last executing test programs: 14m12.110979818s ago: executing program 32 (id=169): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x80104d12, 0x0) 12m49.312739002s ago: executing program 6 (id=388): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x2000000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000002580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60fd, 0xfffffffffffffd5c, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x440}], 0x0, 0x0, 0x0}) 12m48.782966997s ago: executing program 6 (id=391): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x0, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x63, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) mlockall(0x7) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 12m43.716968284s ago: executing program 6 (id=416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 12m42.696954783s ago: executing program 6 (id=407): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@local, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) 12m39.694043639s ago: executing program 6 (id=419): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 12m39.221319941s ago: executing program 6 (id=421): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x2, 0x1, {0x1}}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) 12m36.823681202s ago: executing program 1 (id=429): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) r0 = eventfd(0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) 12m35.726925345s ago: executing program 1 (id=431): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'netdevsim0\x00', 0x80004}) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r2, 0x7855, 0x0, 0x0, 0x0, 0x0) 12m32.304298118s ago: executing program 1 (id=441): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 12m29.141999577s ago: executing program 1 (id=448): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) 12m27.432805969s ago: executing program 1 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 12m26.941277678s ago: executing program 1 (id=456): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(r2, &(0x7f0000000f40)={0x2020}, 0x2020) 12m23.719680957s ago: executing program 33 (id=421): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x2, 0x1, {0x1}}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) 12m11.650347968s ago: executing program 34 (id=456): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(r2, &(0x7f0000000f40)={0x2020}, 0x2020) 11m26.608004692s ago: executing program 7 (id=599): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r2) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="7f454c460001690bfeffffff0000000002003e"], 0x40) close(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 11m25.183649476s ago: executing program 7 (id=605): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x7ff9, 0x32c, 0x0, r2}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 11m20.691844122s ago: executing program 7 (id=611): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x150, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8000}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xffffff01}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 11m19.402158235s ago: executing program 7 (id=612): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@undelete}, {@anchor={'anchor', 0x3d, 0x4}}, {@longad}, {@uid_forget}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uid}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 11m18.343763883s ago: executing program 7 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 11m17.399555414s ago: executing program 7 (id=621): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xf) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 11m16.34795274s ago: executing program 35 (id=621): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xf) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6m24.946810558s ago: executing program 0 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) 6m22.763950863s ago: executing program 0 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee00, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, 0x0, 0x0) 6m19.887326695s ago: executing program 0 (id=1321): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xc}) r2 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x2, "0062ba7d820700000000000000000000096304"}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @private=0xa010101}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x1, @in6={0xa, 0x4e20, 0x400, @private2, 0x1}}}, 0xa0) r4 = syz_open_pts(r0, 0x82080) dup3(r4, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) 6m17.614630738s ago: executing program 0 (id=1324): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r2, 0x7277, 0x0, 0x0, 0x0, 0x0) 6m6.821064024s ago: executing program 0 (id=1346): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae", 0x7) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 6m0.263151576s ago: executing program 0 (id=1353): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80801) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x1, 0x6, &(0x7f0000000640)=[{&(0x7f0000000500)='td', 0x2}], 0x1, 0xa, 0x1}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 5m44.536635969s ago: executing program 36 (id=1353): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80801) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x1, 0x6, &(0x7f0000000640)=[{&(0x7f0000000500)='td', 0x2}], 0x1, 0xa, 0x1}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4m46.772070916s ago: executing program 5 (id=1524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r3, &(0x7f00000000c0)=""/144, 0x90, 0x5e) 4m44.952166978s ago: executing program 5 (id=1527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) 4m43.496631128s ago: executing program 5 (id=1528): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x20002, r0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1fffffff, 0x48800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000380)={r6, 0x2, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20800000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000180)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)={r8, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9}) 4m42.880945835s ago: executing program 5 (id=1530): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) 4m39.201426271s ago: executing program 5 (id=1544): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 4m33.749695761s ago: executing program 5 (id=1560): ioprio_set$pid(0x1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10043, 0x0) getdents64(r1, &(0x7f0000020ac0)=""/4107, 0x100b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf26, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0x4}, 0x50) 4m18.310583446s ago: executing program 37 (id=1560): ioprio_set$pid(0x1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10043, 0x0) getdents64(r1, &(0x7f0000020ac0)=""/4107, 0x100b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf26, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0x4}, 0x50) 2m3.081374528s ago: executing program 9 (id=1861): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x800010, &(0x7f0000000240)=ANY=[@ANYBLOB="757466383d312c726f6469722c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c636865636b3d7374726963742c756e695f786c6174653d302c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303030343030302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c71756965742c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c757466383d302c666c7573682c726f6469722c73686f72746e616d653d6d697865642c73686f77657865632c636865636b3d72656c617865642c726f6469722c726f6469722c007cbda5978eff1afd303a09806ce0c610fe00684c0c67004cdbbd0b9992b0bbea8911a2050000006311c61fb0edf19ed5b7f8d03bfbf22d5655a02f9c7e7307c4f0cbeda2b4e5b2821ba502f452ce09bae8f886c9b612847e26f9afb26c9805000000000000000bc8604552e1dcb75008cfdd8a85c302b83f5ba6d806e8f77268091776f01e8c0465aa4a0ac02f13f9daeab1932f5688fd0ba15f0fc0d94f21c352fe6bc02b893c57f77281db316d62c523025b2c545ab273f28000ba55a384f4ddaa65567a7eb6e51c9d5b69a84c1cec408643486d4c6a17a1fe12f05c1bf8b7494265dc0493bbc87c7f86f7e5e9ed79d5822adebabbe3c1e9320ad777219218ae6103ce6a392927ef866f4b0bcfecea44742736cfc57fe72eee93d416f6ff7da7641eb9865ee1f09a9b76f87189d2f0113ebf44794240ccdfdee8fa1eccb4abfa1d4d470623d6e1530497c7e64924d946272d4fa346cfecac39646cbbf431869c533429e09b", @ANYRESHEX], 0x1, 0x2a9, &(0x7f0000000c00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @remote, 0x9}, 0x1c) write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file1', [{0x20, ',@\x89{}\x00'}, {0x20, '/dev/snd/seq\x00'}]}, 0x20) fallocate(r2, 0x0, 0x0, 0x1000f4) 2m0.64601876s ago: executing program 9 (id=1869): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$inet(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@local, @local, @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "038848", 0x0, 0x29, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, 0x0) 1m52.235198591s ago: executing program 9 (id=1884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) 1m49.575660348s ago: executing program 9 (id=1886): r0 = socket$inet6(0xa, 0x3, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x24}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1m44.098089891s ago: executing program 9 (id=1891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054010000000080008"], 0x64}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x434001, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000240)=r1) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x7}, {0x1, 0xfffffffc, 0x1, 0xb}]}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 1m42.828486436s ago: executing program 9 (id=1894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$eJzs3M9vVEUcAPDv222L/LIV8QeIgqKRaGxpQeXgAYwmHjQx0QMe67YQpFBDqxFCtHrAoyHxbjya8Bd40otRTyZe9W5IiOECenrm7b7Xvl1217ZsXXA/n2TpzM5bZr7MTHfmDbsBDKx92R9JxLaI+C0iRhvZ5gv2NX7cvH6x9tf1i7Uk0vStP5P6dTeuX6wVlxav21pklpqfL1s4f+H09Nzc7Lk8P7F45v2JhfMXnjt1Zvrk7MnZs1NHjhw+NPniC1PP9yTOrE03dn88v2fXa+9cfqN2/PK7P11Jivib4viwJ/WV/uqyapF4qle13CG2l9LJUB8bwppkAzLrruH6/B+Naqx03mi8+llfGwdsqDRN002di5dS4H8siX63AOiP/H0+iViqZXvg8n5+EFw71tgAZXHfzB+NkqGo5NcMt+xveynbbR1f+vur7BEt91MAADbCd8caP4u138r6o9J0F/9ofjY0FhH3RcSOiLg/InZGxAMR8WBEPBQRD5de0+7cp1XrIcmt65/K1XUFtkrZ+u+l/Gyref1XrP5irJrnttfjH05OnJqbPRgR90bEgRjelOUnu9Tx/Su/ftGpbF9p/Zc9svqLtWDejqtDLTfoZqYXp28n5rJrn0bsHmoXf7J8EpD1466I2L13fXWceuabPZ3K/j3+LnpwzpR+HfF0o/+XoiX+QtL9fHLinpibPThRjIpb/fzLpTdL2dpoKXNb8fdA1v9b2o7/5fjHkvJ57cLa67j0++cd9zSrHP8j5ddk438kebueLgo+ml5cPDcZMZK8nj9/NH++ub76dVMr12fxH9jffv7viJV/iUciIhvEj0bEYxGxN2/74xHxRETs7xL/jy8/+d76499YWfwza+r/jonibPuWourpH76tlxSdNdYl/iTa9P/heupA/ky733+jzUMkurb03O2MZgAAALj7VCJiWySV8eV0pTI+3vj/8jtjS2VufmHx2RPzH5ydaXxGYCyGK8WdrtHl+6GxNJlv669UI7LyqTxf3C89lN83/rK6uZ4fr83PzfQ7eBhwWzvM/8wf1X63DthwPq8Fg2u98z9N00963BTgP+b9HwaX+Q+Dq83839yS7/IdAcDdrN37v409DAbrfxhc5j8MLvMfBpf5DwMp/yT80Go+4L9hiez3T/9qX3siTftU+0j/Y19ORKVvtUe/Y19bIsm/SyO9Q9qzukS9yU4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu94/AQAA//8QtN5n") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10980, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x7ff}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xcc}}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0xfd, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1m26.915521015s ago: executing program 38 (id=1894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10980, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x7ff}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xcc}}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0xfd, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 18.774199477s ago: executing program 8 (id=2041): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) read$FUSE(r1, &(0x7f0000001200)={0x2020}, 0x2020) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) sendmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="15", 0x1}], 0x1}}], 0x1, 0x20008005) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 16.961529974s ago: executing program 3 (id=2045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) 16.859455511s ago: executing program 8 (id=2046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x8100, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) 14.908683566s ago: executing program 3 (id=2050): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x0, 0x8017, &(0x7f0000000200)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x6a, 0x1) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB]) writev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000580)="2a13e091c9ee9c0e0a16371a0f915d2e", 0x10}], 0x2) 11.9726841s ago: executing program 3 (id=2054): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffffffffffea4, 0x2, [@TCA_FQ_PLIMIT={0x0, 0x1, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x40004}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x5f}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xe87}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x2, 0x12, @loopback, @mcast2, 0x10, 0x10, 0x6, 0x101}}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.702332311s ago: executing program 4 (id=2057): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x50, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe9e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) close(r0) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) 9.56224794s ago: executing program 2 (id=2058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) migrate_pages(r0, 0x3, &(0x7f00000000c0)=0x10, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0xf, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) shmctl$IPC_RMID(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 9.389070145s ago: executing program 2 (id=2059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 9.383327157s ago: executing program 4 (id=2060): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="2d5a8bfaec0503d4ee82255ccc79459d336c02f6846ffa083727a27fef8e41f33ff61428dc81376619b5746876cab40bea6b76e7a18d9f0f45c5f33c3f3e548879927a89cca1b9829ff887d45cae3a0012b8eec038b982c41410eb0cffe4204a0387ae9ad2d2eb6f904feaea4325a355611cfdb7ac6c3495a4bcfa6a2c3285bf50ca4a25c77f383bdb14c2f038ba311fefcbe3d334550fb18a5f462cec0e41bf00e3ef37c78bb0086cbdc72b561eb2e285a15002dbb8b7a858d33bdfef916ce90eca18739db369eb9aa302efdba714da8bbd0baaeb55eb585585542cdfe62755b7dd303c01c44de59f83de2b9edf1e60279b16bc7ee4c277e23701b7d58fdad36e8d91c111be46581f230b4cbbe8b9ad764cd3e067d7b7c5e1082a55c86f7cbc77e049085b2749b2ead86b176e4c8d2498a331f1118c5ed72ab0fc4228c8214e0e48fd1f265ccfd3311eff1f9548d1217c02de43ebc6c896afbf6065592ce3bafbc138524c4ffa429c33265cc8ebfc69e1adf360f97ec2edbab35cdc965dfadfa522a591734e25f91a44023ceeaac091534ec097d7a6f9a8efe84829719e41c101ee103c7b8c6d7fb630da2ffdd692d13e9212539b8484ea7fbccc74ecd6b44e08852505badf79984da7ffd06e78b05b453e89bbeb44fb0e72d527ee63aee52eebf2e4049705c41ead90017d7a512146287226941b20b4a603d1f5d9e6c559d55c5f6de7e9159e121dbbabdcdae8f359f66c218fb24d20c3b56ca3b4a2639b4b54e0775f29c731a3fd33331a76c280df2bea7fb0778648bc55257c42cb1a4ae173a21e33a782943d733e570595aea49f391ced7df117548032f44d611d1fcafe7c08fcca48ef9bb719d41c2cde9eca1727feb7bcc14757316a3fb315eb0adf3b60f5d6cfe231e4dca32f1cd2a74a68e44b1c09471f135d6abf0d7d417a42323923ced88d39902998a177bda4d7ac9e5479f0ae49f5fe51818fa13dd9131d219658ed2de42587f415396aa610998f2b166a053cd272ef751e5447122c03f33800268f63503a237fd62235c65fa995ced4facfc61959a7b64f7ef4bced8cbc10222a18aaee1fcc282163cafc4bf899a7de76ac61499fa1bdf6e6599a9b6e46d202230ee0be421b38ba66b85c7e5cb73e26085f8b62b4141f8728515f12019e1738bc5b278074c56be74033511b21e97a727c8a5f9c186af9777574f52d957082122dcadefe3c376f73a33e41094ad7cd404b50e963a200b57cbf4329e59c5b5a42f8700613e30af94109d5562262792e77df91e7e75c40080f8ca071449bc999762d483c30a4eee68e89be2d138a4b64af3c0211c3540227d85801dc16d1bb669a16b243fa98ef40edb5b5fe05c50f8702434c4d2663e874aec996463c6d946fd1391096b02198e88f5e568300d6c4848b4fe7273af633cc6fbf6a5e37feea56cfc20a0b42a5c6266c805823bac41f8d4eb43c6c4673a4b6a8dd303fe922ade7af649cb21c2919390a9ee62a08131ea21840adc9cc023e2aab908ea6bf2d41e52918ed6423677933cd1729cfda6423e540aae3f043a1296b6eb9350d38e07abed7d1ea7249b1b67d17322050d01589c9787f4e5a904c5cfb25e047f3e46de5222121c2af122bd3a3b2b0f35ea0a81d3a862d77217e992cc74f678617223cad5ba21afdc58e6af17e7b4ee3a506f34069d2931ac62d47f86f1983d7204a32544ae0b738cd5ab3efb940ad752ebbb59cd28d98cd6e0441f020ab2d68cbe90fa44be7f7191c2f5748c418dde668ee87d579baed4358b5c47e03a89ddb98fd4209fda85a277460ca20cc6de67c0f35e39d3fcfc070530140f648b50dbd3236d8e5b5e63be12191cd67b9ef128440d8794dc452b5a16f250c9e378d52b1132efc4b1ec8a7a3fd04ef82154de056ee5054fb15dff8df06bdca1dc8b1c1d4175c967445105954d10f0fc94acf39b68105d188593584333312eb6fad6371cdbbbf16e88bed86600d9dac851661dd3cc64f9bac0b2b81ad2564274b5bcc040f065f3fc055f7e254f8954304140782b9a2390bb61fd82d7a99ddf96468f3ef43113b767552969d71190265b76c1358c4e16a21ff959631a19c6f5a686b7884d75aca2810decbfd9fe0520f3b322a80838a2e633e1c2a79df01786f605750b84e2b04b7204ca6022973fca4ab0c8c67caee2349a6b839aa6bebc862f2f8246fc293e0f14a375581036becf081e4fd6b0cc2f7465fe7f932890884794215838558c0ae6de81efd624c5290bdf52e95e4d5b1eaf280d76eb0ceddf438bcf1d4b83e8eec3aaacbd7ea0421ac84f08a480ae48edb7c23c3f94dc59a44b3c5712800789fa3b2b938bed137505d2b247a4c4a9bd5ceddb900cb9a502d10dbd620a7ef84fbf49081d52419e5d08ddd5a1873f6d3ea6a822400ffdad29899bfaf73ce3d8ff182b3ca8ef1c39fc34b93767b9a13401427c440edd2e5f801655e60dc4c5b4ba84e504421b758e0b4c743fd1a1b6be27702e751960b431f1d7a7fd68a9ab198a5c6dbbee137283e6d6c69eedba5345e551e4421f3dfc1c957bbf413c48f64871521789487707278c69eb71c33a6999d7e497dc3d7d022f008addc112c116637