last executing test programs: 16.6428878s ago: executing program 4 (id=93): openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) io_uring_setup(0x675f, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) 15.988788972s ago: executing program 4 (id=96): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 14.635161943s ago: executing program 4 (id=100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00i\x00\a'], 0x40}, 0x1, 0x0, 0x0, 0x4000890}, 0x10) 14.392085567s ago: executing program 1 (id=102): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf256f0000000800", @ANYRES32, @ANYBLOB="0a00060008021100000000000a00060f00000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2010) socket$inet_mptcp(0x2, 0x1, 0x106) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086", 0x17, 0x0, &(0x7f0000000140), 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 14.216567733s ago: executing program 4 (id=104): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0xcabc258ba52e7b, 0x48080) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) 12.891389163s ago: executing program 1 (id=107): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) 12.282459631s ago: executing program 3 (id=109): mkdir(0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r3 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) 11.709837721s ago: executing program 1 (id=111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40420d5}, 0x80) 11.480228975s ago: executing program 1 (id=113): socket$inet_mptcp(0x2, 0x1, 0x106) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x2b, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) accept4(r4, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000a00000005000400000000000900020073797a32000000001400078008001340fffffdff08000640000000000500050002000000050001000600000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3) sendmsg$NET_DM_CMD_START(r3, 0x0, 0x4044000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 10.440054635s ago: executing program 1 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_readahead}]}}) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 9.475036184s ago: executing program 3 (id=117): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7ffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 9.474731199s ago: executing program 5 (id=118): syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040f0406000704"], 0x7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 9.35557951s ago: executing program 0 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x6304, 0xffffffffeffffffd, 0x8, 0x879}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, &(0x7f0000000180), 0xb, 0x1, 0x15c2, 0x40, 0x3, 0x0, 0x8, 'syz0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040001) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$igmp(0x2, 0x3, 0x2) sched_rr_get_interval(r0, &(0x7f00000002c0)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 9.252954484s ago: executing program 1 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x4, 0x4002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) 7.013819437s ago: executing program 0 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 6.513254484s ago: executing program 2 (id=123): socket$nl_netfilter(0x10, 0x3, 0xc) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 6.340282645s ago: executing program 5 (id=124): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x1c, r0, 0xf25, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x404c040) 5.813407837s ago: executing program 0 (id=125): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3}, {0x10000002, 0x4}], 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$kcm(0xf, 0x3, 0x2) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) close(r1) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="ee", 0x1}], 0x1}, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x72, &(0x7f0000000000), 0xc) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 5.676199227s ago: executing program 5 (id=126): openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) io_uring_setup(0x675f, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) 5.443462689s ago: executing program 2 (id=127): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r7, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7ffffffe, 0x0, 0x0, 0x0, 0x66, 0x0, 0x3, 0x5d}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRES64=r2, @ANYRES32=r3, @ANYRES64=r9, @ANYRES64=r8, @ANYRESHEX=r3, @ANYRESOCT=r10, @ANYBLOB="9f283aca9b37ca633bbc1ad2f90d90902b0fde88a7d3c3e9cc"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0xfd0a3c64fa3202d1, 0x27) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2, 0x1}, {0xa, 0x0, 0x0, @remote}, r9, 0xfffffffc}}, 0x48) 5.396928023s ago: executing program 3 (id=128): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x500000}}, 