.7072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x0 [ 2581.121860][ T3668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2581.165640][ T3668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2581.219282][ T3668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2581.236130][T26543] usb 3-1: Using ep0 maxpacket: 16 [ 2581.248422][T21287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2581.271788][T26543] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2581.282391][T26543] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2581.349427][T26543] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2581.359753][T26543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2581.368171][T26543] usb 3-1: Product: syz [ 2581.372515][T26543] usb 3-1: Manufacturer: syz [ 2581.377551][T26543] usb 3-1: SerialNumber: syz [ 2581.686954][T26543] usb 3-1: 0:2 : does not exist [ 2581.938342][T26543] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2582.542969][T26543] usb 3-1: USB disconnect, device number 10 [ 2582.864978][T26983] udevd[26983]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2582.939720][ T5815] Bluetooth: hci6: command 0x0406 tx timeout [ 2583.486863][T27026] serio: Serial port ptm0 [ 2583.865466][ T30] audit: type=1326 audit(1757861722.816:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27029 comm="syz.9.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2583.890197][ T30] audit: type=1326 audit(1757861722.825:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27029 comm="syz.9.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2583.913651][ T30] audit: type=1326 audit(1757861722.853:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27029 comm="syz.9.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2584.098482][T27032] loop7: detected capacity change from 0 to 128 [ 2584.133217][ T30] audit: type=1326 audit(1757861722.928:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27029 comm="syz.9.7078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b478eba9 code=0x7ffc0000 [ 2584.220543][T27032] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 2584.767569][T27041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7081'. [ 2585.810967][T12878] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 2586.061225][T26348] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2586.249499][T26348] usb 1-1: Using ep0 maxpacket: 16 [ 2586.264116][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2586.271515][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2586.306628][T26348] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2586.317499][T26348] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2586.383449][T26348] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2586.393522][T26348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.402009][T26348] usb 1-1: Product: syz [ 2586.406357][T26348] usb 1-1: Manufacturer: syz [ 2586.411294][T26348] usb 1-1: SerialNumber: syz [ 2586.757378][T26348] usb 1-1: 0:2 : does not exist [ 2586.810659][T26348] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 2587.008087][T12878] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 2587.017216][T12878] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2587.027738][T12878] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2587.037068][T12878] usb 3-1: config 1 has no interface number 1 [ 2587.043119][T26348] usb 1-1: USB disconnect, device number 16 [ 2587.366862][T26983] udevd[26983]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2588.130364][T12878] usb 3-1: string descriptor 0 read error: -22 [ 2588.137170][T12878] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2588.146707][T12878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.291695][T12878] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2588.298901][T12878] usb 3-1: MIDIStreaming interface descriptor not found [ 2588.578291][T27070] serio: Serial port ptm0 [ 2590.289498][T12878] usb 3-1: USB disconnect, device number 11 [ 