f6d29c9247de134eb860cd3e5af369ee474883e7a20c40ba02160ec19dcb717cd3f4f3f0293195242fa814042ad751c774728a797a8c483e0562a2cca698053c1b66c0310affdb6e5767ab6db583ac415119f1760bed5f405c5cfb63b2ccfd5dc9d119fc82a86f98551d92f02410fdddd450f0a661ce041fa39aaba50cda470d3080dec7345a54abe2a7630a7fac84bf95c30a0dff1225f7b1aebb41daec68ceff2b0f502e7433f395aeea75c1ba88229b44fa5c6fa2647e44db139eca1f2b7142b6c23d4879603bb5617e94de0d5353d1b17dfb960eb1c11c67d0d1e1cae94699cc9397b79150dacbbc7361261d5445f237210d2ab8120fe721072394b77df46894595b8fd56f034318e90e3cad94f1655911b9bcc0bd15c628c0248e134295f3ff69cf8ea536b4b7a6c11b4e04955f9f1d9bac2ad39d81ec929b0d29999ae5a865bcc2cffc8fb42af6e486ca12a4c83461c6a72b3c88e4f3d1a9c1f13adc6defbf0110746e39b1d01a5129f996a2af48bc52f06a32764d8d8dd984c5dc4e8bca0ffbbc7e4cd226cc278b35ed16bed6e8aca4a1c18120eef0966dd5327f252462477d43cbd1497654ddd3358d24883d9ddde40f1bc8c5610370841b1cb13e84162cc6d0818987350c22362b12c0f315dbc5dbc33c224bf8d57410f2621b9c45d6857b0bed5aae750db0dd4c6cf50bfd6d5e0c816a9d8951402a1c50ad8169fd94427b42c58399c6d72b1f213e009af4f650e5ef67d2f48c7dc3ef74a8ee453ab84118f2f0e4ff2b8130169ccac37198b337205cae506e8d70acba86aab28caa8117b1231d9c4b631fa3aeceb3c236182e25299392f1ed986106071097314a9b9bd0f30d853e8b4044c00f04b45b2923b572a6a41cb5293cc8dfdbeff56a1375a33bac7b220056a6f6a292035b17a3c3fd55897548c68ad7886ef432cef353da3da8deaea09df078569c042258dfc0763d54be89302b11a6d24f4086028b82520fb6d967b78b611a7e9661a92b1a8f12d407d2289e85a82bd0b7c742055acd2396ba8d101e91ce2e9f387e909fe6da3109e1937b1e12515f23c8f1b739d4c40a287cae3bf59e901fff2ba0de0a36a304428e9febe42a01dea2eacae9416a72ddabb98d2e69c70ea9edfc57cd81fc4217ec353caf01a1a61b925102f866b4090b6447cfd8eeff2a3a49e30fe0a4fff77fe1a225dbdb2fac338526c7438631b69ead8781b86801f530b04b1544be2c22aff4ac89b0ce4353526905e59e18f7f01c221e42354a5269e0e28afa29f38bcab3923fe8d64fbf81433991b0bb9df6fc4c28ba175871d87bb5ce6cf5bf4572bb873c044f0aeb2981e34a005df55d354db0353f6433f76adde2c124793a1da43aca0e62a744992ed8efa8571a26857aa65a21cfc3507471ab75525cedb559c430b5d03a5c4e923f7fbec50d0eb10fc40b3d7986245f4c6888a53df7fe7fdcc11261e70d8cca04baff938f8446bd9048baba31085f20746c5f0e00d816dca934804ea2877cca51b5c0e31dfeefb9e91e41189d67412a09af16b4cb709e6fee71b2766a71c8397578516b656633bb620dfc8bc15de4ea5f75f6845ea44805442125adef9377e98b5d8e73f3a0bfbd330467daf10d9f7a95cd6fd4827fa1b062898fa454437bf185b9e0d98c9d10a5db80364bca446205739b23a1e7e860647ed30e2b72524da94a5f70dcbcd67d8df08f0d57583011d5487669c5a45905125186590322dbe481e820a6a6c29c136fa4301ade06baddca45f0d5ce913b5b763d293da4afaa450b17ff4933e4478fbba9ad9e6e5eafe9fdeb82b7d65bc92f6690d03a49923810558b5e0f5bf47e7d000a5e132217c174445565d57d29f02e71d7205b8ec10330fea51d972fc5c81b1b36775816082f979b5b1fe3601c9c8e8fa0c3504bfa30e3603d5a0f3a7cbd27d744b27cdbf318acbed70697519605453df106123e1a6148c9146154986e288d8a70b6fed1667cc1e0b199067c704a6d41ba751b53102ebca01b3ce90226847808646c95f3eb231b6af0b0f329bd997db5a4d3ff18edf0203e351fcfa8c8ae2be6953472bbb3f40bb6ab3f8f2128d11a3bba133f0204e2e0df189cc8d2cb8af81d0941a37c2165112ed452008930bcc607fa6fe3ad1def902d89c7330e6042f6f86c3a75665ec603b6e392b417a0d907d42e6534db72adbad4266c6601d7b8bf8d9cde807088f76b07c06840d0806eb89aa545292284bf050e732e547ed54417b3ec7e7a7c5e8454a56f5092ea8cb27e74e0672c2951647e29dadbdea86d2a4d9e53ab01c9d21e902fc9c6ff4c317b3c0398561364e880e2b079d79a27d6dcc3d586abc043477981bd36746f5570840536bef104a158e2461296717d247b6004565ffb8eb9bb5258c65032f0b472c4f3667a17e3ff65b45c91e2411b5990f054e0c2a05fc175d2db7fb32ca32e4c11b46f08bae1614e2add96133ab383c1e78f4e3f21ed3010a35c76ad88714b526d3a5ba799e6f7bf9d5696e7b42c8c264162a28831baaef180f40489ad681af6c0a674cc7b65e8b8ab704d15546f70ed1e67f7643bbc8d0b8482024b8f320b5bdccb1014f5e1a34c6c795428660f026d93dd5dcabf2330dc62894bfe48fde6b931ba55dc2a222a27a3906ba5b98476321b6d27217fd58ad93b616aac91b139729d91de6f8ef49402e2741b8dd821f4cbaf7c4662ac782b255dc438164e54c417044e9bf5e13a8247777726dacea4341d8ba03bad17070dd0f07da13179d29ac00aefa41aaf4688e99eb395205f6d6d71999b3718f7f2d618117334977a92b15ed52e45e7d5df7a22be9cf0e008c41257d99b2426068c48de100b8e3019b624ce2f2849c35b74fe5ecc4478b2968a97cfcb759fc73c8cd21bda084646dadee926a4f606768749a89e11be2a23985631c922a73ba93f3619dcc4621c8da57697420859210aa43ec06feb649b9f1362fe9553f9d552b77203085d9a4da629f03fbf339bd8ccae6c411f6d8f131232575d28af2a2690529080f02a5a74fe59d1255039f09b8d565a4838930f88d6129389f2312a2ebcf0fe7d8b6dea3484cea9a1628349218b8ccefdea2b6c37676acc2a082fb73b19705e98079c1de7776cb830e79c0081a2da4059714f19587d10223fc50ea8434f1c7919a77acd7c5b20ac9fe8ad9d348e2c5bdb57fac1ec0c31a1688e22aab4f1a81826f3a47bd364505d35975c105a152aa8e42b2422a100ad3d3184d286884552143051b79294aba34bfc5cc332f0b6aa3bf186776ceb8861336ed97b85b9a7d548bf7b7a907256c7c6a2427d92aff68ba18544b95a75564029387fd2569943f8d54e64cc621123105eb56bcfaea06e38af31a05ef38302d2b6178121d52309865c5ec1147159c07b4d4e1ece24f6a1f63a492c617870c96dcabf43b73055d749e465cdbb965b18091eee65bd423f249d934ae904c2129b93d116353fe014e1afbcab5f74766a806451855bc28494653b9a863b9707c2a0fce3eb4b55c4220078651a94d3b9c6e92f4995dd56ec17d144b07bfb1b955b557d14774e64f400e0075781381b33d73a60f6b96cddbda0962b2a609e6bca56a109847bc13798be711d3779d5a8c6541bd247fe3b7477a1378cdafece044db3f31810bc95f8fb4ae7a8815303faac03651a13924308c06c8e86506b7d186a717a1bda1d7cdea2b8b682d37f954f488a8e0d65f868a81b1af4b8f7331ba84414a7ada82e81e06e76ddfa0aca0ca9a53a5de0bcdcbb77284bab522ffb6f803e95f116ac1670c50acd36d80f170e8e7e05163f050dc89dd93bf9160a545174472376e1fcbb945e9294f796a09ca78452683b8bd39049d118acc24ef0dc18ef88899dd7c27a3585e914e6f6bc8bb1950c061c722134243cf151785bc19dada45b90d97cb83bc60885a908d0c13be9e54f1929fe1f76fb9886808caf0442aca4539a42078bfee82418d611f4c432fcbc5242c35a396c17c1b93b98b277a9c8ef0143643e120c0de4b7c6beb0a582789b81a9d3a0b8f96a332c89764283d84ec5e6b8350683a2b4eebcb214a7ad430ff9ebcfc1d850717a8d38b8e35e67fea4b8f14938cc3eeacbee30616c09e848ebae3cefb8f2a904f2b3d1252019ec914278942d9b914f95574031cf21f412aa7500f3955db7b9ef9403750058d75e53d16803d4463f7884df1e361d34ce646e20b3427a45cd307283f1ff00cca6c841fb9b06543bf1a254b21ff421331facb2f08a484904ea25e049597c8b0a2140e8ed2906d574e73165ec5591c89b5dc08e5943ff7399f76b1df90947a9479b1aab40abf8ebadfa1455b6dcac672f495a64b6230fd3fe948ce6c16cb87e11ac7affc9047ef33fa64585c1dce3bab4fecc0c7d81b5ea73aed3ef63fafc880b6e2ba09d0df6d626e817075d5f330d91cec4bcf4829c20192bc0ef7f728f52dd3e074bafda4f8cd8465311a9124baad61bd73ca76a0d0d1b80cb7a5e429067ed4707b64d38613008c8af3ffcedfeb8cda26def8bef7cf947af23939d18adbf56715f90c2df716eb037d536cd36bc2b832c57f4a319f392e1ab37e02dfb392bd52b02801665c8ea28edfcb153f267dcfbd671d4eaa0d56335f7ce5eccda6b9f74621a1b322f1f3a60b00196a65327b36419394e776b2e1c1479f5f902c5918adfa5b112bfaf786eeea1abae7c8c9d3e3fe737c23092143376808b5e26cf896fb5202572533facacaac10ec26cab819f74cd372c95d50a9b6560da69c1b22d5c15759b7ab1d8118e672bea9af7e8a30458ccaa1586ed2720d5465e139fe3dfc0bc95107061471cdf28a42aa8149848a147a1710407021d13e611b36ad3624de35c4dc5a02ba8ae724b2d8cd85f15094e1893c98052cee135d0c1c11a73297775fb517abbb471a8b100cb51d8815acac16703b56f8aadae334601a84fc306efa08aeb2afbad94632b5f209603cf5e5ca634bd74ed2e525580ddd2f2ee65241788f5e867b44d7ecd71f5858d269ffda98d93860d8f1c26c47df1199f95991b54808bc26c0ab67b40745b8dfed41838e2c5594413d2c6022abe3c1f132e9f7c8c69e50729325d37e7502519d53d7e1bf0bc8f62d216fc9c88b197cfa1571ce8368cc1b4b625559cab7e8397c6c7bf537bc8b9d604f4bdb04cab86d349e4a33f92eaa07378eac07ed8d51aea9c15ef4c4b0e0a16f9c794701a1b74b58beb15cc165a4dc1a13a0886f55cba2b977447b61c01e1295a4221e19321201f1df0d25c9e14bc4433678e48a5081de7c81f79a6370843bf0d6e3e5192c1ddc0bad14a11ada8006e4f6549da3a877a991351610eb0c5bb6228d266baa27eab2b9bf4455fc54aed3c74c12590835e498c11efdc63dde52a62d8f3a3c978152018182b3e4cbd00fff317d06f8e9475b4c7506dcc5547d8ace2b71024aa0e2220936d2bd05163b8f15bc429378fec52ac39d167200758884056dc14d3329b1d47f477a217eabb651fa97e05451cd6e861996648ab439c9aa6fa032e9083b8c0f87890c88c50dd5a6e6be8c4a4361f3b4c3181c570407dd1d2d835a87dd4b24f55a649c3e478bc002f30894d06411dc4dd8277f796976b8b2884ed371013225bbd95955827741331777da30b1b3370fb4d0bb914d97660f7e06759ba54b5697a4f7cfb67035867f39e53306eb55b31ba660769ce6993b2f44a7173576766ed20992d04e6b4aff20c138102537a142ceeac3804fb0a4eaddeddb6bcc69007c5531f0ba6851854d8d836a51e8d644c7b79e071f19986090d2404b562a17e1ec1da775c171373bcf5d2c3d7dd64a587d66e42b6963d892df898766648f37c8d10ca249e28368c388f4e70a80b2992a0a390a2d51a17a0c1774fec2d399a2b0a99c802012fff6300c4275d1305b9a9d0f8144df64da9016f16369e813dafc7cff55c5a60602141fcaa62d9fc0b93df6524d8692be3c7ded5354b63014686e98ef2b5947eda93e0cd232d3fdea943d3bc92a6f2835c55aca33dcd087b7260bc68def6ce96ef5d536b61006a595219382d8b8365eb92eab44e677109971bc4dfd077a56ff1f27e9b80edffb5ecac7bde5dc2a74c30a24b9cd1b0d4356ec424350e364d0dc929d657a8626a22111d4a0f360fe33be72a1f2c4f5c1b9843145ddff70d583a9b433cab33b10d93531aab7bb8a53c738aae79222481b135eca9441f47068299deabdc9c4f77e5d4ea286e8300eb5956368d0499691dbab1499baef30bb6c4a9bb0159635dc1774203fda828bf804e8f526ffb55abd8700915232964b7f219a7bb221efa6428089263ab753eb421a1952bc780289a85ebb9b510dec67a826ccce1cdfbb29a3a55f4e1068ca2c077544efac686d77c67c927430c3ac78c7c8b1f834be9a689fdab38f1401797dba32a284f5c5f9ed13d34d8a001cfeeeb7de12aaeae7706004f96a293e52106fd945428e7e98915070b1584a323bd8f00b9803ce189c9c0af032752d979df57a5098458c7de034db79f43d27bcb720078b05e5f364f2d789343fb6fc8b2cab810b1745fa36aaccf5d27fc7f06ab821268d83e697870632814319533373f24584b35b2ba9dd9b52a4a2e559c90b1b87549530a64fdbba5587242535fd0d600fa6e8497369a5587627182c62da4a47bc6ea99f7aaa765e3b74b7d9c48e779c8b13a2535d03ef8ac4bf3fc9e6eda5628034e7e453fbd6153b8b8e9f693c5dfa37f6a0a2542e6f86ebd2ae926822d7b31963c8879557dfa2a869ba3c5dc2dfcb60bc0a0c9816c2c4c58bdc09c2d76a007e68c38fd8b88709e5c49341630e333e13413c3e60c0d768d4c98bcb297e819ceb0f8b229d3037ac95639344bf42ee7f77922a6ac039837356dfd7c0ba3c5393548369bd71b4824326eaeb80a9c249504a08bfc164af220047cdf054d928a8d929a2fb621665122062dbd5cdde82b8289e0d510246e0bc30d34d8e96703f75c75328f99437be474315d8cb55066badbc0ee852c8ef28e1de7f5b58dda97742db5f708c6be3279d700ba147f1519485020336c260d825920870739fdb288f22b980fb7bcbf147b1a95fcc3d8d1899749d928eea8d47cccc1fbbdd5729a3f2f73d2ae352eb3e043405bcb7fa12b2a80d6a3f0178a18cbc5794fd65f0caddaff57616dfed94884a48b27b181c55200d9ecdfbb082dcd2952089938e134eecb40c2f95cb7808fc7da09282787edb1939e75bc8e284c01239a895246be025c8e0168ae83f5adc62f4f81ddbf6ba9b5fce3ddd111eb61c42777a8c303abe291aa9ef383ef1d6c26c4f8698375cc76a7e078ac948f2e84de084fdb380d38d2e1810ce8118999554c06f8d583bd37003b407dd7b41a3b14f10a5ae7c2e8fdd087cc322ddc399fe38cc542bc957b38b0fda34a3ee5c6a97d25629d26a75de211fe1cc4ca63880caa8f85f3bd489c39cf30eac81784e4456a775dee3045df2a1875623a4fbf227cf90cd237721a6dff29d26a16306e4033cc644e35cba3cc4e45cfd0cefc9c8d8a0f35bf31a8319b54fb549554c7089b9334a9867d51d71aae1f342d5602ef2d394e6c8a8aa6c15121d8c8b3abe3416367dcc276c048c65311ad70df0ecf0cf817a1a27e1dc50fedea83de8a8bb7746e23be2f335c9cda9a7f08d72b9debc35d49e9ec4c9815040c38c11375dd7f2897b20479343b86b51c317e0e90f9465d8c425857e1831931714284c60f68036134304558e53d2d42813a42a3017ab21feab6132f3a2f8c5670a1076dab6136cd6836b52d7ee54639758085438831dcd8157ccae47784a35364babff9299e4eaa389931199b4901f12185a0d228473d4a147d88e55bd11f8ed2957b7f2f3efb3e444f0aec9bef1f68cffbdac04698cc277706f2ffdd263586b84c645f1721ee3008b398918fdfb9b06b98078447c0edd7c058524825a1124e9af37fa9cb77302aded60eca394c866397c3bc18f8277d9277921abd06b61b1445f43cd7f0b5b2c023832f6d67f86d9b6ff9985edee1ec2572486b43d3be834d5b60d208b1187ca7cc8b17133f55314ee640268d5337d7dcdf1742cb543d63ae3c09e312ac05b5d585d9437bf16bd560ef739f12c878178757e1f675a8671becae2bf03f87de4bc40b4b7a3aa6e2f28f015332b10b9fe426ebd45d7a26e769bb05eb2866bb34c56b079a5bd23352bcb08c379b400512b0d8438ee5371171ccbf2921c1e150fffb5885286f933f4393088ba21c47b15d1a35de27dbd02e58859aa080f87d0a857e92d0f52c549c04cd9368c94a8024e184773cb3431d854c2855e93ac9f24d5e45d11c2acfb03755e7f279b368e2e31b3653a7d7e2e102ac67f363c195272e2896bec544f669f2d25ae8638ac30da6ed52404b32b8ee9f0f2909ef6b4e2db3a6ea88b8a6f2f2c025959efb7b94005eb307aae01af8a19ee6178270be09d93837793b43bcdab98b9c04b6bfea7ac2217c11aeec277bc199b67ac24b7352299e7fec85aa151029d14441b56bb6031cdc72a1a90ef537c6d2bce7ffc7c366a88f8bc87cd8ef4e91b5ad9d85ed84f9b85f029252ad5ff13d564d842ef310feaba90974e40889e7cb753eb44ef96bc4c25b021fe50e9957a9c3cc9904aa920fc8a8e82a826b945559b57591fa1a26c380afe65d930f9bd9a3d93f57324d28c2741e728cbd106dccdf66863e49db8a0df1398ba8594fa5102b8157e4b987f4339820df5a7aa2b1c47ed0211437ee3d81dcbffa500dc4b743d49028581234c7e9db2e951d5bf3e3c448ce58bf94a2f7ef95eda07daae00bef1794d27330927b2460778fdee580efe431ee244aae452cd60100b6c9f0cd5e79e170a7b149abfcc26b77d33c35311c95e3ba0752eabce3d1310a8aa45ecd1659e4e855919d153ebeb434581a6d352508771b030acd3fee51badf6767a7931bbba2cf195bd98fd096a6be14d7172cf1dbe3a82bae73a29223c623c090cbc5fffe8f3291", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000), 0x2480, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf02d}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x1004) 8.096757227s ago: executing program 2 (id=2061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x1002040, 0x0) 7.77013275s ago: executing program 4 (id=2062): bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_setup(0x6e8, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 7.014445351s ago: executing program 2 (id=2063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x0) 5.737326951s ago: executing program 2 (id=2064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.736392526s ago: executing program 4 (id=2074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 4.471538583s ago: executing program 2 (id=2065): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x2c000010) syz_open_dev$sg(0x0, 0x0, 0x8002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79ad, 0x80, 0x3, 0x26c, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000400)=""/210, 0xd2, 0x10, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) 4.277907228s ago: executing program 8 (id=2066): r0 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$eJzsmb9rFEEUx78zu7e3iaJYaGFzFgEjmL3dPZU0IrGxigiJiOVh1pC4ycndIbmAkPwB/gGCf4dFKgs7OwsrCxWEFF5pIUJGZnfmdm7X9e5csPF9ILPf+fXmvdnZN5ADQRD/LV8+f//04vby+lUAp7GAumo/tvQIG9wY//GlVVPy7e6Z50d5ewyAEFndnrC+A+DNigUcpGaFyGb/EMCCsrkOnmjJfXBcUfoBGDztq8hmR2B4qJq3Dd2ZUyKO2KNOvPF4K458WQSyCGXRAsSY/8NDhg0ArlqCGf73BvtP2jHQTUUcaVETep1CV0645V2pwHb5/iX+rXDcNLaAA2d1v6eevrF/ATgCpVtgWFN6GXV4ntdQ1Sgw4r9oZ/at9LUZ8U8OMhXuLIOri3NLVe3cmjHA34oTUeg6QPUAnb96BbMK+flNHiz9mH0J3ijOcibZcStvHcu3yA961HJhePSuOOvrWMuH1bIlGP7pCZ9KJIkLQKHr/Xwcr2YtOq91e4PzY3YupftzN3/Y9AksPRI4vqOGXDbyk23cCs3+ztNmb7C/tLXT3ow2o90wbN3wr/n+9bAp7x2/mWToP+Q/N8lP84b9WslYhznYa/f73WAP6HeDUT1MSyPjrr3ufBul+eEhx+JPIfT1koStLkqWW4OpP/5KPqVatEqdJwiCIAiCIAiCIAiCIAiCmJI6cApogEH9r/JE/1olCtjhPTybA34FAAD//5X3XDw=") syz_open_dev$usbfs(0x0, 0xb, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20) fadvise64(r2, 0x54056, 0x0, 0x3) 4.258336041s ago: executing program 3 (id=2067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.148976017s ago: executing program 4 (id=2068): socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000400)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@grpjquota}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x610) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 3.995889619s ago: executing program 8 (id=2069): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x40005) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xeeee8000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000780)=0x1) timer_settime(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9"], 0x17) 2.847683325s ago: executing program 3 (id=2070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 2.508871077s ago: executing program 8 (id=2071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) preadv2(r5, &(0x7f00000003c0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x7, 0x4, 0x0) 1.29653076s ago: executing program 3 (id=2072): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x28) 6.947417ms ago: executing program 8 (id=2073): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x200000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x8000000010, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) 0s ago: executing program 4 (id=2084): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r4], 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ] bridge_slave_0: left allmulticast mode [ 288.086777][ T144] bridge_slave_0: left promiscuous mode [ 288.093102][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.132529][ T7771] tipc: Failed to remove unknown binding: 66,1,1/0:97830919/97830921 [ 288.145863][ T7771] tipc: Failed to remove unknown binding: 66,1,1/0:97830919/97830921 [ 288.586806][ T30] audit: type=1326 audit(1763118791.857:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.2.487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f439798f6c9 code=0x0 [ 289.198942][ T1151] Bluetooth: hci3: Frame reassembly failed (-84) [ 289.530037][ T30] audit: type=1326 audit(1763118792.857:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.3.491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x0 [ 289.707184][ T5845] Bluetooth: hci6: command tx timeout [ 289.973567][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.996769][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.016824][ T7710] bridge_slave_0: entered allmulticast mode [ 290.027071][ T7710] bridge_slave_0: entered promiscuous mode [ 290.077343][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.111263][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.132336][ T7710] bridge_slave_1: entered allmulticast mode [ 290.152331][ T7710] bridge_slave_1: entered promiscuous mode [ 290.418648][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.667850][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.722910][ T144] hsr_slave_0: left promiscuous mode [ 290.733549][ T144] hsr_slave_1: left promiscuous mode [ 290.750457][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.780533][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.806703][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.836209][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.038807][ T144] veth1_macvtap: left promiscuous mode [ 291.082246][ T144] veth0_macvtap: left promiscuous mode [ 291.118046][ T144] veth1_vlan: left promiscuous mode [ 291.160799][ T144] veth0_vlan: left promiscuous mode [ 291.271487][ T5845] Bluetooth: hci3: command 0x1003 tx timeout [ 291.284694][ T5843] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 294.086331][ T7846] fuse: Bad value for 'fd' [ 294.160201][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.180054][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.191310][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.203245][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.211441][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.191458][ T144] team0 (unregistering): Port device team_slave_1 removed [ 296.262987][ T5845] Bluetooth: hci3: command tx timeout [ 296.796210][ T7871] overlayfs: failed to verify origin (82/file1, ino=479, err=-116) [ 296.816114][ T144] team0 (unregistering): Port device team_slave_0 removed [ 296.920858][ T7871] overlayfs: failed to look up (file2) for ino (-116) [ 297.606898][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.701922][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.894058][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.345422][ T5845] Bluetooth: hci3: command tx timeout [ 300.458307][ T5845] Bluetooth: hci3: command tx timeout [ 300.656177][ T7710] team0: Port device team_slave_0 added [ 300.772179][ T7710] team0: Port device team_slave_1 added [ 300.996859][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.022063][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.144185][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.323614][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.334340][ T7913] netlink: 'syz.0.526': attribute type 2 has an invalid length. [ 301.390719][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.528978][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.887377][ T7710] hsr_slave_0: entered promiscuous mode [ 301.917131][ T7710] hsr_slave_1: entered promiscuous mode [ 301.962695][ T7710] debugfs: 'hsr0' already exists in 'hsr' [ 301.997905][ T7710] Cannot create hsr debugfs directory [ 302.504708][ T5845] Bluetooth: hci3: command tx timeout [ 306.356733][ T7710] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 306.438279][ T7710] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 306.506947][ T7844] chnl_net:caif_netlink_parms(): no params data found [ 306.706808][ T7710] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 306.763971][ T7710] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 308.141003][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.153090][ T7970] binder: 7969:7970 ioctl c0306201 200000000080 returned -14 [ 308.160992][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.169695][ T7844] bridge_slave_0: entered allmulticast mode [ 308.190534][ T7844] bridge_slave_0: entered promiscuous mode [ 308.236452][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.256926][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.272559][ T7844] bridge_slave_1: entered allmulticast mode [ 308.316135][ T7844] bridge_slave_1: entered promiscuous mode [ 309.113897][ T7844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.438913][ T7844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.888800][ T7844] team0: Port device team_slave_0 added [ 309.904753][ T7844] team0: Port device team_slave_1 added [ 310.072049][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.481742][ T7844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.554762][ T7844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.721795][ T7844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.955826][ T7844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.984703][ T7844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.130962][ T7844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.503422][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.626191][ T7844] hsr_slave_0: entered promiscuous mode [ 311.675379][ T7844] hsr_slave_1: entered promiscuous mode [ 311.708093][ T7844] debugfs: 'hsr0' already exists in 'hsr' [ 311.772067][ T7844] Cannot create hsr debugfs directory [ 311.826602][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.834027][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.736147][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.743328][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.405009][ T8017] netlink: 32 bytes leftover after parsing attributes in process `syz.0.545'. [ 313.481365][ T8020] netlink: 32 bytes leftover after parsing attributes in process `syz.0.545'. [ 314.378538][ T7710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.737038][ T7844] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 314.842546][ T7844] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 314.894117][ T7844] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 314.975513][ T7844] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 315.688093][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.172177][ T7844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.391246][ T7844] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.545894][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.553270][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.752557][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.760041][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.213808][ T7710] veth0_vlan: entered promiscuous mode [ 318.340050][ T7710] veth1_vlan: entered promiscuous mode [ 318.486123][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 318.858477][ T7710] veth0_macvtap: entered promiscuous mode [ 318.910924][ T7710] veth1_macvtap: entered promiscuous mode [ 319.102108][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.134195][ T7844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.263771][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.344808][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.354127][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.398087][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.450193][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.488885][ T8095] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.567'. [ 320.077486][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.100703][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.434160][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.455861][ T30] audit: type=1326 audit(1763118823.767:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b6558f6c9 code=0x0 [ 320.474623][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.749687][ T7844] veth0_vlan: entered promiscuous mode [ 322.924127][ T7844] veth1_vlan: entered promiscuous mode [ 323.002608][ T7844] veth0_macvtap: entered promiscuous mode [ 323.077515][ T7844] veth1_macvtap: entered promiscuous mode [ 323.245028][ T7844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.441707][ T7844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.608482][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.753647][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.838070][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.849929][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.605433][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.627102][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.870061][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.905277][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.997859][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.571'. [ 326.365662][ T8165] hsr_slave_1 (unregistering): left promiscuous mode [ 329.047585][ T5831] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 329.229816][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.300095][ T5831] usb 8-1: Using ep0 maxpacket: 8 [ 329.368279][ T5831] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 329.414395][ T5831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.454104][ T5831] usb 8-1: Product: syz [ 329.459270][ T5831] usb 8-1: Manufacturer: syz [ 329.463890][ T5831] usb 8-1: SerialNumber: syz [ 329.710593][ T5831] usb 8-1: config 0 descriptor?? [ 330.664263][ T5831] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 331.414975][ T8213] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.584'. [ 332.413206][ T30] audit: type=1326 audit(1763118835.737:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 332.484266][ T5831] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 332.513383][ T30] audit: type=1326 audit(1763118835.767:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 332.566641][ T30] audit: type=1326 audit(1763118835.777:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 332.621884][ T5831] usb 8-1: USB disconnect, device number 2 [ 332.686153][ T30] audit: type=1326 audit(1763118835.777:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 332.782164][ T30] audit: type=1326 audit(1763118835.777:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 332.834789][ T30] audit: type=1326 audit(1763118835.777:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 332.944350][ T30] audit: type=1326 audit(1763118835.777:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 333.014835][ T30] audit: type=1326 audit(1763118835.777:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 333.088164][ T30] audit: type=1326 audit(1763118835.787:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 333.254916][ T30] audit: type=1326 audit(1763118835.787:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.5.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 333.754746][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 333.985224][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 334.044353][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.081510][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.095222][ T43] usb 6-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 334.104437][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.123723][ T43] usb 6-1: config 0 descriptor?? [ 334.583616][ T43] holtek_mouse 0003:04D9:A081.0002: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.5-1/input0 [ 334.764928][ T43] usb 6-1: USB disconnect, device number 2 [ 336.007446][ T8259] fido_id[8259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 336.990901][ T8281] veth1_to_bond: entered allmulticast mode [ 337.145634][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.601'. [ 338.862389][ T8277] veth1_to_bond: left allmulticast mode [ 342.282823][ T8330] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.611'. [ 343.739216][ T8336] loop7: detected capacity change from 0 to 2048 [ 343.843471][ T8336] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 343.960531][ T8336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.312387][ T7710] UDF-fs: error (device loop7): udf_read_inode: (ino 1440) failed !bh [ 344.383380][ T7710] UDF-fs: error (device loop7): udf_read_inode: (ino 1440) failed !bh [ 344.468559][ T8348] syz_tun: entered allmulticast mode [ 344.521272][ T8345] syz_tun: left allmulticast mode [ 345.618026][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.194066][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.609811][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.208942][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.704941][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.716591][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.725501][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.737505][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.746424][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.851190][ T12] bridge_slave_1: left allmulticast mode [ 348.869816][ T12] bridge_slave_1: left promiscuous mode [ 348.881182][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.898915][ T12] bridge_slave_0: left allmulticast mode [ 348.906952][ T12] bridge_slave_0: left promiscuous mode [ 348.912948][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.367036][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.380919][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.392396][ T12] bond0 (unregistering): Released all slaves [ 349.826933][ T12] hsr_slave_0: left promiscuous mode [ 349.844725][ T12] hsr_slave_1: left promiscuous mode [ 349.851552][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.875603][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.887002][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.894467][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.938125][ T12] veth1_macvtap: left promiscuous mode [ 349.944441][ T12] veth0_macvtap: left promiscuous mode [ 349.951544][ T12] veth1_vlan: left promiscuous mode [ 349.957691][ T12] veth0_vlan: left promiscuous mode [ 350.573221][ T12] team0 (unregistering): Port device team_slave_1 removed [ 350.628649][ T12] team0 (unregistering): Port device team_slave_0 removed [ 350.830097][ T5843] Bluetooth: hci4: command tx timeout [ 351.049446][ T8402] chnl_net:caif_netlink_parms(): no params data found [ 351.180873][ T8402] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.188294][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.196533][ T8402] bridge_slave_0: entered allmulticast mode [ 351.206614][ T8402] bridge_slave_0: entered promiscuous mode [ 351.228588][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.236057][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.243566][ T8402] bridge_slave_1: entered allmulticast mode [ 351.252936][ T8402] bridge_slave_1: entered promiscuous mode [ 351.298154][ T8402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.338581][ T8402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.415711][ T8402] team0: Port device team_slave_0 added [ 351.428227][ T8402] team0: Port device team_slave_1 added [ 351.497051][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.504314][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.535172][ T8402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.550230][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.561437][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.589570][ T8402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.666385][ T8402] hsr_slave_0: entered promiscuous mode [ 351.673629][ T8402] hsr_slave_1: entered promiscuous mode [ 351.681504][ T8402] debugfs: 'hsr0' already exists in 'hsr' [ 351.687793][ T8402] Cannot create hsr debugfs directory [ 351.971253][ T8402] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 351.984407][ T8402] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 352.005650][ T8402] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 352.019048][ T8402] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 352.079651][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.087113][ T8402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.094907][ T8402] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.102164][ T8402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.122780][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.133262][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.231362][ T8402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.267389][ T8402] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.286717][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.294001][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.311612][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.319036][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.683906][ T8402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.897535][ T5843] Bluetooth: hci4: command tx timeout [ 353.134017][ T8402] veth0_vlan: entered promiscuous mode [ 353.153327][ T8402] veth1_vlan: entered promiscuous mode [ 353.197213][ T8402] veth0_macvtap: entered promiscuous mode [ 353.211925][ T8402] veth1_macvtap: entered promiscuous mode [ 353.247270][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.274190][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.290125][ T3509] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.315414][ T3509] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.324318][ T3509] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.379165][ T3509] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.489677][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.512844][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.561005][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.573139][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.427129][ T8497] Driver unsupported XDP return value 0 on prog (id 115) dev N/A, expect packet loss! [ 354.977155][ T5843] Bluetooth: hci4: command tx timeout [ 357.058677][ T5843] Bluetooth: hci4: command tx timeout [ 358.298842][ T8543] syz_tun: entered allmulticast mode [ 358.341938][ T8542] syz_tun: left allmulticast mode [ 362.336033][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880559bd800: rx timeout, send abort [ 362.836189][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880559bc800: rx timeout, send abort [ 362.845948][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880559bd800: abort rx timeout. Force session deactivation [ 