0x50) lstat(&(0x7f0000000500)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="a8268f1a2b1851703451797606637edbaefdfb54c44db52d916348b3ef42e7088c746738fdc5bbf99b4e84ca305f7b6946c39a9977ec67a4cdaa50ac04c28f445c1802338be684ed4d12e24cc1c75ebd57ebbd2a90b18f227da01ac35a1715b5d18b5fc1270c761525083d7dd1d8bdd500ff40b739cf95d41be3231fc6848a1b19228e790e3ec62ae39fa9d43f3fb6d3ea402871811c830e090876367c869d80ff4c336f28a72a4879966c42e05f86a36b47453966631dc07a46124e121f61ce8074393680956c39fb0cc32061684dda54ad9354e3fb50537542972140bffe5ecb0be57d8974252df9687a524ac6b48bc6f983be17ac1afacdcfc4361e4a706a582f461295abca8a1a5229e3d41dab9f80f9aba5904fc2be2619e0f2e027de33661b64bc532f234f2f73bb58c8fe549d3e7203213895b140522fc971ddc67ccc98bda44beadd3b0d62bf646f3225f1e3ec84cf621d22ff0f91b7c3f33c08e3d58e84c245af14d9ebf6e1b13d33c9aba253b29a78b7a862df80ee76e0673fb4b80440aab85931c551900b4b57565f960e9cd097192de1a0cd1139af2273253e3f07ec730eaae2580c1e776882e45f16faf7ead2884bdfe1bd711c1c5e39c87edd8c02926b63e67fb308baa01930535e5a1bc2fb760777f7915bae86bbfcf6ecfb7f5282a4e55be7dc597cfbc8f508a8b2ea252043acad06bfd9fd4f3b017cda5fa9f1998fe6f0549fb44ac7f4f42075d81790efcfe5a044f68d41389392b2a9c6107519e523b27f712f3680307c8e496d30d1e2dd403a34204366914babee441c01348d7e44f7b16f319c1b2fc7ab291f6620365e02af207d243d98e869c9289a0a7c9efb7a6e9234610b2dc956bae392d28ad8879264416b4f3e95a07f1ad23717baeb973e72a2fd2d04b9a63fe3a9fa7c9fda21a5c1d693fbe1b8501ae5a3f2269f032200b2cfede0f38571e9d1e3952ac51704c03a05d6ad383bc39af914e88656abf995c2f407c5ae99ee37f69d7fddccb9cb3bf8bb9a972cda669ebb6f777ca93b09b4cea2da300583c5fab3cad73ca8c303c06869f1e5cfb3774e9288a8fe1e9549ead7f6805645402f9a872045a7ee2b00f304b0cee5c798da1355eff64d50c76f6452d9400250619afcdf8dfe74a4cafde17406f5b4c757c1ef7aec1478154f6b5165682e89beb9dc115f7a0b1585f2a42b5ef27f3ff6d23a7a3815824eac33cc0acd3a3bd04e206c051569a893b5212f4b3d2db94d41fe0ef035ee4aad36462cb6b6b470de0a975d9fd4b710aa1adc242defb2f52df775976dbcaf42b720eac4ffe0cf39536051ea760cc99077f6012045ffc260a5a3e7c279cda7721aed0ac6189926fcb85e766e8c459c679a20ce63a2f7a175f63c8f012debafa2c0878513fd01494ba6e38330c534c90b4713c269eb559cb313e027f6eb38f3d2c4afb76ee6197587684d5298d6648d7f92d1a6e128cc94679c72a37af81865ac47395a8ee772b8b98986e0c82d71b00ab848c6cee65ce335ef890b5e91e8db0d50f748af58c9506072af8f4cc9982cd73a9958fb195825412cd8f9ba58ecbf23fcaf14d99480fea7c906eac75bf0102c133e7c186c4ec3c77c09e1b21fafdb7a1eac9b45e2cbaf5defce717a9c39a21f1c90148666ebd7f8d77055424ce3f0b9443799201bdf5ee49149273d4296dc1663ee7fed74205ef476eb48bab49ea6d30c15f27c8ed734236bd36c3e7d5d6079fcf3749d2a5a05753a4dfff5895e7db42286b80cd644f5cf79afe2cee4d7e52b419aa92ad4d494452d5e339e166927f0aa4b36c21bba437ca7995211c8cfcd1e97dbb377a8ecef22c0a311ed92ea4c13d53ecb3ba31dd359153661db719598427901059687a20d4fe563ec7e849ce92cb3f4517b9c8936143a724f05115bc017b513fa0918c2ba36302527dedf52402bf5cfe243d30fd97c866c0894417832671227af08de454ee46e62e1fe1c4ae65e7ddaade16b458ec618dda3dd92acad501ee8aa7cb9e8c06324478f61f4894e1a346bfc66ecce1961b6904c67a2c6ee053e37dbc47f0e5e9eda6483a17557182bc396ba89baae5b2e4297584ecf1e463a892e453dbabb9182646ae15c736ba80db0421f2a54decae47fd1aa9eca416f27cefeaae6fc893923c6ef47508b94199d4c2c5fa80ba30de8a67e49aaabdff99ee7ac6b7bc2dd1ae81f8f5cccdf6f41e80ba2a2cc11cfe8a78136129d332f52e734a4a16d334592c996a4388ec6203758cafe140397d1edb3326994b2b34da73140755d3cd0393d4af461693a3e052d84c76c81e1228d49228482bdfd436cd1d3fc9bb10b10677676ef2ae700aca7257aa06db6977a96fed86a4f2b0e70cc549ea644a8943d4e7a7d4f243c34c66ebafd47679803460a483213b49359fa206088b38d6715bf12104539af4ba55361eaebb5531170447db528a5c42bdf9186842b693faf27d77e76d738244977fdab9864e72473270869188050d6e47e96158bc49ec4c986152cd6a154d514f782bafbb35f681fc6c65a6dcb6ced2c89e667ab7c8ccb19d4c8699783d4ee38fd4851b205b4d928fa53f60086bb8ccdd9293fe83ddb7f40cd26164423f4802c9cfcb0e3756eedb177b228150b7979731d65ac4c79f27329e9d72b161b116607aa1bdb3e527c773879f713b5e5e4467331090b23c5607be42acd12b00ac695704fe88f80a711c8d75428e3c18cac5005589644e99e7ba6033d3988e6e33c57cdafab59f90893f7bf451d7362b5ef9e2a4e9087866f104171b0c5004078573a9273ab3b4c555896d13a24988e96b142438c1e86c9fd13655cefb59362238a86c3472977e4010516201a6d65448fb5db02dc24aafbb74d91a12d0fc8cd3dc7e038d807e530c0309a2ab5552f8d8d32a13cb6be71c039eb3a2c9ed425f9472ff08fa1e1ff926f124754d4832498da1a2c3c081c8f8c3b34f917e3b6e47865f09de94144d24d9980faaa94acf1fac4f59f1ef6de6bd8b27319d3ad00eb4bdbfac0c9feb27f4a98a5521c358de414bd995a10b289157925fee8f2fa5611fcd474401252a14bf32e670247f5f9b6ba3240d932a37f3b77b44cb3360a9abaac5731e5dfcb79ce9db49c90a99a0e263b194dd00981fc538b397ef034907e5abe571659d96853be0b4ddc9223933e0e23c4fb1538d5df7d0e49f109a1e1a29b0e7dc19842f03443006a6bc9fcd686b36bcc73b59533147e168a46aeaa5d68e8e394b3f210c84adea7421ee594e73758fae1f15b3932f9676de44e98b0eac86574c73d7d479018a85c758dfdaa711c8a4d9e0b5acf2027652bfbaec16e2c52f9fcd0fe64a43ab3b4f37360a8201f4dcf64c93cd41b7f57d096eb5d4980c0c182934f990997a1b1d91f371a93df99086db6b8c92649af665dfbd664bf26e59f2468e8abd25859043c1b2efe27e346f15798b76142193c918a88cfada7cf6e0c3dd9afb26d762f5462b0e6a1fd2be833afc626d0a5024578c5479028c67980c625414d80557b255c3aa507