2591.198622][T21287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2591.206653][T21287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2591.416573][T27084] udevd[27084]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2591.823741][T24721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2591.832202][T24721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2595.503805][T26348] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 2595.700593][T26348] usb 8-1: Using ep0 maxpacket: 16 [ 2595.738312][T26348] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2595.749165][T26348] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2595.939323][T26348] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2595.949392][T26348] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2595.957842][T26348] usb 8-1: Product: syz [ 2595.962187][T26348] usb 8-1: Manufacturer: syz [ 2595.967120][T26348] usb 8-1: SerialNumber: syz [ 2596.147867][T27116] serio: Serial port ptm0 [ 2601.570209][T26348] usb 8-1: can't set config #1, error -110 [ 2606.127713][T26348] usb 8-1: USB disconnect, device number 15 [ 2606.745139][T27129] ===================================================== [ 2606.752404][T27129] BUG: KMSAN: uninit-value in eth_type_trans+0x69d/0x9a0 [ 2606.759958][T27129] eth_type_trans+0x69d/0x9a0 [ 2606.764942][T27129] __dev_forward_skb2+0x4b1/0x950 [ 2606.770130][T27129] dev_forward_skb_nomtu+0x3b/0xe0 [ 2606.775550][T27129] __bpf_redirect+0x14d6/0x1760 [ 2606.780591][T27129] bpf_clone_redirect+0x366/0x530 [ 2606.785964][T27129] ___bpf_prog_run+0x1297/0xeba0 [ 2606.791048][T27129] __bpf_prog_run512+0xc5/0x100 [ 2606.796196][T27129] bpf_test_run+0x6cb/0xab0 [ 2606.801004][T27129] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2606.806786][T27129] bpf_prog_test_run+0x5c2/0xa40 [ 2606.811898][T27129] __sys_bpf+0x89a/0xed0 [ 2606.816274][T27129] __x64_sys_bpf+0xa4/0xf0 [ 2606.821050][T27129] x64_sys_call+0x3550/0x3e20 [ 2606.825965][T27129] do_syscall_64+0xd9/0x210 [ 2606.830759][T27129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2606.836814][T27129] [ 2606.839367][T27129] Uninit was created at: [ 2606.843824][T27129] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 2606.850061][T27129] kmalloc_reserve+0x13c/0x4b0 [ 2606.854995][T27129] pskb_expand_head+0x1fc/0x1610 [ 2606.860256][T27129] skb_ensure_writable+0x44e/0x510 [ 2606.865535][T27129] bpf_clone_redirect+0x1c1/0x530 [ 2606.870904][T27129] ___bpf_prog_run+0x1297/0xeba0 [ 2606.875985][T27129] __bpf_prog_run512+0xc5/0x100 [ 2606.881005][T27129] bpf_test_run+0x6cb/0xab0 [ 2606.885838][T27129] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2606.891475][T27129] bpf_prog_test_run+0x5c2/0xa40 [ 2606.896735][T27129] __sys_bpf+0x89a/0xed0 [ 2606.901118][T27129] __x64_sys_bpf+0xa4/0xf0 [ 2606.905864][T27129] x64_sys_call+0x3550/0x3e20 [ 2606.910735][T27129] do_syscall_64+0xd9/0x210 [ 2606.915517][T27129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2606.921569][T27129] [ 2606.924030][T27129] CPU: 0 UID: 0 PID: 27129 Comm: syz.2.7105 Tainted: G W syzkaller #0 PREEMPT(none) [ 2606.935399][T27129] Tainted: [W]=WARN [ 2606.939294][T27129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2606.949624][T27129] ===================================================== [ 2606.956785][T27129] Disabling lock debugging due to kernel taint [ 2606.963039][T27129] Kernel panic - not syncing: kmsan.panic set ... [ 2606.969580][T27129] CPU: 0 UID: 0 PID: 27129 Comm: syz.2.7105 Tainted: G B W syzkaller #0 PREEMPT(none) [ 2606.980718][T27129] Tainted: [B]=BAD_PAGE, [W]=WARN [ 2606.985920][T27129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2606.996092][T27129] Call Trace: [ 2606.999462][T27129] [ 2607.002474][T27129] __dump_stack+0x26/0x30 [ 2607.007002][T27129] dump_stack_lvl+0x53/0x270 [ 2607.011783][T27129] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2607.017783][T27129] dump_stack+0x1e/0x25 [ 2607.022105][T27129] vpanic+0x361/0xc50 [ 2607.026270][T27129] panic+0x15d/0x160 [ 2607.030383][T27129] kmsan_report+0x31c/0x320 [ 2607.035053][T27129] ? bpf_prog_test_run+0x5c2/0xa40 [ 2607.040415][T27129] ? __msan_warning+0x1b/0x30 [ 2607.045250][T27129] ? eth_type_trans+0x69d/0x9a0 [ 2607.050292][T27129] ? __dev_forward_skb2+0x4b1/0x950 [ 2607.055662][T27129] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 2607.061127][T27129] ? __bpf_redirect+0x14d6/0x1760 [ 2607.066349][T27129] ? bpf_clone_redirect+0x366/0x530 [ 2607.071751][T27129] ? ___bpf_prog_run+0x1297/0xeba0 [ 2607.077007][T27129] ? __bpf_prog_run512+0xc5/0x100 [ 2607.082185][T27129] ? bpf_test_run+0x6cb/0xab0 [ 2607.087037][T27129] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2607.092854][T27129] ? bpf_prog_test_run+0x5c2/0xa40 [ 2607.098131][T27129] ? __sys_bpf+0x89a/0xed0 [ 2607.102689][T27129] ? __x64_sys_bpf+0xa4/0xf0 [ 2607.107474][T27129] ? x64_sys_call+0x3550/0x3e20 [ 2607.112521][T27129] ? do_syscall_64+0xd9/0x210 [ 2607.117334][T27129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2607.123577][T27129] ? kmem_cache_charge+0x981/0x9d0 [ 2607.128891][T27129] ? kmsan_get_metadata+0xfb/0x160 [ 2607.134189][T27129] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2607.140194][T27129] ? eth_get_headlen+0x151/0x1e0 [ 2607.145338][T27129] ? filter_irq_stacks+0x49/0x190 [ 2607.150540][T27129] ? stack_depot_save_flags+0x35/0x7b0 [ 2607.156168][T27129] ? kmsan_get_metadata+0xfb/0x160 [ 2607.161471][T27129] ? kmsan_get_metadata+0xfb/0x160 [ 2607.166793][T27129] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2607.173305][T27129] ? kmsan_get_metadata+0xfb/0x160 [ 2607.178606][T27129] __msan_warning+0x1b/0x30 [ 2607.183259][T27129] eth_type_trans+0x69d/0x9a0 [ 2607.188161][T27129] __dev_forward_skb2+0x4b1/0x950 [ 2607.193339][T27129] ? pskb_expand_head+0x1268/0x1610 [ 2607.198749][T27129] dev_forward_skb_nomtu+0x3b/0xe0 [ 2607.204034][T27129] __bpf_redirect+0x14d6/0x1760 [ 2607.209081][T27129] ? kmsan_get_metadata+0xfb/0x160 [ 2607.214402][T27129] bpf_clone_redirect+0x366/0x530 [ 2607.219636][T27129] ___bpf_prog_run+0x1297/0xeba0 [ 2607.224755][T27129] __bpf_prog_run512+0xc5/0x100 [ 2607.229762][T27129] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2607.236249][T27129] ? kmsan_get_metadata+0xfb/0x160 [ 2607.241519][T27129] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2607.247512][T27129] ? __local_bh_enable_ip+0x91/0xb0 [ 2607.252862][T27129] ? filter_irq_stacks+0x49/0x190 [ 2607.258037][T27129] ? stack_depot_save_flags+0x35/0x7b0 [ 2607.263642][T27129] ? kmsan_get_metadata+0xfb/0x160 [ 2607.268920][T27129] ? kmsan_get_metadata+0xfb/0x160 [ 2607.274358][T27129] ? kmsan_get_metadata+0xfb/0x160 [ 2607.279632][T27129] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2607.286127][T27129] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2607.292344][T27129] ? kmsan_get_metadata+0x150/0x160 [ 2607.297710][T27129] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2607.303699][T27129] bpf_test_run+0x6cb/0xab0 [ 2607.308366][T27129] ? kmsan_get_metadata+0xfb/0x160 [ 2607.313627][T27129] ? kmsan_get_metadata+0xfb/0x160 [ 2607.318936][T27129] ? kmsan_get_metadata+0xfb/0x160 [ 2607.324206][T27129] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2607.330276][T27129] ? bpf_test_run+0x1b0/0xab0 [ 2607.335147][T27129] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2607.340815][T27129] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2607.346508][T27129] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2607.352584][T27129] bpf_prog_test_run+0x5c2/0xa40 [ 2607.357699][T27129] __sys_bpf+0x89a/0xed0 [ 2607.362115][T27129] __x64_sys_bpf+0xa4/0xf0 [ 2607.366732][T27129] x64_sys_call+0x3550/0x3e20 [ 2607.371600][T27129] do_syscall_64+0xd9/0x210 [ 2607.376242][T27129] ? irqentry_exit+0x16/0x60 [ 2607.381023][T27129] ? clear_bhb_loop+0x40/0x90 [ 2607.385871][T27129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2607.391937][T27129] RIP: 0033:0x7faa37b8eba9 [ 2607.396485][T27129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2607.416268][T27129] RSP: 002b:00007faa38ac5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2607.424841][T27129] RAX: ffffffffffffffda RBX: 00007faa37dd5fa0 RCX: 00007faa37b8eba9 [ 2607.432978][T27129] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 2607.441070][T27129] RBP: 00007faa37c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2607.449154][T27129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2607.457239][T27129] R13: 00007faa37dd6038 R14: 00007faa37dd5fa0 R15: 00007ffd8a1ad338 [ 2607.465361][T27129] [ 2607.468764][T27129] Kernel Offset: disabled [ 2607.473156][T27129] Rebooting in 86400 seconds..