363.344620][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880559bc800: abort rx timeout. Force session deactivation [ 369.030661][ T5919] IPVS: starting estimator thread 0... [ 369.135890][ T8628] IPVS: using max 28 ests per chain, 67200 per kthread [ 370.076233][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.084067][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.268107][ T8634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.679532][ T8634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.712620][ T8666] overlayfs: upper fs does not support file handles, falling back to index=off. [ 373.252437][ T8661] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 373.754651][ T3020] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.833950][ T3020] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.914955][ T3020] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.944789][ T3020] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.794750][ T5831] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 377.362624][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 377.407271][ T5831] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 377.455693][ T5831] usb 1-1: config 0 has no interface number 0 [ 377.487842][ T5831] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 377.513769][ T5831] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 377.550135][ T5831] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 377.614585][ T5831] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 377.690831][ T5831] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 377.755192][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.808282][ T5831] usb 1-1: config 0 descriptor?? [ 377.925138][ T5831] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 378.138926][ T5831] usb 1-1: USB disconnect, device number 6 [ 378.191863][ T5831] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 379.575424][ T8770] wg2: left promiscuous mode [ 379.589670][ T8770] wg2: left allmulticast mode [ 379.678320][ T8770] vlan2: left promiscuous mode [ 379.685861][ T8770] vlan2: left allmulticast mode [ 379.744906][ T8770] hsr_slave_1: left allmulticast mode [ 387.205904][ T8850] syzkaller1: entered promiscuous mode [ 387.211708][ T8850] syzkaller1: entered allmulticast mode [ 390.255229][ T8905] loop5: detected capacity change from 0 to 2048 [ 390.339003][ T8905] loop5: p1 < > p4 [ 390.376072][ T8905] loop5: p4 size 8388608 extends beyond EOD, truncated [ 390.662986][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.999411][ T8811] udevd[8811]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 391.037178][ T8911] udevd[8911]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 397.515826][ T8965] syzkaller1: entered promiscuous mode [ 397.550285][ T8965] syzkaller1: entered allmulticast mode [ 398.210010][ T8981] Set syz0 is full, maxelem 0 reached [ 398.220451][ T8981] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 406.168851][ T9064] overlayfs: failed to clone upperpath [ 406.766595][ T9070] bridge0: entered allmulticast mode [ 406.825497][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'. [ 406.835149][ T9070] bridge_slave_1: left allmulticast mode [ 406.840821][ T9070] bridge_slave_1: left promiscuous mode [ 406.915983][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.982227][ T9070] bridge_slave_0: left allmulticast mode [ 407.003035][ T9070] bridge_slave_0: left promiscuous mode [ 407.292000][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.694777][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 407.876675][ T9070] bridge0 (unregistering): left allmulticast mode [ 411.873446][ T5843] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 411.884139][ T5843] Bluetooth: hci3: Injecting HCI hardware error event [ 411.894665][ T5843] Bluetooth: hci3: hardware error 0x00 [ 414.072837][ T43] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 414.204903][ T5843] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 414.639699][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.744958][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.794743][ T43] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 415.915546][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.953961][ T43] usb 10-1: config 0 descriptor?? [ 416.154774][ T9153] netlink: 'syz.2.785': attribute type 1 has an invalid length. [ 416.691726][ T43] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 417.466241][ T43] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 417.731311][ T9153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.805128][ T43] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 417.834927][ T9157] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 417.888234][ T9157] bond2: entered allmulticast mode [ 418.105239][ T9139] cp2112 0003:10C4:EA90.0003: Error starting transaction: -38 [ 418.153316][ T43] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 418.208006][ T43] usb 10-1: USB disconnect, device number 2 [ 419.504170][ T9188] tipc: Started in network mode [ 419.510098][ T9188] tipc: Node identity 06569f0c24a4, cluster identity 4711 [ 419.882233][ T9188] tipc: Enabled bearer , priority 0 [ 420.181938][ T9182] tipc: Disabling bearer [ 420.431594][ T9197] netlink: 'syz.3.797': attribute type 1 has an invalid length. [ 420.692779][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 421.301288][ T9198] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 421.554681][ T9198] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 421.737602][ T9198] bond2: (slave xfrm1): making interface the new active one [ 421.756945][ T9198] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 423.112370][ T9201] bond2 (unregistering): (slave xfrm1): Releasing backup interface [ 423.216549][ T9201] bond2 (unregistering): Released all slaves [ 429.537599][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 429.664344][ T5919] IPVS: starting estimator thread 0... [ 429.680891][ T9263] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 429.869088][ T9272] IPVS: using max 28 ests per chain, 67200 per kthread [ 429.905972][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.916406][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.936811][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 429.958413][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 429.968935][ T9] usb 1-1: SerialNumber: syz [ 430.340732][ T9] usb 1-1: 0:2 : does not exist [ 430.377337][ T9] usb 1-1: unit 255 not found! [ 430.411337][ T9] usb 1-1: 5:0: cannot get min/max values for control 9 (id 5) [ 430.425389][ T9] usb 1-1: 5:0: cannot get min/max values for control 10 (id 5) [ 430.514599][ T9] usb 1-1: USB disconnect, device number 7 [ 430.693168][ T8911] udevd[8911]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.934680][ T9287] netlink: 'syz.3.821': attribute type 2 has an invalid length. [ 430.946455][ T9287] netlink: 124 bytes leftover after parsing attributes in process `syz.3.821'. [ 431.716410][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 431.716433][ T30] audit: type=1326 audit(6054521234.046:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.8.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8258f6c9 code=0x7fc00000 [ 435.281333][ T30] audit: type=1326 audit(6054521237.608:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.5.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7fc00000 [ 440.023262][ T9355] syz_tun: entered allmulticast mode [ 440.202413][ T9355] syz_tun: left allmulticast mode [ 448.387540][ T9396] netlink: 48 bytes leftover after parsing attributes in process `syz.2.849'. [ 449.992695][ T9404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.851'. [ 450.089064][ T9405] loop8: detected capacity change from 0 to 512 [ 450.374437][ T9405] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 451.335657][ T9405] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 451.392058][ T9405] EXT4-fs (loop8): 1 truncate cleaned up [ 451.496975][ T9405] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.613776][ T30] audit: type=1326 audit(6054521253.886:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.5.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 451.804254][ T9405] Bluetooth: MGMT ver 1.23 [ 452.137315][ T30] audit: type=1326 audit(6054521253.886:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.5.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 452.144004][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 452.189357][ T30] audit: type=1326 audit(6054521253.976:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.5.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 452.223609][ T30] audit: type=1326 audit(6054521253.976:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.5.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 452.253755][ T30] audit: type=1326 audit(6054521253.976:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.5.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 452.327015][ T9427] overlayfs: failed to clone upperpath [ 452.366493][ T30] audit: type=1326 audit(6054521253.976:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.5.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 452.478453][ T30] audit: type=1326 audit(6054521253.976:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.5.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 452.594452][ T30] audit: type=1326 audit(6054521254.106:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.5.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 452.653319][ T30] audit: type=1326 audit(6054521254.106:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.5.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 452.684262][ T30] audit: type=1326 audit(6054521254.126:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.5.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f1e58b8f6c9 code=0x7ffc0000 [ 453.613929][ T7844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.032667][ T10] IPVS: starting estimator thread 0... [ 454.032719][ T9434] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 454.142612][ T9438] IPVS: using max 28 ests per chain, 67200 per kthread [ 454.160387][ T9441] binder: BINDER_SET_CONTEXT_MGR already set [ 454.189758][ T9441] binder: 9437:9441 ioctl 4018620d 200000000040 returned -16 [ 456.845916][ T9460] netlink: 'syz.0.867': attribute type 4 has an invalid length. [ 462.400670][ T5843] Bluetooth: hci1: unexpected event for opcode 0x0c24 [ 462.731097][ T9501] loop0: detected capacity change from 0 to 2048 [ 462.850818][ T9501] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 462.879349][ T9501] UDF-fs: Scanning with blocksize 512 failed [ 463.004223][ T9501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.739766][ T9543] syz_tun: entered allmulticast mode [ 465.750460][ T9543] syz_tun: left allmulticast mode [ 465.858121][ T9545] Cannot find add_set index 0 as target [ 466.519690][ T5843] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 466.530535][ T5843] Bluetooth: hci1: Injecting HCI hardware error event [ 466.540540][ T5843] Bluetooth: hci1: hardware error 0x00 [ 469.116658][ T5843] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 469.582973][ T9554] input: syz1 as /devices/virtual/input/input7 [ 471.081684][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 471.081705][ T30] audit: type=1326 audit(6054521273.425:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.2.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7ffc0000 [ 471.196291][ T30] audit: type=1326 audit(6054521273.506:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.2.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f439798f6c9 code=0x7ffc0000 [ 472.298719][ T30] audit: type=1326 audit(6054521273.506:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.2.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7ffc0000 [ 472.322525][ T30] audit: type=1326 audit(6054521273.506:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.2.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7ffc0000 [ 472.620954][ T30] audit: type=1326 audit(6054521273.516:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.2.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f439798f6c9 code=0x7ffc0000 [ 472.653157][ T30] audit: type=1326 audit(6054521273.516:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.2.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7ffc0000 [ 473.185853][ T30] audit: type=1326 audit(6054521273.516:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.2.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7ffc0000 [ 473.251894][ T30] audit: type=1326 audit(6054521273.516:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.2.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f439798f6c9 code=0x7ffc0000 [ 473.282862][ T30] audit: type=1326 audit(6054521273.516:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.2.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7ffc0000 [ 473.327039][ T30] audit: type=1326 audit(6054521273.516:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.2.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f439798f6c9 code=0x7ffc0000 [ 474.646474][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 475.352611][ T43] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 475.561822][ T43] usb 9-1: Using ep0 maxpacket: 8 [ 475.572548][ T43] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 475.582815][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.609361][ T43] usb 9-1: Product: syz [ 475.620209][ T43] usb 9-1: Manufacturer: syz [ 475.694924][ T43] usb 9-1: SerialNumber: syz [ 475.742798][ T43] usb 9-1: config 0 descriptor?? [ 475.981699][ T43] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 478.470493][ T43] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 478.582456][ T43] usb 9-1: USB disconnect, device number 2 [ 479.790910][ T9649] gretap1: entered promiscuous mode [ 480.222166][ T9651] netlink: 'syz.5.922': attribute type 13 has an invalid length. [ 481.841394][ T9670] Cannot find del_set index 4 as target [ 488.680828][ T9710] veth1_macvtap: left promiscuous mode [ 488.775160][ T9710] macsec0: entered allmulticast mode [ 493.751148][ T9747] netlink: 'syz.8.952': attribute type 27 has an invalid length. [ 493.782704][ T9747] netlink: 'syz.8.952': attribute type 4 has an invalid length. [ 494.057934][ T9747] netlink: 144 bytes leftover after parsing attributes in process `syz.8.952'. [ 495.344109][ T9755] netlink: 'syz.2.955': attribute type 13 has an invalid length. [ 496.842466][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.9.961'. [ 496.868922][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.9.961'. [ 496.880757][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.9.961'. [ 496.893228][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.9.961'. [ 496.905181][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.9.961'. [ 498.317431][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 498.317457][ T30] audit: type=1804 audit(6054521300.679:69): pid=9805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.971" name="/newroot/58/file0" dev="tmpfs" ino=331 res=1 errno=0 [ 498.330450][ T5831] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 499.103169][ T5831] usb 1-1: config 0 has no interfaces? [ 499.220814][ T5831] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 499.257064][ T30] audit: type=1326 audit(6054521301.620:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.9.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11478f6c9 code=0x7ffc0000 [ 499.358839][ T30] audit: type=1326 audit(6054521301.660:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.9.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe11478f6c9 code=0x7ffc0000 [ 499.440160][ T5831] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 499.493501][ T30] audit: type=1326 audit(6054521301.660:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.9.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11478f6c9 code=0x7ffc0000 [ 499.515852][ T5831] usb 1-1: Manufacturer: syz [ 499.558618][ T5831] usb 1-1: config 0 descriptor?? [ 499.677863][ T30] audit: type=1326 audit(6054521301.720:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.9.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe11478f6c9 code=0x7ffc0000 [ 499.811916][ T30] audit: type=1326 audit(6054521301.720:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.9.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11478f6c9 code=0x7ffc0000 [ 499.927423][ T5831] usb 1-1: USB disconnect, device number 8 [ 499.984443][ T30] audit: type=1326 audit(6054521301.720:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.9.