b0b6692ba43340a29e8a8ae37476836bc9c1bcf1a6ef18ea596c65216560242011c85ec9c56327bbcec7f1d9351de17c106f07355f6d97a8234165408d0e87a98205f3c8d1cb9dd232de40a050d14eb884909659e777d1521c83cfe56e46bdc57a1fd3d58256fc2609810a6517e1a670dbe9ed60057eaed824cfa2f9980c673011cfdbdb929789b1ac0040c9e4af6b410402d530e81b0c2ca974ad22648790c68688ffd5ef4e10c5f1d6c0551271130b724732b4be01b5e5a858c82baef8cd0d1db993a90937ff8315e8da74e890784f27150a992a6abd88554a835e0ede2308c9573c7b5f0602ce4ed163549b2c1524ff75aa2cd37e8bc1e699a4b5c4c25eece244fb0665dbe2dba79008043ad660a4f0a3b1c03da108b4e3b0dc2c2e68a4eb6e11b6b5a7602159c38c10e45cdd1470d347d3f88472ba59a0ad936aa7d3d27e0db90a155c9a87e4782dc261931848059ab69672238f23b42b0c46935e5b1f2b4aa824d4680b3bcc685559ae627c8faecf1c01757190d4bdbf4c713ea9174b1239d7c07313714b218eb902b678af96addfbc2c44c3752b3da3bcc98ba88bf18a2799e90d88e3fcfe88e3a7a78ad26bde5f3772c73b63154d433866d9fe6ee7a1081cb94e3e0c9fc13f7879f091d9f47bcf8be5e6a30508fde7ba228e29dc03d8f8473558698f33f95d70c9da2ea5c980524a18fdfef3569bd8e572152ebb642fb7de0fb29a8a3655e830480a13bf99c3ab09299a2bcdc38ead00e90c4155045fcbd3e9a218d55969f7fced6db6b63752923e7fc2f3810fd3c63abb64470dc3b66dfe2f06a84b988afea3f20b30ee63fa45873ad03b9ee80739f3521f9c3920f8bc04e23ba66331c13eb6efbb09e2c7e8ec0799cac481f59539cd76be0e869da0772de6c7d8984ca285b025a75c8a945c81410c1fe1ab196e62f3fa90c5ff5919b3d385fe1060485e1be45c195cf644761abdf2d1855936198157c815ed4798e6fe320cf41e378a1ece4d9d7ebba4dfc28af57dbecdede5c490e27112fcf80a064aab67787e2cb7b4fd2883063d941d08dace771d7375bbdd6d0b922e62be6c50095120074c0fb84771993b848642c6d677e993ceb44f70dfadb05bf702e0cdb67c3fb232d22a50d9768875d29db9a52c75d66c130dd55eaeb37a5bfb4bd9bf01aacfbadfc9f6505ea52a8f57915c31c22c182b0384340c7f23a258b6ce8fdb463e408e9fab1d79909841f88cf6fcdd109c6dc41fdcae1815721ae21d23aecd36f9a3bd412ae5dab82149b1d39b23f771e84a266a3993f2ec50181bcc7a2e09a1158b5669ba688f929b25558da90d05f4d04a45a88d3315746a6277bb747b218f1e3e925bdcc0269e6eda062a927cf6670200a77d85f3f5496b408c469507b619994b699030180e737e9399eac193a6eac277ef2aeda9695b70c7b42b922f1f44a1c4db0001707344c015b31c01cd9ccb877b185b6b615cfb7fd87239f36de3cff33038d2db5310b05727a0edd1f65b9d4262265538da28389399169eaea1929d73aa2ed5a341cebc1e7d5589a1155a114bc2cdb9d220912944173fbd12f68be9a13bcac58ebb89f4af6cac6b766752874f68dbb96d6fab2790824e39e2fa5ca8e38610dcf535180f115f8898d45a0060747966b1c33ab9a1f3ddadf8e15fda65701850ceb5d11df09042234cbade284e29505c9107a26fc985ee44f1c6c906c2f8b286eb0cbff4532b591d819d3c640e96b70956ddd1555f6be59915b12f1d6d95e8c78016d1967afa90e7e8d12a63385aa66b4a3c4986716678235eea1bac5abd4876008b3607853fcde01022d7a53a01949560593789f59c882aa06499b39bfd93703792f5802a491d562dded2306ec470ef05bfc017a092c9399de6dcfca648aadba582ef8e256116a05433cbaa6d6bebc8a14b5f1e3cc7b1acb8480d6563636bca19c88b6703c27f9cc6ffd9cc03d3340a7f14ff9b36a40b64af4b441ecfc6019aade4bd4822af0554ecf38726d17f509a1eb253e4cc896c5bd472945baa2f2f582fa713985ecc82343f541321067d9b1bd502c2504192e9f9f2db9624678fb7ef08af8132080b7e7a3aeea3d9a22fbcd2629a24d4676e0d77412f6b725db153f9333bb88a77a81db93539a9a006b7bb53001308bee692155c6216dbcc79c3b00f25b3cbdb2296bc05cd6bf00f7ca402f00333a0aa72e7b689558c4466c47894f072217fd5f7d0a2b3bd1d5a01b69ba411f62a873eeb6bd564ec3495ebcab92e011f1ecd3396332bb3fb308cc6bf1e38d4c84eec4affed1542328352104b3147ebca11bfa3de527bcdad85e5d8eddf7cc6357a2487e7dc34b89034e2a8c0330b06e5d224aff25e45f836a6a7e16032ed57d2870cf6dcbbc5a3028d85249a7cad253d5f8010024adff6fce9cca6a76dfce82b50383ddc760b3f4635e0fcc3424860aa918cb600ae3f5470592e1d73cf6b715c775aa8c38a59b75d354a4cbd294099c898b333e6c6f6a64c9b30cbe7d71704bc6ef4597d5456159a94130e111e078a09d231f94f29b66117403f2af5c91f4217c823956110daadcc9672b2072f2aeefdc328f4d5cb05372791f052fc7c82eacd4377de40dd69b765ed3bc7969e622528c8c002397b53bd361798cd457025793d69a53f9a0e578a9e16dce78308943860fe567189cccd25640a298c12e0c7a745019bb53f677d1b32473980d6814fb3592afb4fd0053362966364516d302311c5a5eac442bb97e2de12a34e2a0a0d92dac2163257f35b1ad6ce37f29086454f719c7dbdd8b3f7973e0a4f2f09123715b1b7b83cff5b12d13f2001e3cff84cc774a92cc25b0c13efa0b477fee4756a18551ac07c57c8de46aae45c1ccb0dc35e4b1b7c80bd5322ca18e0f7dafa163047acd00752250088956aadb51a8cac3add8dcb23738c3822a83dad65a7b9acb927f198fa2ba0df8b159c707014e2c4018d8821978f62e343466792044e045075b62585ceee865e969ff10e8e417f51f263383186a7954ed8b5d411e31191f6804a2c0945c7d5561324f58e26598b85f8986b01a9c859405623b2a870ed05a6d039c9c4d79385e21b3a398c48ef1b7a9246dee169e6baa66a20972b4e2e0b9b31432f93d980f86e6f92126bd8636c62dfd6e1c60c151f6c358e9d29de8323d7720f6130405b0f5381a41d24e23c0e85d96c90d63ea0193414a30522c8c217dafe329a98591e21a00549954796d830d1cd3da062109d381d6ce1d32f09f698793300bdcc2c7fca9d491eb4e5869e48f7fe5b97e40de3c8313fcfca4baa795cd50ce46e19812422cb8c92016bcad877251d169f4c41beb5fa97e94ae7bd2d3e225dc9263b547d5658898fe2975deb251b55312419df4c42dc733133041d9f5f87dcfb366a2ad6d04bb0f0f6143cd9dbb03998134f9ea7d8b004e0bb67402d88b673f65b94f57e945e787db5a2fa6d6987909e7d41a21770ef9a80277454de8e7ea0bb0e9ee3a2620e64a0372ff9949f30146fadd4d2748e50f80da9ef525c6b019a40d4383896e2ed929998c7b6f064eb7fb711fce57fc38c6eb3ec57a4b8be5e3833978b250fa54c96aa066a7335f23bebc4d8855d9cdab883e45b3996c0e33d64a7ffb7956890933743af0b229a7ddec8a49d3b8a0432c135882804148fb17f0daf124f210d3fdb037fefcc2f7971a99d808e9adcdc3035ba2d477969ae4ee13d733060c99986944041cda604883b0181a9e5a3bc12d17823a270da725801556301022b6c044ccb72dedfe91eaa4b9a6469c659ddb60ef2f4ed9e5bbcf68594d82b310d7b3f8764c5a1502c7c22f28a44fc17f2245761d8a5df10b9f0febedf3db5234c2f2975078e8b8fb6b6d43080e1d8ec954679f13bc339b21b408a8b207a4178f39ba8cba275ee9bcf48dee2649906417e0091d63910444209b5bc973524497be88f6b62dec7a8403447c03350a416150172e0b50f6d2ed654997ed1247e1b58b105560a4a4b964f349c0222c313466e0cccb5d4c522d56c8e8f4671efed29d4dd979a57b36652ac0b4123158bec9d8651ef3a41537e09a1b78e465470db3719e7b9fd7d367e5075dd519a801c1fded641fd01b7f3751471d79d9c026e023f76112286af1b97d888f679ba4f00b1fae60f0f35368c9a3d2a89627a7f587ed383487eff829a85f6596834331ba3aa787772cc303a1e4d10880d59ba4550536a386c707ab0eb6787766da4161a131162cf02987206e938c18fac55165b0d7c1742166b16c4a22bba4deef41b3bc4b98e91179a7458cf833155dbfdd095565af49a36fc95ef4eb6c5e73c761f4327d3a28a1e00005afc5eef1d9413d53ed30bb2b5f9a4d5ee19b0a55dcfe938afe6932bef2b2694a70358f485a2900804bd03e87ea6a2afa2665fba9d237ff431f1a7fe26ba5d5a26c56752aa51c4ff824dbf8328ab609587d8fe847315ed81814034b4bd778494b5001ada8a0b9e34d7e5c41e956baa8d95ef36242093711a7acb129f7a00155448e4a3c0dc9d862a3a5cb0c34a081c4e11390b8a095903d3241cd90d6d5f24ae353dc8cc6fc31782155816dbd9410c52c57b5f1bb68c9694bcc6f9390df47e41f2d48ed861e8c6a66b7d15138e3c07e43e79c818abae56a1b0c076427120cd7909b98fc9150ae47ab014efea9c0c5721d81e70d45dd2feef5ada5272e7be8e5e6d942dc77fd83b34fe81ddf7eeba487607e987eda5d36943561facf847fc729510b25262c09e5975592a270c1e8bd4f1371df1f3c3ce81736c9dc344667f3779e8b3aba1c353df1629553a23e6b525bf39ee6ea787f111f7502664d4859b8c15a5f506d4d90d94bfa6005b8d66c2ce8ede0096690f270ec0f7eb2b322b61207e53b8c4a3b2b0d9e30a68f5e67d119a6c08ae3750cb1dc09bb626fa361539435ea29043ad4298a05743ff54f2f5275ca1e5b48e3daac15e989e3436ec1dd643c3463a90d1f254299902be066f4b307b2d5c89ac17cedaa316a71c78fc239d723d70d9b6f2a10d29d5f92f93f98bef204f148eb0e9324a3dff1d5b8c675d683d913f252ef9e2b78d433fae448bde58393f4ad51ca43523ee564810e4adf9862c4f5f40ab179afbe9c451d337ef0eb31237373c6ca050b5b9943912b8b824b9ff2cc1ba4e47cfc09f16c9c7925e7b631427c89f7892de3a72223dfdf8c442e6b580bc98dd8b3c9ac74fcb5cd91acd29707b2f559a63a4c34643a53a2c4ab98c57759236f51c0ca02f127efbd4a9d9cd11c3e5b27362c631a40bd5b1671ba0da6bc1327001e1a2901c43e975aa23e275cfcb37a114b7c2301a229878b3116a79bc12a2ff8e184848f6367d6253cb58c764d9b27d5fb065646fa464155e80706084c312004a88b45505dd7257e0c20440ec83777c63c04ca4e14df2d23c0159af9e558ddc5b1fad4acc5258343765a969ba020c9f40e585784c490a38e852805d992b13d8ad7e8dfbca5ad35d2372e9016b6ac8285856c5f09c9a85c716a810dc2c1bf0c70682ab352f6aa829fd54c47bdad74a318eac19ceb0faf01c39791c0ac182bcf666f76a1a6e71a41bf4e67f8a5cbd694386835ea5de1d6f785421163fbf802e82b85b01fe389f6dcd464bd68d7d8f93832ab9eb8d139caf41403b291147fa76905436b5a548ce610fd44dd1c69aa4afa01788d3b3876c694e492fbe6f8a74c03d76eec456efc022f30619d438089b1338699e3f5609ee21a8957e2d7846b791772012613f48790c59fcdb920bcd8d72495115a675f1bc036d8ef5fc479e8f13bb29a559ecfc254d47c53129b551830a1b1a05e10be26b878e21553cec2d013c9d713339af124f0810a83382fb8bf6b5c0f07c58301171764c59460f5b3fdc447f1bf964eec696c918c1a197302b41aaa0b139cce8344dc535915abc010c1afc792a7063a711efa935a718d155490c58d89a9b1b5870b68189c8ee6dabdabcfd155b207e486a2ff0a66763d42976f6bd9b230911bb9272b225856a04d5b93e49e2cafa7a8aa4dc63419fbb9e3d380f9aef22327128c886cb59d416348646563c8d2b54229a0353c9426917592eebb9ca5ba11ab10a9995fa4e3ebfa62cae9ad10855753e6e6987e9f6526e4c3f3b2c6a04d9e744054a1d2b74749db6fdccfffd742bf3a5c2b8db31ae90706bcb12d5302872ecd6730e949e015830abe5c7f3829833624ed7415fcedb5a791da0c5df7e9c4dd698a95476646691199307be9df7ff49a4d25e0d84c9570e5d86fcdfb758a73f679e463cb969061a1a503686b81e06c05f83993b8c82fd9b3ac4770419ba3d5fb0e9b0f11c28918827756b815de505562797e6b24414a5fbb2efd816a3e5556b20111ae3eff7064f773f014567bec31dce3e41263b9caf794ae5dfac0470d88ee4c82a8594f99dbbbcc560c0f40500e78d4ddf996da1c04053a19143af9ac2108afa01b873cb1d63805618af193c82b6a318eaaa07624199144c24bb411dfcc24002510a18c929317b7f9439b2bcbe3b8f8d8cd4ab2d00c1456351a27ca015fcfea72d2f21297bde4ee0f53fd213a6173642c5343188a41b2d68b380da2ceb3773b958c66308645988f2635756579faeae15e02361cf60422324619531e74915ef19c31a11f1574d0aa5258bf372814d99539a6b89002e3843d0a2b990d4380ca16a6505c31ba352d726f27840b62b709960fbfff92cd1c40a220162371ed582af58a85829906deb0b0e2fb45a22004fd00fd7b1ac07b8a8e6a86b42f00770fceab7728eec712d0a354cf2faa97e9b49f28bda192ecaa0b58c120f6c18cca09c03e5bd961bf66aafadff7c4e41c4f5e38ed26430a919338038a9cc0f6cb45f8bc85fab5c5c2ce8ab9ee906620523e8f63ccaa72e6e5a69e5d0b9b8a3d3a2dff1acb85612a0040217f6cca9a7df09cb691f98ab81f8649392377dcbaf092eb5c1c940dc5a2e7fc664c159164d52e3816175e122dfaf595bd3a6c82e90c25b3186f3b45ffe4ed544fdf921f16192a5133dbbb2d29e4cbf82c8b8d5b7fbbb1be46e230