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11478f6c9 code=0x7ffc0000 [ 501.618438][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.9.979'. [ 503.219074][ T30] audit: type=1326 audit(6054521305.572:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 503.533685][ T30] audit: type=1326 audit(6054521305.622:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 503.563454][ T30] audit: type=1326 audit(6054521305.622:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 503.603193][ T30] audit: type=1326 audit(6054521305.622:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 504.452331][ T30] audit: type=1326 audit(6054521305.662:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 504.476288][ T30] audit: type=1326 audit(6054521305.662:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 504.498979][ T30] audit: type=1326 audit(6054521305.662:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 504.521789][ T30] audit: type=1326 audit(6054521305.662:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 504.546200][ T30] audit: type=1326 audit(6054521305.662:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 504.568669][ T30] audit: type=1326 audit(6054521305.662:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e91f8f703 code=0x7ffc0000 [ 504.578937][ T9854] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 504.592815][ T30] audit: type=1326 audit(6054521305.662:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0e91f8e17f code=0x7ffc0000 [ 504.630331][ T5843] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 504.701838][ T9854] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 504.731990][ T9854] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 504.757100][ T9854] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 504.780172][ T9854] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 504.841305][ T9854] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 504.954302][ T9854] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 504.967893][ T9854] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 504.980407][ T9854] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 505.017084][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 505.038865][ T9854] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 505.046371][ T9854] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 505.055219][ T9854] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 505.065369][ T9854] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 505.075152][ T9854] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 505.084841][ T9854] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 505.095790][ T9854] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 505.123159][ T9854] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 505.143098][ T9854] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 505.153218][ T9854] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 505.161324][ T9854] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 505.214435][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 505.238986][ T9854] comedi comedi3: 8255: I/O port conflict (0xef,4) [ 505.255945][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 505.319595][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 505.350018][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.379844][ T9] usb 6-1: config 0 descriptor?? [ 505.511309][ T9868] macsec0: entered allmulticast mode [ 506.896151][ T9] ath6kl: Failed to submit usb control message: -110 [ 506.902980][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 506.910682][ T9] ath6kl: Unable to send get target info: -110 [ 506.921123][ T9] ath6kl: Failed to init ath6kl core: -110 [ 506.940867][ T9] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 506.950272][ T5966] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 507.126115][ T5966] usb 1-1: Using ep0 maxpacket: 16 [ 508.485494][ T5966] usb 1-1: unable to get BOS descriptor or descriptor too short [ 508.539984][ T5966] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 508.571951][ T5966] usb 1-1: can't read configurations, error -71 [ 508.663587][ T9] usb 6-1: USB disconnect, device number 3 [ 508.695731][ T5843] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 508.706818][ T5843] Bluetooth: hci0: Injecting HCI hardware error event [ 508.717463][ T5843] Bluetooth: hci0: hardware error 0x00 [ 511.104049][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 513.543702][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.416435][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1006'. [ 521.722931][ T9978] vivid-003: ================= START STATUS ================= [ 521.734654][ T9978] vivid-003: Radio HW Seek Mode: Bounded [ 521.741086][ T9978] vivid-003: Radio Programmable HW Seek: false [ 521.747531][ T9978] vivid-003: RDS Rx I/O Mode: Block I/O [ 521.753733][ T9978] vivid-003: Generate RBDS Instead of RDS: false [ 521.761225][ T9978] vivid-003: RDS Reception: true [ 521.766635][ T9978] vivid-003: RDS Program Type: 0 inactive [ 521.775970][ T9978] vivid-003: RDS PS Name: inactive [ 521.781900][ T9978] vivid-003: RDS Radio Text: inactive [ 521.787659][ T9978] vivid-003: RDS Traffic Announcement: false inactive [ 521.795036][ T9978] vivid-003: RDS Traffic Program: false inactive [ 521.801795][ T9978] vivid-003: RDS Music: false inactive [ 521.807742][ T9978] vivid-003: ================== END STATUS ================== [ 522.168404][ T5905] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 522.448883][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 522.474824][ T5905] usb 6-1: config 0 has an invalid interface number: 236 but max is 0 [ 522.508739][ T5905] usb 6-1: config 0 has no interface number 0 [ 522.520002][ T5905] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=84.33 [ 522.536558][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.561779][ T5905] usb 6-1: Product: syz [ 522.577539][ T5905] usb 6-1: Manufacturer: syz [ 522.599797][ T5905] usb 6-1: SerialNumber: syz [ 523.009802][ T5905] usb 6-1: config 0 descriptor?? [ 524.010073][ T5905] usb-storage 6-1:0.236: USB Mass Storage device detected [ 524.469141][ T5905] usb-storage 6-1:0.236: device ignored [ 524.692294][ T5905] usb 6-1: USB disconnect, device number 4 [ 525.011135][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1034'. [ 525.022826][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1034'. [ 525.055593][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1034'. [ 525.066677][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1034'. [ 525.077344][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1034'. [ 528.323963][T10040] o2cb: This node has not been configured. [ 528.330626][T10040] o2cb: Cluster check failed. Fix errors before retrying. [ 528.338377][T10040] (syz.5.1041,10040,0):user_dlm_register:674 ERROR: status = -22 [ 528.346676][T10040] (syz.5.1041,10040,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 528.967709][T10043] xt_socket: unknown flags 0xc [ 529.267711][T10048] loop5: detected capacity change from 0 to 136 [ 530.830244][T10056] syz_tun: entered allmulticast mode [ 530.888502][T10056] dvmrp8: entered allmulticast mode [ 530.983064][T10055] syz_tun: left allmulticast mode [ 531.391277][T10069] overlayfs: failed to clone upperpath [ 534.082591][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1063'. [ 537.738669][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 537.738695][ T30] audit: type=1326 audit(6054521340.119:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.9.1070" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe11478f6c9 code=0x0 [ 539.952929][T10149] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1079'. [ 540.029571][T10149] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1079'. [ 540.303762][ T5919] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 541.208882][ T5919] usb 6-1: config 1 has an invalid interface descriptor of length 6, skipping [ 541.419746][ T5919] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.479396][ T5919] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 541.538031][ T5919] usb 6-1: config 1 has no interface number 1 [ 541.589006][ T5919] usb 6-1: string descriptor 0 read error: -22 [ 541.639736][ T5919] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 542.247961][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.423395][ T5919] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 542.520074][ T5919] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 542.582402][ T5919] usb 6-1: MIDIStreaming interface descriptor not found [ 542.805933][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 543.029855][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 543.036650][ T5919] usb 6-1: USB disconnect, device number 5 [ 543.213221][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 543.294098][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.329217][ T9] usb 1-1: Product: syz [ 543.333447][ T9] usb 1-1: Manufacturer: syz [ 543.359749][ T9] usb 1-1: SerialNumber: syz [ 543.642648][ T9] usb 1-1: config 0 descriptor?? [ 544.919075][ T5919] usb 1-1: USB disconnect, device number 11 [ 545.868032][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1093'. [ 545.869532][T10211] binder: 10210:10211 unknown command 0 [ 545.938128][T10211] binder: 10210:10211 ioctl c0306201 200000000080 returned -22 [ 546.129323][T10217] lo speed is unknown, defaulting to 1000 [ 546.145250][T10217] lo speed is unknown, defaulting to 1000 [ 546.183793][T10217] lo speed is unknown, defaulting to 1000 [ 546.306630][T10217] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 546.477795][T10217] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 548.615366][T10217] lo speed is unknown, defaulting to 1000 [ 548.624452][T10217] lo speed is unknown, defaulting to 1000 [ 548.750066][T10217] lo speed is unknown, defaulting to 1000 [ 548.763955][T10217] lo speed is unknown, defaulting to 1000 [ 548.772312][T10217] lo speed is unknown, defaulting to 1000 [ 548.813178][T10217] lo speed is unknown, defaulting to 1000 [ 548.937336][T10217] lo speed is unknown, defaulting to 1000 [ 557.150924][ T5919] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 557.521047][ T5919] usb 10-1: Using ep0 maxpacket: 16 [ 558.097200][ T5919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 558.143707][ T5919] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 558.170449][ T5919] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.480555][ T5919] usb 10-1: Product: syz [ 558.485225][ T5919] usb 10-1: Manufacturer: syz [ 558.495363][ T5919] usb 10-1: SerialNumber: syz [ 558.504741][ T5919] usb 10-1: config 0 descriptor?? [ 559.560174][ T5919] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 559.601570][ T5919] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 560.883017][ T5919] em28xx 10-1:0.0: chip ID is em2765 [ 562.985128][ T5919] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 563.042539][ T5919] em28xx 10-1:0.0: board has no eeprom [ 563.157993][ T5919] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 563.203248][ T5919] em28xx 10-1:0.0: dvb set to bulk mode. [ 563.240272][ T5898] em28xx 10-1:0.0: Binding DVB extension [ 563.350290][ T5919] usb 10-1: USB disconnect, device number 3 [ 563.539241][ T5919] em28xx 10-1:0.0: Disconnecting em28xx [ 563.759436][ T5898] em28xx 10-1:0.0: Registering input extension [ 564.077070][ T5919] em28xx 10-1:0.0: Closing input extension [ 565.073351][ T5919] em28xx 10-1:0.0: Freeing device [ 566.481929][ T5919] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 566.637720][T10384] netlink: 'syz.2.1149': attribute type 8 has an invalid length. [ 567.299606][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1152'. [ 568.332991][T10403] binder: BINDER_SET_CONTEXT_MGR already set [ 568.340312][T10403] binder: 10402:10403 ioctl 4018620d 200000004a80 returned -16 [ 574.554762][ T30] audit: type=1804 audit(6054521376.957:111): pid=10442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1165" name="/newroot/86/file0" dev="tmpfs" ino=473 res=1 errno=0 [ 574.555896][T10442] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 574.610397][T10442] ref_ctr increment failed for inode: 0x1d9 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807cf660c0 [ 574.663799][ T5919] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 574.873022][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 574.916498][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.923872][ T5919] usb 6-1: config 0 has an invalid interface number: 94 but max is 0 [ 574.972283][ T5919] usb 6-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 575.031957][ T5919] usb 6-1: config 0 has no interface number 0 [ 575.075478][ T5919] usb 6-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 575.115358][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.216077][ T5919] usb 6-1: config 0 descriptor?? [ 575.272905][ T5919] bfusb 6-1:0.94: probe with driver bfusb failed with error -5 [ 575.451675][T10452] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.459294][T10452] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.234204][ T5905] usb 6-1: USB disconnect, device number 6 [ 576.844903][T10452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.404409][T10452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.557148][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 577.612828][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 578.185750][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.256405][T10509] loop9: detected capacity change from 0 to 164 [ 578.272371][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.352218][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.393869][ T3020] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.393965][T10509] rock: directory entry would overflow storage [ 578.480100][T10509] rock: sig=0x5252, size=5, remaining=3 [ 578.785069][T10520] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 579.099691][T10526] netlink: 'syz.0.1189': attribute type 1 has an invalid length. [ 579.353619][T10526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 579.387008][ T30] audit: type=1326 audit(6054521381.790:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.3.1191" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e91f8f6c9 code=0x0 [ 579.424029][T10530] bond1: (slave ip6gretap1): making interface the new active one [ 579.556406][T10538] loop9: detected capacity change from 0 to 512 [ 579.575338][T10538] EXT4-fs (loop9): Test dummy encryption mode enabled [ 579.619059][T10530] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 579.655671][T10538] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 580.749328][T10538] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.1190: bad orphan inode 131083 [ 580.792533][T10531] vlan2: entered promiscuous mode [ 580.797762][T10531] bond1: entered promiscuous mode [ 580.836161][T10538] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.869133][T10531] ip6gretap1: entered promiscuous mode [ 580.899861][T10531] vlan2: entered allmulticast mode [ 580.959127][T10531] bond1: entered allmulticast mode [ 580.964744][T10531] ip6gretap1: entered allmulticast mode [ 581.035485][T10532] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1190'. [ 581.194405][T10536] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1190'. [ 582.043815][ T8402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.896253][T10564] binder: BINDER_SET_CONTEXT_MGR already set [ 584.922968][T10564] binder: 10563:10564 ioctl 4018620d 2000000002c0 returned -16 [ 587.555668][T10484] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 587.720526][T10484] usb 9-1: Using ep0 maxpacket: 16 [ 587.728220][T10484] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 587.741465][T10484] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 587.751902][T10484] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.760550][T10484] usb 9-1: Product: syz [ 587.765635][T10484] usb 9-1: Manufacturer: syz [ 587.770445][T10484] usb 9-1: SerialNumber: syz [ 587.793327][T10484] usb 9-1: config 0 descriptor?? [ 587.805025][T10484] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 587.814600][T10484] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 588.433366][T10484] em28xx 9-1:0.0: chip ID is em2765 [ 589.168624][T10484] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 589.177326][T10484] em28xx 9-1:0.0: board has no eeprom [ 589.514759][T10484] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 589.615335][T10484] em28xx 9-1:0.0: dvb set to bulk mode. [ 589.635088][T10480] em28xx 9-1:0.0: Binding DVB extension [ 590.534498][T10484] usb 9-1: USB disconnect, device number 3 [ 590.542479][T10484] em28xx 9-1:0.0: Disconnecting em28xx [ 590.817880][T10480] em28xx 9-1:0.0: Registering input extension [ 590.873958][T10484] em28xx 9-1:0.0: Closing input extension [ 590.985529][T10484] em28xx 9-1:0.0: Freeing device [ 591.148573][T10625] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1215'. [ 591.163890][T10625] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1215'. [ 593.514569][T10638] Dead loop on virtual device ip6_vti0, fix it urgently! [ 593.547465][T10638] Dead loop on virtual device ip6_vti0, fix it urgently! [ 593.818225][T10642] binder: BINDER_SET_CONTEXT_MGR already set [ 593.875455][T10642] binder: 10640:10642 ioctl 4018620d 200000000040 returned -16 [ 593.912962][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1222'. [ 593.972684][T10646] syz_tun: entered allmulticast mode [ 594.019523][T10643] syz_tun: left allmulticast mode [ 598.321157][T10642] syz.8.1224 (10642): drop_caches: 2 [ 603.025462][T10709] netlink: 'syz.2.1241': attribute type 4 has an invalid length. [ 603.106796][T10712] netlink: 'syz.2.1241': attribute type 4 has an invalid length. [ 605.167146][T10735] lo: Caught tx_queue_len zero misconfig [ 606.384322][ T30] audit: type=1804 audit(6054521408.793:113): pid=10748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1250" name="/newroot/96/file0" dev="tmpfs" ino=528 res=1 errno=0 [ 606.407784][T10748] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 607.423945][T10748] ref_ctr increment failed for inode: 0x210 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807b1eab00 [ 612.665033][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 613.640325][T10780] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1263'. [ 613.671727][T10780] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1263'. [ 