c622e0a8a595ee32898953c29079b5a79acc5d49e761d6f77ecd1f6dd04020942b4726460bdea5812e19e5a366779540d652d21819fcb7207ede60d026267ed164b911ab321d3f81d2f2361f6c8cf7f83f3ff10e90c68cfac500cb4e6dd4c33a27df642bf52c82bf7946d521e23c733e99802aac1f21c9f86161f33973016f4a9b55327b068abbf39ee34ce30d22dc90985e7f80ca632917d960bd3deb2cdbf66503b280b1525aa317aaca9d4896c3e8b52c4b4604456b987105942a21a566420501e4d15c813e94f2ce5ec8ce558d9b3eae4bd6f19dbb1e514586b4ea5c264c7ec3ba9d98bd6533a02e04c8096c0147f880b2c4f968a614ac36d01a8a211e4e8e1f4c8c89dd1a8ae158a0f62331bb0e94093b6aea587c796a872c228607a54b23f0fce38f8fe0fd3cf4328968cb317ea651542c4a3e00fb9a71386a34c56931828771f78cfa9709892e0588f4ffbbb8882d59249eb65a49bd7bff899026a39e588b61ab43be48fc12591c3e05776ac2fa2772213845deb2c5acb8b27a0d21fdc41c19217acfd2bce3a714233e60126cc5a625be0584f542a7cdf3b3e2cbce53c9872582617db7f8477408a6e28a55999807e06c8c1a238ba9e927949718c52fc216dbb1e10f25535d5511e3786a928c851f938819600bcb65f999a4b17adb885104710a51bb7c5b7481a7c5445e18c0bf65b9512be5b900bded6822c7242786a92280f2e668d570af2a377cd12c1aa8f6ada585b5ad54e745e1fb8c423fc5b8d446f137d1367e0dee4fb564389d65c7792ef69290c9fc73e63919e5a1c7f6777e9b4ea87c29c02001a3ab899e0070865b67537a141877f27934efc3dfd73081db78c60eba8ce8d3c3013e9ff345de3e6ab5d5490d1ab5c7b931b6fc7e261b861a206d7e0fedc6fcdcbb402f2a0f4e0850a634331e21f0519b54873a49bd417715d75157db4506d834eddd5030dac40d83ba95b658ee688d0902c2767bb5b47d68fc23e5891ed9acc27f0b09c10a576ebfecc2ead", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x5, {0x6, 0x3, 0x0, {0x0, 0x80000000000, 0x7, 0x5, 0x4, 0xfffffffffffffff7, 0x7ff, 0x5, 0x3, 0xa000, 0x8, 0x0, 0x0, 0xfffffffa, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 4.653538053s ago: executing program 5 (id=129): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e080039503230"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_IOCTL(r2, &(0x7f0000000200)={0x20, 0x0, 0x0, {0x4, 0x4, 0x2, 0x9}}, 0x20) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20e42, 0x0) 4.451129017s ago: executing program 2 (id=130): mkdir(0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r3 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) 4.328246348s ago: executing program 5 (id=131): mkdir(0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x118, 0x0, &(0x7f0000000000), 0x0) r3 = socket(0x10, 0x80003, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x20) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000019c0)=[{{&(0x7f0000000300)=@caif, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/187, 0xbb}, {0x0}, {&(0x7f0000000680)=""/76, 0x4c}, {0x0}, {&(0x7f0000000780)=""/33, 0x21}], 0x6, &(0x7f0000000800)=""/107, 0x6b}, 0x9}, {{&(0x7f0000000880)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001900)}, 0x66e8}], 0x2, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100"], 0x18}], 0x1}, 0x0) 3.764801852s ago: executing program 0 (id=132): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() r1 = socket$inet(0x2, 0x3, 0x1f) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000280)='./file0\x00', 0x0) 3.764362996s ago: executing program 3 (id=133): ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) 2.482618631s ago: executing program 2 (id=134): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f000068c000/0x3000)=nil) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x2, @private1, 0x8}, @in6={0xa, 0x4e21, 0xb, @remote, 0x89d2}, @in6={0xa, 0x4e21, 0x1, @remote, 0x7}], 0x54) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmdt(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8402240e}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000ffdbdf25070000", @ANYRES32=0x0, @ANYBLOB="d30808f58bb9e732890c36f4dd0043c9ad4f4482d2c3d9cb6ae6aa7ba3738621ab9ff33ec0ef710f922b2934209c9deeef6b1998974e81a410f59dd0dd35c5beb942e603a612f622b6731270fef7d1fd75dc61fe1637e0a794382891cbe237d235ca175fb714e57bfb2d6783019a46a002df2b2932f9592fa583d166918114b01de169"], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) unshare(0x2a020400) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x1000000) 2.01614205s ago: executing program 3 (id=135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x41, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 1.933577776s ago: executing program 4 (id=136): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x101003, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') mq_open(&(0x7f0000000a80)='\x00', 0x401, 0x41, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002800)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x3c, 0x0, &(0x7f0000002c40)) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'dh\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 1.183437392s ago: executing program 0 (id=137): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_INIT(r0, &(0x7f0000004e40)={0x50, 0x0, 0x0, {0x7, 0x9}}, 