613.975229][T10498] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 614.166065][T10498] usb 10-1: config 1 has an invalid interface descriptor of length 6, skipping [ 614.200389][T10498] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.235128][T10498] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 614.266755][T10498] usb 10-1: config 1 has no interface number 1 [ 615.367896][T10498] usb 10-1: string descriptor 0 read error: -22 [ 615.375938][T10498] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.696763][T10498] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.998788][T10498] usb 10-1: can't set config #1, error -71 [ 617.026058][T10498] usb 10-1: USB disconnect, device number 5 [ 618.460378][T10810] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 618.469740][ T30] audit: type=1804 audit(6054521421.794:114): pid=10810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1270" name="/newroot/213/file0" dev="tmpfs" ino=1154 res=1 errno=0 [ 618.533081][T10810] ref_ctr increment failed for inode: 0x482 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807d0ac080 [ 620.605287][T10823] lo: Caught tx_queue_len zero misconfig [ 620.610994][T10823] netem: change failed [ 629.521754][T10496] IPVS: starting estimator thread 0... [ 629.693085][T10888] IPVS: using max 23 ests per chain, 55200 per kthread [ 634.437077][T10919] loop5: detected capacity change from 0 to 1024 [ 635.975127][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1308'. [ 636.327595][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 637.808572][T10950] Invalid source name [ 637.812912][T10950] UBIFS error (pid: 10950): cannot open "./file0", error -22 [ 644.019985][T10993] 9pnet_fd: p9_fd_create_unix (10993): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 649.805745][T11033] loop9: detected capacity change from 0 to 64 [ 649.960299][T11033] minix filesystem being mounted at /116/file2 supports timestamps until 2106-02-07 (0xffffffff) [ 650.830985][T11038] netlink: 'syz.5.1335': attribute type 16 has an invalid length. [ 651.045150][T11038] netlink: 'syz.5.1335': attribute type 17 has an invalid length. [ 651.579865][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.776133][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.293337][T11038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 654.522583][T11057] loop5: detected capacity change from 0 to 512 [ 656.763391][T11057] EXT4-fs: Mount option(s) incompatible with ext2 [ 662.555434][T11095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.789604][T11121] openvswitch: netlink: Flow key attr not present in new flow. [ 669.978826][T11139] loop5: detected capacity change from 0 to 8 [ 672.088080][ T5843] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 676.253484][ T5843] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 676.264142][ T5843] Bluetooth: hci2: Injecting HCI hardware error event [ 676.273983][ T5843] Bluetooth: hci2: hardware error 0x00 [ 678.104221][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1375'. [ 678.569254][ T5843] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 680.285750][T11209] overlayfs: failed to clone upperpath [ 680.641569][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 680.658784][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 680.674168][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 680.700700][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 680.904943][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 682.973094][ T5845] Bluetooth: hci1: command tx timeout [ 683.275408][ T30] audit: type=1326 audit(6054521486.694:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11248 comm="syz.5.1397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e58b8f6c9 code=0x0 [ 683.372323][T11217] lo speed is unknown, defaulting to 1000 [ 685.043577][ T5845] Bluetooth: hci1: command tx timeout [ 687.229359][ T5845] Bluetooth: hci1: command tx timeout [ 688.213393][ T8752] bridge_slave_1: left allmulticast mode [ 688.219120][ T8752] bridge_slave_1: left promiscuous mode [ 688.281506][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.324983][ T8752] bridge_slave_0: left allmulticast mode [ 688.332637][ T8752] bridge_slave_0: left promiscuous mode [ 688.375697][T11319] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 688.402547][T11319] CIFS mount error: No usable UNC path provided in device string! [ 688.402547][T11319] [ 688.413932][T11319] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 688.445742][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.866699][ T8752] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 688.925567][ T8752] ip6gretap1 (unregistering): left promiscuous mode [ 688.957201][ T8752] ip6gretap1 (unregistering): left allmulticast mode [ 689.293165][ T5845] Bluetooth: hci1: command tx timeout [ 692.491938][T11356] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 692.522823][ T8752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.555028][ T8752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.566507][ T8752] bond0 (unregistering): Released all slaves [ 693.561512][T11369] ptrace attach of "./syz-executor exec"[5842] was attempted by " [ 695.050303][ T8752] bond1 (unregistering): Released all slaves [ 695.724680][T11217] chnl_net:caif_netlink_parms(): no params data found [ 697.780057][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 699.526593][T11217] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.556287][T11217] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.569023][T11434] loop5: detected capacity change from 0 to 128 [ 700.790280][T11217] bridge_slave_0: entered allmulticast mode [ 700.960915][T11434] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 701.028652][T11217] bridge_slave_0: entered promiscuous mode [ 701.037716][T11434] ext4 filesystem being mounted at /239/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 701.208034][ T8752] hsr_slave_0: left promiscuous mode [ 702.529986][ T8752] hsr_slave_1: left promiscuous mode [ 702.894600][ T8752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.177496][ T8752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.215387][ T5834] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 703.615921][T11460] syz.2.1455 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 703.641871][T11466] loop5: detected capacity change from 0 to 128 [ 704.869581][T11466] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 704.923772][T11466] ext4 filesystem being mounted at /240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 706.644882][ T5834] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 709.171547][T11507] loop5: detected capacity change from 0 to 2048 [ 709.370544][ T30] audit: type=1804 audit(6054521512.784:116): pid=11508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1467" name="file0" dev="tmpfs" ino=1411 res=1 errno=0 [ 709.394922][T11508] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 709.416086][T11508] ref_ctr increment failed for inode: 0x583 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888078140ac0 [ 710.219579][T11502] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 710.262123][T11502] ref_ctr decrement failed for inode: 0x583 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888078140ac0 [ 710.279032][T11502] uprobe: syz.2.1467:11502 failed to unregister, leaking uprobe [ 710.457302][ T8752] team0 (unregistering): Port device team_slave_1 removed [ 710.569457][ T8752] team0 (unregistering): Port device team_slave_0 removed [ 715.742835][T11217] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.774396][T11217] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.827799][T11217] bridge_slave_1: entered allmulticast mode [ 715.855169][T11217] bridge_slave_1: entered promiscuous mode [ 715.994011][T11478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.069244][T11478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.119502][T11478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.131827][T11551] orangefs_mount: mount request failed with -4 [ 716.162450][T11478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.266815][T11217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.318382][T11217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.806662][T11217] team0: Port device team_slave_0 added [ 720.846808][T11217] team0: Port device team_slave_1 added [ 722.268735][T11589] tipc: Started in network mode [ 722.313087][T11589] tipc: Node identity 4, cluster identity 4711 [ 722.487392][T11589] tipc: Node number set to 4 [ 723.164363][T11217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.369345][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.388613][T11217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.456207][T11217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.469609][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.704649][T11217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.912612][T11628] netlink: 'syz.2.1501': attribute type 2 has an invalid length. [ 727.183448][T11217] hsr_slave_0: entered promiscuous mode [ 727.199788][T11217] hsr_slave_1: entered promiscuous mode [ 727.230341][T11217] debugfs: 'hsr0' already exists in 'hsr' [ 727.249837][T11217] Cannot create hsr debugfs directory [ 732.170485][T11684] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1513'. [ 732.293613][T10487] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 732.538364][T10487] usb 10-1: config 7 has an invalid interface number: 192 but max is 0 [ 732.642068][T10487] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 732.707147][T10487] usb 10-1: config 7 has no interface number 0 [ 732.793201][T10487] usb 10-1: config 7 interface 192 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.851818][T10487] usb 10-1: config 7 interface 192 has no altsetting 0 [ 732.896034][T10487] usb 10-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 733.023177][T10487] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.101664][T10487] usb 10-1: Product: syz [ 733.131832][T10487] usb 10-1: Manufacturer: syz [ 733.150818][T10487] usb 10-1: SerialNumber: syz [ 733.397944][T11700] RDS: rds_bind could not find a transport for fe88::6, load rds_tcp or rds_rdma? [ 734.576676][T10498] usb 10-1: USB disconnect, device number 6 [ 737.796578][T11217] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 737.859277][T11217] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 738.127573][T11217] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 738.998570][T11217] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 739.684797][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1529'. [ 740.801464][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 740.821148][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 740.844507][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 740.897065][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 740.907731][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 742.308024][T11774] lo speed is unknown, defaulting to 1000 [ 742.348765][T11790] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1537'. [ 743.013613][ T5845] Bluetooth: hci6: command tx timeout [ 743.163258][T11799] binder: 11797:11799 ioctl c00c620f 0 returned -14 [ 744.876821][T11661] bridge_slave_1: left allmulticast mode [ 744.882545][T11661] bridge_slave_1: left promiscuous mode [ 744.889640][T11661] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.909716][T11661] bridge_slave_0: left allmulticast mode [ 744.916579][T11661] bridge_slave_0: left promiscuous mode [ 744.922631][T11661] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.090307][T11661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.106468][T11661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.118637][T11661] bond0 (unregistering): Released all slaves [ 745.133241][ T5845] Bluetooth: hci6: command tx timeout [ 745.141535][T11774] chnl_net:caif_netlink_parms(): no params data found [ 745.345337][T11774] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.353166][T11774] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.360509][T11774] bridge_slave_0: entered allmulticast mode [ 745.380184][T11774] bridge_slave_0: entered promiscuous mode [ 745.399818][T11774] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.408773][T11774] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.416761][T11774] bridge_slave_1: entered allmulticast mode [ 745.426275][T11774] bridge_slave_1: entered promiscuous mode [ 745.440440][T11661] hsr_slave_0: left promiscuous mode [ 745.456080][T11661] hsr_slave_1: left promiscuous mode [ 745.462493][T11661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.475276][T11661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.772235][T11661] team0 (unregistering): Port device team_slave_1 removed [ 745.827057][T11661] team0 (unregistering): Port device team_slave_0 removed [ 746.186554][T11774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.217924][T11774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.315293][T11774] team0: Port device team_slave_0 added [ 746.337411][T11774] team0: Port device team_slave_1 added [ 746.442660][T11774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.450939][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.477816][T11774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.518676][T11774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.533703][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.563123][T11774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.649236][T11774] hsr_slave_0: entered promiscuous mode [ 746.661610][T11774] hsr_slave_1: entered promiscuous mode [ 746.668928][T11774] debugfs: 'hsr0' already exists in 'hsr' [ 746.675249][T11774] Cannot create hsr debugfs directory [ 747.210625][ T5845] Bluetooth: hci6: command tx timeout [ 747.282623][T11774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 747.305555][T11774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 747.320702][T11774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 747.335680][T11774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 747.458054][T11774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.485082][T11774] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.509793][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.517075][ T6737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.544641][T11661] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.551870][T11661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.896794][T11774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.345811][T11774] veth0_vlan: entered promiscuous mode [ 748.364958][T11774] veth1_vlan: entered promiscuous mode [ 748.421404][T11774] veth0_macvtap: entered promiscuous mode [ 748.433248][T11774] veth1_macvtap: entered promiscuous mode [ 748.461879][T11774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.484640][T11774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.505873][ T8752] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.516865][ T8752] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.534731][ T8752] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.560013][ T8752] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.679691][T11662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.699590][T11662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.765853][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.775505][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.348187][ T5845] Bluetooth: hci6: command tx timeout [ 751.265260][T11935] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1559'. [ 756.276669][T11969] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 759.260281][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 762.093691][T12016] netlink: 'syz.2.1569': attribute type 1 has an invalid length. [ 763.587134][T12033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 763.595211][T12033] IPv6: NLM_F_CREATE should be set when creating new route [ 763.602450][T12033] IPv6: NLM_F_CREATE should be set when creating new route [ 763.702150][T12016] bond3: entered promiscuous mode [ 763.753576][T12016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 763.959386][T12033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 764.328495][T12024] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 765.356853][T12033] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 773.270455][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 773.303205][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 773.323137][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 773.332096][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 773.340290][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 774.512117][T12114] lo speed is unknown, defaulting to 1000 [ 775.664964][ T5843] Bluetooth: hci1: command tx timeout [ 777.686716][ T5843] Bluetooth: hci1: command tx timeout [ 778.557461][T12114] chnl_net:caif_netlink_parms(): no params data found [ 780.075503][ T5843] Bluetooth: hci1: command tx timeout [ 782.084717][ T5843] Bluetooth: hci1: command tx timeout [ 784.487377][T12114] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.540646][T12114] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.642074][T12114] bridge_slave_0: entered allmulticast mode [ 784.671581][T12114] bridge_slave_0: entered promiscuous mode [ 784.684213][T12190] 9pnet_fd: p9_fd_create_tcp (12190): problem connecting socket to 127.0.0.1 [ 784.692606][T12114] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.722680][T12114] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.773617][T12114] bridge_slave_1: entered allmulticast mode [ 784.819417][T12114] bridge_slave_1: entered promiscuous mode [ 789.241295][ T1151] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.074915][ T1151] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.232740][T12114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.316359][T12114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.640514][ T1151] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.720709][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 793.201904][T12114] team0: Port device team_slave_0 added [ 793.210746][T12256] syz_tun: entered allmulticast mode [ 793.223638][T12256] syz_tun: left allmulticast mode [ 798.011477][ T1151] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.023184][ T30] audit: type=1326 audit(6054521601.424:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 798.320985][ T30] audit: type=1326 audit(6054521601.424:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 798.356259][T12114] team0: Port device team_slave_1 added [ 798.363164][T12304] netlink: 188 bytes leftover after parsing attributes in process `syz.8.1633'. [ 799.305040][ T30] audit: type=1326 audit(6054521601.424:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 799.403967][ T30] audit: type=1326 audit(6054521601.424:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 799.438206][ T30] audit: type=1326 audit(6054521601.464:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 799.510002][ T30] audit: type=1326 audit(6054521601.464:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 799.539274][ T30] audit: type=1326 audit(6054521601.464:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 799.564086][ T30] audit: type=1326 audit(6054521601.464:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 799.649840][ T30] audit: type=1326 audit(6054521601.464:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 799.758623][T12114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.792674][ T30] audit: type=1326 audit(6054521601.464:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0e91f8f6c9 code=0x7ffc0000 [ 799.823077][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.724122][T12114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.741189][T12114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.748828][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.800965][T12114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.414835][T12325] loop9: detected capacity change from 0 to 512 [ 802.174435][T12325] EXT4-fs: Ignoring removed nobh option [ 802.180607][T12325] EXT4-fs: Ignoring removed mblk_io_submit option [ 802.337044][T12325] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 802.439392][T12325] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #13: comm syz.9.1638: invalid indirect mapped block 256 (level 1) [ 802.759299][T12325] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #13: comm syz.9.1638: invalid indirect mapped block 2683928664 (level 1) [ 802.790264][T12114] hsr_slave_0: entered promiscuous mode [ 802.806300][T12325] EXT4-fs (loop9): 1 truncate cleaned up [ 802.811726][T12114] hsr_slave_1: entered promiscuous mode [ 802.821530][T12114] debugfs: 'hsr0' already exists in 'hsr' [ 802.827722][T12114] Cannot create hsr debugfs directory [ 802.842528][T12325] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.619090][ T1151] bridge_slave_1: left allmulticast mode [ 804.635923][ T1151] bridge_slave_1: left promiscuous mode [ 804.646298][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.200227][ T8402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.324823][ T1151] bridge_slave_0: left allmulticast mode [ 806.333000][ T1151] bridge_slave_0: left promiscuous mode [ 806.339053][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.567695][T12362] netlink: 'syz.8.1646': attribute type 1 has an invalid length. [ 808.151925][T12376] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1648'. [ 813.571644][ T1151] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 813.958714][T12415] program syz.4.1656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 814.253736][ C1] sd 0:0:1:0: [sda] tag#7847 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 814.264340][ C1] sd 0:0:1:0: [sda] tag#7847 CDB: Write(6) 0a 00 00 00 00 00 [ 814.298648][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.343046][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.366085][ T1151] bond0 (unregistering): Released all slaves [ 814.564429][T12362] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 816.159636][T12435] overlayfs: missing 'lowerdir' [ 816.225320][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1661'. [ 819.248706][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 819.248743][ T30] audit: type=1326 audit(6054521622.664:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7fc00000 [ 819.860360][ T30] audit: type=1326 audit(6054521623.244:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f439798f6c9 code=0x7fc00000 [ 820.023033][ T30] audit: type=1326 audit(6054521623.364:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7fc00000 [ 820.143158][ T30] audit: type=1326 audit(6054521623.364:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7fc00000 [ 820.248165][ T30] audit: type=1326 audit(6054521623.364:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7fc00000 [ 820.359201][ T30] audit: type=1326 audit(6054521623.364:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7fc00000 [ 820.450216][ T30] audit: type=1326 audit(6054521623.364:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7fc00000 [ 820.531218][ T30] audit: type=1326 audit(6054521623.364:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7fc00000 [ 820.635722][ T30] audit: type=1326 audit(6054521623.364:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7fc00000 [ 820.739712][ T30] audit: type=1326 audit(6054521623.364:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439798f6c9 code=0x7fc00000 [ 820.773583][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 821.299081][T12476] netlink: 'syz.9.1672': attribute type 12 has an invalid length. [ 822.977010][ T1151] hsr_slave_0: left promiscuous mode [ 823.002068][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.276137][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.302504][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.323572][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.819850][ T1151] veth1_macvtap: left promiscuous mode [ 824.863211][ T1151] veth0_macvtap: left promiscuous mode [ 827.851568][T12540] netlink: 'syz.3.1688': attribute type 3 has an invalid length. [ 827.913338][T12540] netlink: 'syz.3.1688': attribute type 3 has an invalid length. [ 827.982710][T12540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1688'. [ 828.247981][T12546] binder: 12545:12546 ioctl c00c620f 0 returned -14 [ 828.739568][T10489] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 828.761677][T12555] loop4: detected capacity change from 0 to 1024 [ 828.919938][T10489] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 828.971694][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 828.988916][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 829.000638][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 829.009328][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 829.018096][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 829.823189][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 829.981203][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 831.205466][ T5845] Bluetooth: hci2: command tx timeout [ 831.577671][T12528] syz.8.1685 (12528): drop_caches: 2 [ 832.397263][T10499] IPVS: starting estimator thread 0... [ 832.531112][T12589] IPVS: using max 24 ests per chain, 57600 per kthread [ 832.545320][T12593] netlink: 'syz.2.1705': attribute type 1 has an invalid length. [ 833.829388][ T5845] Bluetooth: hci2: command tx timeout [ 836.046349][ T5843] Bluetooth: hci2: command tx timeout [ 838.099791][ T5843] Bluetooth: hci2: command tx timeout [ 840.584203][T12593] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 840.765769][T12599] veth5: entered promiscuous mode [ 842.124358][T12558] lo speed is unknown, defaulting to 1000 [ 842.430760][T10481] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 843.833609][T10481] usb 10-1: config 0 has an invalid interface number: 129 but max is 0 [ 843.841947][T10481] usb 10-1: config 0 has no interface number 0 [ 843.849852][T11661] hfsplus: b-tree write err: -5, ino 4 [ 843.860699][T10481] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=a9.42 [ 843.877181][T10481] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.899772][T10481] usb 10-1: Product: syz [ 843.908061][T10481] usb 10-1: Manufacturer: syz [ 843.921977][T10481] usb 10-1: SerialNumber: syz [ 843.938793][T10481] usb 10-1: config 0 descriptor?? [ 843.987456][T10481] usb 10-1: MBOX3: Invalid descriptor size=18. [ 844.784749][T10484] usb 10-1: USB disconnect, device number 7 [ 844.969735][T12708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.966844][T12558] chnl_net:caif_netlink_parms(): no params data found [ 850.325935][ T1151] IPVS: stop unused estimator thread 0... [ 850.497024][T12558] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.570552][T12558] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.823370][T12558] bridge_slave_0: entered allmulticast mode [ 850.832213][T12558] bridge_slave_0: entered promiscuous mode [ 850.853060][T12558] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.860384][T12558] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.872939][T12558] bridge_slave_1: entered allmulticast mode [ 850.895873][T12558] bridge_slave_1: entered promiscuous mode [ 851.983439][T12558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.026307][T12558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.776469][T12558] team0: Port device team_slave_0 added [ 855.815610][ T1151] bridge_slave_1: left allmulticast mode [ 855.821317][ T1151] bridge_slave_1: left promiscuous mode [ 855.875769][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.948889][ T1151] bridge_slave_0: left allmulticast mode [ 855.957648][ T1151] bridge_slave_0: left promiscuous mode [ 856.213920][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.151829][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.344385][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.429951][ T1151] bond0 (unregistering): Released all slaves [ 858.760764][T12558] team0: Port device team_slave_1 added [ 860.774031][T12558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.832329][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.953033][T12558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.013264][T12558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.020422][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.250182][T12558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.374050][ T1151] hsr_slave_0: left promiscuous mode [ 861.773556][ T1151] hsr_slave_1: left promiscuous mode [ 862.495268][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.763714][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.723464][ T5845] Bluetooth: hci6: command 0x0406 tx timeout [ 864.850453][T12863] loop9: detected capacity change from 0 to 512 [ 865.790820][T12863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 865.826983][T12863] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 865.935807][T12863] EXT4-fs (loop9): 1 truncate cleaned up [ 865.974230][T12863] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.223225][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 866.501669][ T8402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.516531][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 867.405995][T12876] macsec0: entered promiscuous mode [ 867.411608][T12876] macsec0: entered allmulticast mode [ 867.417069][T12876] veth1_macvtap: entered allmulticast mode [ 867.990820][T12558] hsr_slave_0: entered promiscuous mode [ 868.059487][T12558] hsr_slave_1: entered promiscuous mode [ 868.073939][T12558] debugfs: 'hsr0' already exists in 'hsr' [ 868.079916][T12558] Cannot create hsr debugfs directory [ 873.189778][T12931] Invalid ELF header type: 3 != 1 [ 873.668847][T12558] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 873.996047][T12558] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 875.009195][T12953] libceph: resolve '4..' (ret=-3): failed [ 875.353104][T12558] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 875.470899][T12558] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 876.771372][T12989] loop9: detected capacity change from 0 to 128 [ 876.814027][T12989] vfat: Unknown parameter '18446744073709551615ÿÿÿ' [ 877.175481][T12558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.319944][T12558] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.350126][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.357370][ T8763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.525900][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.533583][ T8763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.095948][T13016] loop9: detected capacity change from 0 to 1024 [ 881.484737][T13016] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.447215][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 883.258303][T12558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.109398][ T8402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.634681][T13102] binder: BINDER_SET_CONTEXT_MGR already set [ 889.640970][T13102] binder: 13101:13102 ioctl 4018620d 200000004a80 returned -16 [ 891.212812][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 891.231464][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 891.256942][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 891.272672][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 891.322066][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 892.601826][T13110] lo speed is unknown, defaulting to 1000 [ 894.083602][ T5845] Bluetooth: hci1: command tx timeout [ 894.137368][T13131] syzkaller0: entered promiscuous mode [ 894.166922][T13131] syzkaller0: entered allmulticast mode [ 894.197735][T13151] netlink: 'syz.3.1842': attribute type 4 has an invalid length. [ 894.531374][T13156] CIFS mount error: No usable UNC path provided in device string! [ 894.531374][T13156] [ 894.541947][T13156] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 896.296389][ T5845] Bluetooth: hci1: command tx timeout [ 897.788984][T13110] chnl_net:caif_netlink_parms(): no params data found [ 897.894941][T13204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 898.014298][T11662] bridge_slave_1: left allmulticast mode [ 898.029246][T11662] bridge_slave_1: left promiscuous mode [ 898.051264][T11662] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.117389][T11662] bridge_slave_0: left allmulticast mode [ 898.139107][T11662] bridge_slave_0: left promiscuous mode [ 898.166559][T11662] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.323206][ T5845] Bluetooth: hci1: command tx timeout [ 898.643838][T13197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 899.989487][T13237] loop9: detected capacity change from 0 to 256 [ 900.098890][T13237] vfat filesystem being mounted at /217/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 900.429815][ T5845] Bluetooth: hci1: command tx timeout [ 908.113693][T11662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.313929][T11662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.353346][T11662] bond0 (unregistering): Released all slaves [ 913.152307][T11662] hsr_slave_0: left promiscuous mode [ 913.161226][T11662] hsr_slave_1: left promiscuous mode [ 913.176652][T11662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.205429][T11662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.473076][T13355] xt_cgroup: xt_cgroup: no path or classid specified [ 920.096052][T13375] loop9: detected capacity change from 0 to 512 [ 920.134131][T13375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 920.143446][T13375] EXT4-fs: Ignoring removed bh option [ 920.357886][T13375] EXT4-fs error (device loop9): mb_free_blocks:2014: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 920.407573][T13375] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #11: comm syz.9.1894: corrupted inode contents [ 920.430880][T13375] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #11: comm syz.9.1894: mark_inode_dirty error [ 920.445291][T13375] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #11: comm syz.9.1894: invalid indirect mapped block 1 (level 1) [ 920.486724][T13375] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #11: comm syz.9.1894: corrupted inode contents [ 920.547855][T13375] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 920.588065][T13375] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #11: comm syz.9.1894: corrupted inode contents [ 920.717524][T13375] EXT4-fs error (device loop9): ext4_truncate:4637: inode #11: comm syz.9.1894: mark_inode_dirty error [ 920.780123][T13375] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 920.856089][T13375] EXT4-fs (loop9): 1 truncate cleaned up [ 920.867733][T13375] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.300320][T11662] team0 (unregistering): Port device team_slave_1 removed [ 922.775143][T11662] team0 (unregistering): Port device team_slave_0 removed [ 925.396799][T13406] ubi31: attaching mtd0 [ 925.467739][T13406] ubi31: scanning is finished [ 925.472727][T13406] ubi31: empty MTD device detected [ 