0x50) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x66) syz_fuse_handle_req(r0, &(0x7f0000004ec0)="608e00030b89436920150ad4a04be1edd90341f9c4a3ceb953b93e808063a5b976dd3f87a068d7f5471f70f2093dab6a6f94534e9ee5f426b0f2aaa4ab4023a4d91ec668a65ae19c0293de686ce4334ef28d7f83dd46c8eb5bf6a1000f5c44696e6fd24b3cfaaf7ae18acd9289a1600ebabe555871ea16d002c9de30b595c7ca6459d08e33763b135f9d7a18e9736e3ca9e87a6c9a77a4c1a1339fdb123dc039be56b63e867d9cb55b3c606984699e7108c00c58abdb78d669a981c1746f16e4a5846bdb6d40222102338ce53ac852750d4accb48e69ca379c3020863cc83198cc21d819e25d375b1a262599551d60b28d6368ef11f3eb21b5fbb1f204c1075c7a4102c25ae8ffe6a04f4c1f599cd4afebbd086e46e097eef9580837a454030abacdf49c8bfc5054a0bd9f18294afc8a59e7f901d0632b38f5b2a306dcabb5c62449aa0412b815d92c2c9b12a38fd4cc1bdfffb574f59c6512fbb3383aaaf62c84a290fab7e775da84837ec30cd39dbc0060cb2589db82597ac12acd2b9c293313f377c57d1728670a88f3b268b05f0ec987713f0ad3fb6224900d1d4b0878fd155113fa5e34d75a5f4bb21f3088e0169a70dca03881fa55e1858bf87110e124b54f06d53368736fbae12af859f5bdf65c0724563b7c98860bf1d2a864bbbf704fe319f7c362744ed93e451aaaa65dbf6f6ff913a850a24266b5ac4535ae43ed5dccb9d5fd5c53d4f3e01e00185b38ad662918c8d542403ecb4ced8d69bc384780cb16c6cafe57a2ccb7a5af9e2cb9b8f7bf39d25f6e44db2f50afa0df528c8b8d75fb5650a9c03264e22495183e412ebe3001a6a270f4bff3196e3d15ebc9345a1ce20a3eb85ebd7a1cd054841c97d030c69c559e86a1c994c203fe26b28c13993fe86c8e60d0c979ebb3330bd70799c8674115aa723ed85ab42c9ef28c54392c90f01899ec70fef503f97a017e576b8b94d5f04027203250004cc17c74f14e866dbc199ae7fcdbdfae171499d11e9ce20ba878c0493976389811e08d20bf22502c9557cd7790f724850abc1cd2f86958c950b46f68241682791957586adf1b1625ad80914506fe7fc71f31afd4204bad6a2564b17633bc7e75a293702f40dd32d1058609f863427258312856bc3146914c7fa42f9535f4d2ec3ee177cfc585d9cfd91c3096c95e0155e904be400419eef5650d493cca752e15d42956209bbc70c0f35c8ea157940f4039c7d9e99ab5f2628a29ebd6a65716825374a88726529d25622751eedb418633db2d49233ce6fa9240b8cfb999c57c1df190dec19d2be2726b54cec04c6a05f5c7cf2ec65870192c45640d355183faa93b3325f8abdc0e1c8f8cd7b502a4b5cfc458941930f2af529245f41d41769d0a7c43b0c30432905ad0268fe8b143fe2b4b7a90ed2f89a9c16ca02bc9d9b58832a355c595d00dba6cc3afe846c2836234984adf3881798cf3c5e6028b9ae7830abf904290f8d59bb43f58cd24e5ed9ea96dfb882e269de557284102a17f6f34440095e3162c812aab444307a4e30e321707e887d58f34f5d3e2816dd2d93014ae9a1fb2012d62e6a7cb63699d11bd564d16ed848ece01e68889c99ecfe022e0fccda28412311b81082854274278730fbb31f2a1623f1d12d7f7c29695c90a9235d4ba80d5aeca5cf6e990618fecfea8a0b20acf20ef5b5ce3180dc4c3803f837432dcbbf8fbb38cfb36841c6bf3cba0cafdc04fbdc8dba2aa712d13787e9666b9cdea0b212dca3197be20a6c5e7bb62513d871ab75ccc99d2707b98cdc10bf82bca3e06e5265b199ad9068c9bc8cfb881aca5d31d005ca28f5d03d609781384aef514bed18607e7480c60cefe677a969b1e5862602ddbe0432cffa2069a1d86af89fb1b485076ca7aaff6b99399a3f53e011d68dc7f854a7b5fb3ab2bba65874c6e605266f0a55aa35374c773d059f834df49f4d24cdbcc0c0c7cd99c598f32f8e0861cc46c00d2ec0e92c20211527a1225235eb558c26701ad58e95d364a604d9ca9c166e719ecebf3285960f4cb607c3992fa84ef9cbfc20333cd2c051b137cca082b6add5f1c4f40a6af1b588f7fbd3b0cc655adee151625225bc3c3094df43fa6477510660104d1c31beeba05ca42e7160e4708275d724f8dda3f8b63d853e21c48b7e23e3e05263e3ce438c701bffbf8055e553f875ffee73cde1fc278f4b5d29d7ef90e78311c34b9d8ad2ee248068a2eefc336597a8d017e1075058412decf1c6693bd35b169bce8534a9848d22919e94bd2fa38361bdabf934822d59893c7b238ea39f10e2a48f96eaf1c9920964e98d3e07d981f895500615a5463b7c522daeda7e8900c65daa0bf8af738a0f369b442615157fb2e1134417146977ba809398b37836dac45b5fccd6b68626735237f519bddeccf6d60fa32900979fa9ceb9328e6d6448b266dd0deea5b68296a4e97f96bc3e8a519de758f3e398c4d60c01ef7702ff73e6b4d64d436d3c47fe6e0088693223df9c76759e5f94d3a9efc67ecbc11641e4603b11dc73d33048b5eb13c38123f225712eb02bc24bc3b349cb6f00111e23bbee41b532fa9bf8d75b4048f665a9cb9ea5f2fad386f14e8af3311ab5bb9f4cd179b33c765cbd757c29af98678332c8fa52c028aaa5f42c4131030fe10a7ec94123ca876876200a4823d67e4b2948cc94e120151728133ca8f35551f1fdac8c5a580585367dcf1ef8210278207c9882bbd0c08e13bdc11a7c29b0fb105b92bcc06f1e7a4cde56685999810e5b91082fecd60f0e0b732f3b4d1c8878a70f6f5803f4334d3cb8c893e594490bee004b3e2500700092a6d1d5348b0871304f93db0f737dbe187e2b94cb171be7677bad830a49655aa9b1f96206029a847f09f7f0d312120c84db059c97430f7ebdb58d127217ad0dd22e351b0ce938a1b19982f8f62fec2075b4ca4797740630c9eef27f961e040de1638f7b3cd1cfb7a9fcc5ba18aad7b1d683d3a56cfc64159b38316661da4757352c8a42b3adee3b069b77231b5e468e7c2726002bf0b158f54502e4b93f97886954adbf55954dae6dec10dbee583ccdaffa1637cd1196345e255334253a7fe68c96d6003ce512c8e16c5fe3a9579f55c2bd325e3d1db855a83fff162e8e1b07aedf0bbff19604b49cff201902915595f8fd3cc144b1f605b6bed8f150a9443952e1fef40047b1f7e66c995bf482aa8bf9422a6bd47b165ca75555139de096c1c52ce7a34f4baaa4aadfb288575599222160481fe5684a8f9e2cd8c4f7a911b5358572a546560c420d2b29d5c4d8e4aaec77d4b7a1a1c2b8386dd81d4a84174524594d8f1d9375f5b7ccde66564ae451415e9fc779aad24820dc20a5468f2066117b578d85336b3fd6b18a15d69cec23db185cc2f8aeb1a1bc3a8dac944a0e7250b7eae949e75fc17a0368ced30ae4ca73055d751a95ee440417a7af71e15310549148913afe3c5bffed7234bdd876e6334a0c5229ec7d7a5c14254a46697049fbb6d9838f401da95016f93039f905738dded943d3c8044fdde5cbc50a32a67cce0c39e5b49a03e803533b3359563e8ab72200f72512cfe2747eef452cb500be39ba6ca685956636a83a122572ac6ae3902b95313cd04a0635a2ff9f6e5663a495509b852c7dd0f18f0d74ecb93ae65e7dfe2958398f61ea5258694ed644d98751ce5d1942aa2302f7cc48e780c8322fb34fee18a6298add61555fe8bfcb958e034ac0a5da142f414228dcf3b7688ba5411707fec094b228e563d40c2d739ace42002369ac3140734b4f2373cc807a84271b0f726d401829b06c82fedce708d63e02808a46da5d9840d9d1b05a499329943836b58daf03d7942153d40f053fac12cd9cbff008178415d34740a89cf7fc6121b6f57440a902fe530bb26fc1717ed82b8e2ed92176723bfeb1ba1d37004666d443f7075ade520d6697606dd94cbb119d223ddc37eba14ec462989ccc0ac37b7c0899b44deb1e76974040b38da409b2abdb86c74184d6f565cc0230b3ec5ca1d211d047227387b067fec595fd7449406cf229afeb874846eba45dd180c0c2d97c3a218468f6ca585cefd6c8278a075c9af33d5450de25ad23eda74e58fdc6ee4b6ab60e24a3bd7e2aedd4acd92db13ab3bc4e44cce6bf540f3998d5122e874626c7d51b7ee978d1235c7e07e3c59edd74aa1d05d345dfe69ed2e949b1385a24cdda0a2529128e74617f284f8abfa4a4fbb5cbf8f8deea891e373a70eb290ab47f80856eb1b9c3bea37feb9ab70f58a45c1b00ecd40213166711eecd549bf48425a098c4c7758a89d3ae239b604754e7bf757ee533a6de4f7f9b4538d4cf80051dff5c1a59b237c5641eb8f21d06067a44ff97e9d1f73b257fd78a39c90131d89befbf5edb9162bcc12ac634d730ba68ebc7c67a4b0a86eafb9b582bc4783b6b4154173c6fce0bc73630d112d24efa8d3612bfc6fa9faf047a825273330b2a32e1dc201d9e5713c8acc34bfdb20d831789d09723df1632bae307971f83379bbf541be5dda6a73917bd5e1fedbe99704593301a7f3e71e1452a0add363a0388eecb8d404690b0b725467782a4ef4f4ba4f563a41e547a64a751653680cb3ff0cbacea8650ab11c45e5d1a64ae1bb96b1ae7d93cc6af250502e2274c6c053b3673b3ce7850f4fdc27fa965eec5d62aca0704bff763125fc6546b94087d2e99eb8d2e64f32df90b3affa3539a4a6880d24d91ddef6421ddc81b1cb4b745fa097738314a63d882e4e59e3132475bbb37d95d66cac8e0c55dcd617e7b47fd352da79eacd2cf1158ad17ed725c0921688f89c89d8f304f28110cc039cedd9d1da5ba6695dfc70da209164654bb35e0273ccdc60e789371a2755c8984aef40fea1eaf65396a17b9a766d69ab9b89d9483dc77f8a18dbbd154fefe24bc0b2fa0ae8172ec7fc4b4737608da4e24f0d304c0415023d208d19124b66ddb12edc5eb92b63d970fab71c8b201e88f9526020fae8c7ab487eb3f43376a65d387f5ff76cc92ff81e2bce4abb02806386f502f30219408bb1dd0d45b96d4e4514282afa00e305f97d10ee5108590d427d383d3932cd33ee732ea5dfbfcd3944936ddc48573734551de273ca12df59c7b8af84f6e5552bdc343422747ea960b5ca01fff9be7afcc0efdff8f90564fe7910f9206b8449a1557142bc802c826fc9788c794ede0f894a7b7f9a989f15fe670eee2c0faa324100f562db9a904ed3e861ddee4fee1591559b5bdc77f0315221da44ae3cb3094779b2d0fe462b42e51c22611e4621cbf47c95cb8ca2b9f60c624658d2e01ef991ea8ff3f8bbf13250d54c08774060fea7441f002267fe8388f0a9e5edb77e925cdc76796cf40eef4ccdb873c3595374a3bdec07dc8e5fa70722331a7d3be104ce882b1fd3c232d916d30433c966933aa72d4386e17650c4dfa2ac8d5278eff59d5450b852d399aea48259d0a14aec32daeebd1b94b090dc131f163ab7bd03ede9e2d2b0afdebd623087e92d75444998bc66181bb932c35ad15a4b29ee5d5b6b1b6c0bef562a1f01ca44335081f3542301733cc0749c11df3269feb1311fd6ec3362675a75ddb67c96af3359628caf41a5c5159ca064c8dfa8b7fb8653a9036cab68c248eae8cccc0769088fc4818f8d833246dfc213d1fcc1bc41e3f335cf19687e5489d07e23cac20fff3332a3ba7aa0fa488c64d3dc8296b620ff667ab42cdb082ca9373c8e534b203b9825ec586988b07218f4066b7b58f869424d0c971bf32dd6c8c4f2dd4f8a52e3e6148824f832958577660b22c07ef9221264156ba93ce44dd1a0f4c2b7a191d089eb0ca353ce0e4e07d5def4b8369ed4b9f09b33b4dd226d7010c82637394c9f7631248732e6070da0fb6ae03ec6b67cec20775e8a236d432660739f129fe6827524ef406164987df9405e842c44477d7089b4c0881175a1e2a034694b24c5d6dbf988570b415045db2587bc0f434f5eb74f48e1db1dd9fa37101f0d289472b8fb7f1124ff2c9a47ba41ef4dca46176328fa49cb30e3f4740360ee9540c63949ba31d2445864e4fdef2170942232d1fd2b43dcd6fc7b955d2327f422af6bf8940f4f558f468276640820286de1752665e9d5d9f6a0e23b80705f204950987b5987896ed78b9789f9626a7ee8eab1d1abb5c63381b5e3c2897d33583d7396ca019a53c41412ee5be56f399e774aa84b76be406a9e002f4587bbfce4cd4085ef119812440fd671ca2949fe706f2d596c661cb2132855bb1227e1622e44f711caea4653b4b205b767f4259db1387fb44c73d5ee13e4ddb5b450cfcdda0d29ae9e171ebb76e69b76ce91369230107d6a3bff8e99fc7640ed1401f4b9e2eaed962d7dd4fc99e09d4236f5b36ad47adf83df9ca758db7d3f6c38899ee560f1170e7968e41b4f6ccca31fb5e99f71cdc7a9c4ea7ada08bf78bbcb3f73ccd8ec2bd1652a60b8f31e7bc29031fe87efd3ca66677ee7b952c13aae44bf4ef1ecf4744a7db62a6a646679d2291b4284301d0a0dd95e4dbc5888400aec12c9e18e49abf9b105dd5881ad21b02b4eee500fdbd329b6ca681408f1ef1b1a041cacc7f2c36be3e39caa99d427b0a25e7cc1675f2539ee315ea4a95f03044792ee3bdcbffa803c527aa4d60c5beb408a8dec85efc2f034dc4e5bbe5eeeea053994195f69d91085d55fe19267b3ec04bb26adc19243c7825708baee2ac4bde33fa2feb8684ac90ab231b3212f5c48fbb5fd5f9a20b0a413199d4c5a23040b865c552709e61ac50555c096993ce1d8e932cafd698c365f8beaf299dcd77e414501551d09bdf28d80a0e403321301c900a764fb89e7307a301d7aa999ce3b55bcc8421e9518683d1f63fdf9dd52eed5f6ff003e3fb73b8caea6b0733595496e472c7b311a70e3435694902001b0ec2408db343a75b07b7cf7dc48ba2f7d29b70e4f75e272be46cbbdc619bda44e74667f22254419a868ead1ccb975a13ab7633113bd9d0bb8f7a19376bacd7c35f68dfeaafd6c24c671cb2bf119ae268cf01d75bebde