929.486541][T13406] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 929.513957][T13406] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 929.521685][T13406] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 929.549119][T13406] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 931.679033][T13406] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 931.722965][T13406] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 931.758697][T13406] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 533558428 [ 931.789558][T13406] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 932.059206][T13426] ubi31: background thread "ubi_bgt31d" started, PID 13426 [ 940.001069][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 940.030408][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 940.043013][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 940.149385][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 940.160584][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 942.243327][ T5845] Bluetooth: hci2: command tx timeout [ 943.546371][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 943.790142][T13375] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.901892][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.952668][T13110] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.332137][ T5845] Bluetooth: hci2: command tx timeout [ 944.365895][T13110] bridge_slave_0: entered allmulticast mode [ 944.374449][T13110] bridge_slave_0: entered promiscuous mode [ 945.217062][T13110] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.233752][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.241101][T13110] bridge_slave_1: entered allmulticast mode [ 945.395417][T13110] bridge_slave_1: entered promiscuous mode [ 946.433055][ T5845] Bluetooth: hci2: command tx timeout [ 946.596715][T13495] lo speed is unknown, defaulting to 1000 [ 949.033194][ T5845] Bluetooth: hci2: command tx timeout [ 952.183692][T13588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1947'. [ 953.470179][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 953.481767][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 953.491882][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 953.500682][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 953.508935][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 954.360684][T13593] lo speed is unknown, defaulting to 1000 [ 954.782624][T13607] overlayfs: failed to clone upperpath [ 955.094929][T11662] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.240656][T13495] chnl_net:caif_netlink_parms(): no params data found [ 955.617916][ T5843] Bluetooth: hci4: command tx timeout [ 957.345132][T11662] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.703197][ T5843] Bluetooth: hci4: command tx timeout [ 958.513579][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 958.513609][ T30] audit: type=1326 audit(6054521761.544:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d078f6c9 code=0x7fc00000 [ 959.403131][ T30] audit: type=1326 audit(6054521761.544:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74d078f6c9 code=0x7fc00000 [ 959.475364][ T30] audit: type=1326 audit(6054521761.544:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d078f6c9 code=0x7fc00000 [ 959.668841][T13631] x_tables: unsorted underflow at hook 2 [ 959.726365][T11662] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.813139][ T5843] Bluetooth: hci4: command tx timeout [ 959.958322][ T30] audit: type=1326 audit(6054521761.544:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d078f6c9 code=0x7fc00000 [ 959.989427][ T30] audit: type=1326 audit(6054521761.544:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d078f6c9 code=0x7fc00000 [ 960.086219][ T30] audit: type=1326 audit(6054521761.544:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d078f6c9 code=0x7fc00000 [ 960.224349][ T30] audit: type=1326 audit(6054521761.544:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d078f6c9 code=0x7fc00000 [ 960.250431][ T30] audit: type=1326 audit(6054521761.544:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d078f6c9 code=0x7fc00000 [ 960.274429][ T30] audit: type=1326 audit(6054521761.544:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d078f6c9 code=0x7fc00000 [ 960.321935][ T30] audit: type=1326 audit(6054521761.544:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.4.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d078f6c9 code=0x7fc00000 [ 960.529560][T11662] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.091250][ T5843] Bluetooth: hci4: command tx timeout [ 963.014735][T13664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 965.124329][T13495] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.131881][T13495] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.864764][T13495] bridge_slave_0: entered allmulticast mode [ 965.873161][T13495] bridge_slave_0: entered promiscuous mode [ 965.882619][T13495] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.890132][T13495] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.931012][T13495] bridge_slave_1: entered allmulticast mode [ 965.945272][T13495] bridge_slave_1: entered promiscuous mode [ 965.985163][T13593] chnl_net:caif_netlink_parms(): no params data found [ 966.059567][T13495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.584162][T13495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.016664][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1976'. [ 972.054012][T13495] team0: Port device team_slave_0 added [ 973.610749][T13714] 8021q: VLANs not supported on vcan0 [ 973.630165][T13495] team0: Port device team_slave_1 added [ 974.755058][T13593] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.766360][T13593] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.774376][T13593] bridge_slave_0: entered allmulticast mode [ 974.784710][T13593] bridge_slave_0: entered promiscuous mode [ 974.915686][T10481] IPVS: starting estimator thread 0... [ 975.086848][T13743] IPVS: using max 22 ests per chain, 52800 per kthread [ 976.114237][T13593] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.121447][T13593] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.183459][T13593] bridge_slave_1: entered allmulticast mode [ 976.234240][T13593] bridge_slave_1: entered promiscuous mode [ 976.624123][T13495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.593426][T13495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.621443][T13495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.428163][T13495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.419895][T13495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.451002][T13495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.463448][T11662] bridge_slave_1: left allmulticast mode [ 979.469485][T11662] bridge_slave_1: left promiscuous mode [ 979.476336][T11662] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.241096][T13777] xt_socket: unknown flags 0x50 [ 980.475665][T11662] bridge_slave_0: left allmulticast mode [ 980.481370][T11662] bridge_slave_0: left promiscuous mode [ 981.453522][T11662] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.670517][T11662] bridge_slave_1: left allmulticast mode [ 981.697352][T11662] bridge_slave_1: left promiscuous mode [ 981.704909][T11662] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.218853][T11662] bridge_slave_0: left allmulticast mode [ 982.242930][T11662] bridge_slave_0: left promiscuous mode [ 982.263103][T11662] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.731978][T11662] bond0 (unregistering): Released all slaves [ 984.067225][T13817] netlink: get zone limit has 4 unknown bytes [ 987.732123][T11662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.749191][T11662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.763247][T11662] bond0 (unregistering): Released all slaves [ 987.786701][T13593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.863610][T13806] tipc: Enabling of bearer rejected, failed to enable media [ 987.998004][T13593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.813534][T11662] tipc: Left network mode [ 990.329137][T13593] team0: Port device team_slave_0 added [ 990.341726][T13593] team0: Port device team_slave_1 added [ 990.412417][T13495] hsr_slave_0: entered promiscuous mode [ 990.440266][T13495] hsr_slave_1: entered promiscuous mode [ 990.472464][T13495] debugfs: 'hsr0' already exists in 'hsr' [ 990.503302][T13495] Cannot create hsr debugfs directory [ 990.509507][T13863] netlink: 'syz.4.2015': attribute type 12 has an invalid length. [ 990.591977][T13873] xt_hashlimit: size too large, truncated to 1048576 [ 991.556653][T13593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.598562][T13593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.670100][T13593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.756576][T13593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.818533][T13593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.938673][T13593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.825578][T13593] hsr_slave_0: entered promiscuous mode [ 994.847440][T13593] hsr_slave_1: entered promiscuous mode [ 994.867584][T13593] debugfs: 'hsr0' already exists in 'hsr' [ 995.023110][T13593] Cannot create hsr debugfs directory [ 997.782138][T11662] hsr_slave_0: left promiscuous mode [ 998.201786][T11662] hsr_slave_1: left promiscuous mode [ 999.250742][T11662] veth1_macvtap: left promiscuous mode [ 999.256733][T11662] veth0_macvtap: left promiscuous mode [ 999.262438][T11662] veth1_vlan: left promiscuous mode [ 1000.233515][T11662] veth0_vlan: left promiscuous mode [ 1001.266305][T13944] x_tables: unsorted underflow at hook 2 [ 1003.892430][T13960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1003.907438][T13960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1003.916821][T13960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1003.927269][T13960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1003.935202][T13960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1005.078902][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1007.195699][T13960] Bluetooth: hci1: command tx timeout [ 1010.127113][T13960] Bluetooth: hci1: command tx timeout [ 1012.005965][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1012.020282][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1012.029679][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1012.038242][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1012.054571][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1012.951966][ T5843] Bluetooth: hci1: command tx timeout [ 1013.269432][T11662] team0 (unregistering): Port device team_slave_1 removed [ 1013.465574][T11662] team0 (unregistering): Port device team_slave_0 removed [ 1015.010444][ T5843] Bluetooth: hci1: command tx timeout [ 1015.018376][ T5845] Bluetooth: hci2: command tx timeout [ 1017.073747][ T5845] Bluetooth: hci2: command tx timeout [ 1018.265093][T14064] tipc: Enabling of bearer rejected, failed to enable media [ 1018.411623][T13959] lo speed is unknown, defaulting to 1000 [ 1018.443547][T14025] lo speed is unknown, defaulting to 1000 [ 1019.763186][ T5845] Bluetooth: hci2: command tx timeout [ 1021.895054][ T5843] Bluetooth: hci2: command tx timeout [ 1023.784480][ T8757] ------------[ cut here ]------------ [ 1023.791632][ T8757] WARNING: CPU: 1 PID: 8757 at io_uring/io_uring.c:3036 io_ring_exit_work+0x3fc/0x10f0 [ 1023.802082][ T8757] Modules linked in: [ 1023.806871][ T8757] CPU: 1 UID: 0 PID: 8757 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 1023.816814][ T8757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1023.827241][ T8757] Workqueue: iou_exit io_ring_exit_work [ 1023.832936][ T8757] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 1023.839154][ T8757] Code: 0f 85 0a 0b 00 00 48 8b 05 41 e8 69 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 ff b9 25 fd 4d 85 f6 79 12 e8 85 be 25 fd 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 73 be 25 fd 48 8b 74 24 60 [ 1023.859346][ T8757] RSP: 0018:ffffc9000b43fa80 EFLAGS: 00010293 [ 1023.865587][ T8757] RAX: 0000000000000000 RBX: ffff8881433b06c8 RCX: ffffffff849729d1 [ 1023.873677][ T8757] RDX: ffff88802d769e40 RSI: ffffffff849729db RDI: 0000000000000007 [ 1023.881890][ T8757] RBP: ffffc9000b43fc40 R08: 0000000000000007 R09: 0000000000000000 [ 1023.890415][ T8757] R10: ffffffffffffffd6 R11: 0000000000000000 R12: ffff8881433b0000 [ 1023.899095][ T8757] R13: dffffc0000000000 R14: ffffffffffffffd6 R15: ffff8881433b0040 [ 1023.908130][ T8757] FS: 0000000000000000(0000) GS:ffff888124b07000(0000) knlGS:0000000000000000 [ 1023.917223][ T8757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1023.923879][ T8757] CR2: 00007fb579cb4440 CR3: 0000000079135000 CR4: 0000000000350ef0 [ 1023.931889][ T8757] Call Trace: [ 1023.935317][ T8757] [ 1023.938283][ T8757] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1023.943955][ T8757] ? __lock_acquire+0xb8a/0x1c90 [ 1023.949073][ T8757] ? try_to_wake_up+0x160/0x1870 [ 1023.954178][ T8757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.959867][ T8757] ? debug_object_deactivate+0x1ec/0x3a0 [ 1023.965729][ T8757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1023.971416][ T8757] ? rcu_is_watching+0x12/0xc0 [ 1023.976583][ T8757] process_one_work+0x9cf/0x1b70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1023.981605][ T8757] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1023.988195][ T8757] ? __pfx_process_one_work+0x10/0x10 [ 1023.994232][ T8757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.000100][ T8757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.006906][ T8757] ? assign_work+0x1a0/0x250 [ 1024.011542][ T8757] worker_thread+0x6c8/0xf10 [ 1024.016487][ T8757] ? __pfx_worker_thread+0x10/0x10 [ 1024.021633][ T8757] kthread+0x3c5/0x780 [ 1024.025977][ T8757] ? __pfx_kthread+0x10/0x10 [ 1024.030618][ T8757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.036459][ T8757] ? rcu_is_watching+0x12/0xc0 [ 1024.041280][ T8757] ? __pfx_kthread+0x10/0x10 [ 1024.045986][ T8757] ret_from_fork+0x675/0x7d0 [ 1024.050899][ T8757] ? __pfx_kthread+0x10/0x10 [ 1024.055782][ T8757] ret_from_fork_asm+0x1a/0x30 [ 1024.060815][ T8757] [ 1024.064119][ T8757] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1024.071594][ T8757] CPU: 1 UID: 0 PID: 8757 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 1024.081180][ T8757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1024.091356][ T8757] Workqueue: iou_exit io_ring_exit_work [ 1024.097128][ T8757] Call Trace: [ 1024.100408][ T8757] [ 1024.103338][ T8757] dump_stack_lvl+0x3d/0x1f0 [ 1024.108089][ T8757] vpanic+0x640/0x6f0 [ 1024.112211][ T8757] ? io_ring_exit_work+0x3fc/0x10f0 [ 1024.117420][ T8757] panic+0xca/0xd0 [ 1024.121170][ T8757] ? __pfx_panic+0x10/0x10 [ 1024.125710][ T8757] ? check_panic_on_warn+0x1f/0xb0 [ 1024.130903][ T8757] check_panic_on_warn+0xab/0xb0 [ 1024.136482][ T8757] __warn+0xf6/0x3c0 [ 1024.140386][ T8757] ? io_ring_exit_work+0x3fc/0x10f0 [ 1024.145698][ T8757] report_bug+0x3c3/0x580 [ 1024.150047][ T8757] ? io_ring_exit_work+0x3fc/0x10f0 [ 1024.155354][ T8757] handle_bug+0x184/0x210 [ 1024.159730][ T8757] exc_invalid_op+0x17/0x50 [ 1024.164296][ T8757] asm_exc_invalid_op+0x1a/0x20 [ 1024.169166][ T8757] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 1024.175092][ T8757] Code: 0f 85 0a 0b 00 00 48 8b 05 41 e8 69 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 ff b9 25 fd 4d 85 f6 79 12 e8 85 be 25 fd 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 73 be 25 fd 48 8b 74 24 60 [ 1024.194898][ T8757] RSP: 0018:ffffc9000b43fa80 EFLAGS: 00010293 [ 1024.200988][ T8757] RAX: 0000000000000000 RBX: ffff8881433b06c8 RCX: ffffffff849729d1 [ 1024.208969][ T8757] RDX: ffff88802d769e40 RSI: ffffffff849729db RDI: 0000000000000007 [ 1024.216994][ T8757] RBP: ffffc9000b43fc40 R08: 0000000000000007 R09: 0000000000000000 [ 1024.225053][ T8757] R10: ffffffffffffffd6 R11: 0000000000000000 R12: ffff8881433b0000 [ 1024.233113][ T8757] R13: dffffc0000000000 R14: ffffffffffffffd6 R15: ffff8881433b0040 [ 1024.241117][ T8757] ? io_ring_exit_work+0x3f1/0x10f0 [ 1024.246425][ T8757] ? io_ring_exit_work+0x3fb/0x10f0 [ 1024.251662][ T8757] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1024.257128][ T8757] ? __lock_acquire+0xb8a/0x1c90 [ 1024.262187][ T8757] ? try_to_wake_up+0x160/0x1870 [ 1024.267230][ T8757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.272974][ T8757] ? debug_object_deactivate+0x1ec/0x3a0 [ 1024.278654][ T8757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.284305][ T8757] ? rcu_is_watching+0x12/0xc0 [ 1024.289195][ T8757] process_one_work+0x9cf/0x1b70 [ 1024.294184][ T8757] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1024.300397][ T8757] ? __pfx_process_one_work+0x10/0x10 [ 1024.306404][ T8757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.312166][ T8757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.317821][ T8757] ? assign_work+0x1a0/0x250 [ 1024.322430][ T8757] worker_thread+0x6c8/0xf10 [ 1024.327234][ T8757] ? __pfx_worker_thread+0x10/0x10 [ 1024.332364][ T8757] kthread+0x3c5/0x780 [ 1024.336445][ T8757] ? __pfx_kthread+0x10/0x10 [ 1024.341077][ T8757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1024.346756][ T8757] ? rcu_is_watching+0x12/0xc0 [ 1024.351597][ T8757] ? __pfx_kthread+0x10/0x10 [ 1024.356292][ T8757] ret_from_fork+0x675/0x7d0 [ 1024.360897][ T8757] ? __pfx_kthread+0x10/0x10 [ 1024.365683][ T8757] ret_from_fork_asm+0x1a/0x30 [ 1024.370583][ T8757] [ 1024.373961][ T8757] Kernel Offset: disabled [ 1024.378324][ T8757] Rebooting in 86400 seconds..