629f8858df1ce2f1370d14c4ad074723391aa1125874416ca809397f974bfb70a7a021732d91b6a4ccac59c8ee72d3d126ee6c1b62f266445db76eb6f6fdc182ba491317a8e596d51fe60da6cffacfa075f899b6738da43d47b77f29529b9ffa50a933ad476aaa6697f774d4dd27b94862e86272d8d0f39e179720115caf56147e5767e5ef7041913893710724a6f321698749b48d9c7bbd9761dbe265f94e4612f56c5b5f593c2ffe00238692330cbedfee21aa82ed16f98df796bb8647ba70c26a082e1a658943bd8aa3fb9e90cd765b63d25ae49a47f6c7edffdb825cd1411398ef3e5a1fb371ddb1a0ce07f7497eeba15c6d1ffe0321355bc3fe39fc88b8bb5cfc022d0094a9a5b483d1c6c630eccc1fd223c5759e337045fec674fec203a265515f50823efb09ea7443957f1811f69a03b066437bf13abcdc9e320d5681ad26866fe09aacb3b5137622cf9fdc89d1a66816657ddb52bafec4bdfa593c65a713999203c98bbd63c2f63f6514f67c0374e5abd2c7f6495944435318c757a4dee784f31dfbec25a10d6bbfccac755fb68961a9177955074368e4297cfa0973cfcb339a19d9a5e541658f5a8582a924eed66b651a0e82c9fd75f447e6a794ed5aaf06f9b4813d4a1ace0426c5fc87630f4571bb2fe20012e0914fffb812b2b6c7e1f7a4511479e5dbe6cb5f3b8260b53c8751ba28b516f6db22589540dfba5b15e9e591c66900034c341e148bed302013c314bb7ff18c4791884ff4b6be246818b08c8df037017878678c66b8a74313ae28e40e6c1c19890ea550b754c158e8cd76141ce7c1f053c49a25ac88e1d418ce1433492ef2358f2c84254d7eab7e4f296a0f3733487f025fdfc371b5418c75704825e206553623c69d328d7b50959e2c24f8033d896cb2e5a30d21c5eca87e833b02f7e5844039ed1fc452bd9e2f3f98c9a11a9ebe5e74fd411fa4243c9a8f6c5971a727be16fd9cb08ee1f6258cf9ce2283b2dfb4651ac1725ac17fafe007d5bd21efcaa82f44d14adf50c62c1105ca772b513b718348b651a864a6bb441c4e11a67540dcc20147b7c9314889c873baa8e2a11354d51506feb8ead84d9e8a493794688eed528e0ad2ffa45c366e029a1be13f21094549d24583ee8584247fdbeb1b6128482dc95678331ec399e866bc9d573e1e2f8df74abf7368ae9e40349a19d3341afaf325af88985fa9019a9f75ca166059c3abdb43a055ec03bf984a5efb8dd4acd17bef485e96386087552edad19786744540401e3ad0c80c83628c382fd56e56b98a976fc2414f2f1c7e45a519aae3929247f55d534283f29a27f0e5f0e006886a110973b1ff0a0d60923192f5eb8570a37b7ab082ffe3f6ec91807ea3ce567ac5fdbe5f04c56388c744beef5aa04fdbb6cdd0524cfaac0d4b7bc78f2c2042da8088c6a19a7b255ea03f03e771bbb04ef6b21366c7125ec3f1aeb75a160e0cbf962ed29afb369f926d3ae939503148f9bc276d4c0ef9b5a0e3a96d480bd71111311c25eb12454c01383afc61c39f7c75923e09b021c77e91245f14fe1e478ff335166929a344b43868f9662e8fbba99d1afe3f69cdad144cd921ae529a859661e61b4d6393a50c9a2827a10adb898e0bbe49f456d4b55edfa3aaf357bed003929dde4ef57ef23599657c3ff25c3ccd20471d4f31957eca2103354c59e852d9e5c81174797290c12f70d9416ae538234ef76c60d93723b44b99d61279c8d7f1dab6d73217e3106b448c8abda566b70befd778d3615c368b503145c7f9e25295d41be0aae0169fb83a2c7b04912036bef128f57617b14eaf51f92f9b5d6918d37e65e45ed3f5a9087440eb7ce9ddc8ddb124a0f044e5bca64f826500966b300bf1190108a82b6fcfd1b1e963e4636d0292a479d2879386ebf74554891e0838d04947a375b189630ff869a809cde0cf5ad4d85a1d57e29e1d01d6f332adc2e84a86ff98f9125962094aaadbcbca43c9b69fa72fed82e7723a90cea7f39c263ca1d62987a06c89e378e8c81a5790beecfe23208528fe78e7a0c3e99a0659d58047b8236cbcd7c9f517cbbba2bb067048ac9d81a35524df5ea470b7bb283ce8b9e504cae6b4cf7f7f943ba0c8a0e4114f4c472af6f57ce8bb1ceeb708b2ed8ac50dc56a7ee8a5a2ab65a7de76eae194d5e5282c114dfe22aa9242522d51058126cf291232693816cb5c0ff43ac28148fe9986e9e0a4e1c3d9aff505c16a20a8244393bee300050a59457d8441546b46bb1bb2cee95345a2c76d1b5d79789014a637931b6b2b7d02b8e59c36494bfac9c887c70b6b1a4cc3d82701a720f22fcbed7ee103aae5089e72208a4cb02c82df1bd1f6be6ce5080c1f02ece41823c79154eae7bbdd0b0fc8238362dbcb19c72b92b244043337d223f874ad37ed0875d83ed0234989becc432d2009bd4fc886058f2d62b662c67a74de31f0fd69f5459c06aa92b8cf06e8c9dbf8dc9868b603c676b5935ecf3d8974ce4f47d6a4105fc414d1da1569fc647f1e54826ae70b1f1a57f544d2a9a07e146ccc68dd1ad0c3347ebbbd39908ac09ef3da032ba388463da475c685731ba06bcb16f5d606a48b594ac9406e2bf887f22f2e2c7fc376c0d7b4141b1c92446c3b95a976b35c3b46cddc8f27a369d979e56af18986521a98c6c3a760989182eccba21aeebbc1a6a5139d36fdbb5a3f0ff5dc4c67ed240acff8a99e9391f3efcac544c1b2ff5d5697b2db0cfaf7c7150067dbf0b4d657fc8724a3e78f618e549e96a42ac8c754d911f00bebf9f789e4c13533f0ee4541aae9353303b87d66e1916a503ef6fcffed8b7e40162cfbbf752fec7e18dcdcb924391f429651b29651fe6af47cc7749bf4dc40684cef2aff2bc77cfdb717523e34cf4cb248026f4e68654c1fe23e1c6130e0af620018b19f716a632c38881b8821411be11c4d509eb56a1f336491ce43e070f012b930ad3a328b1ff006b7be86fac5caa581f4475398e1431f1dd53532a10195e5897e89f537e707913d87fd9e3dd01cb2f4bb48e1680c1477ad53a6e7579bbf95ecb99301c999a817b20f198e42ef93ad2410de503c02e9a5c152395744b2f43c4d4d76a1f8ea140ab245f443b89d42ce8dcbd45b0cc7c7d4e74e3e4ee8013d6c4702fa9cfb57577c305112034f92da87c2f75501d6b8995c35a80f376176d6b4241753626f80138aea8ba72972cc975046c489e0b7814eff5b0ce4f080c59dfa3a422ecd961a11ee6748828e53207ef2bc411262c15fcff1aafef46aa40cfe2ce5819c1e0abb926c29af8de4f7466fccc4c68b8819f638a52d25e200ddcd57c673c51c67778f3618000cfa7447a6e7b5b607ffeac3b7596f37dd5bded6ceeaac8fa75e33b8080f979188cc4041cb598b2a5c283a734c53d40a0a92de51724ed8603e5bd3a206fffe8ac8f73f2d9540255c723caea23564bf1d9815ce09ac2a6ced824cc6d83e3207d23115b0282c67084759dfcb0e247fcd8165a23f8a8669d1f63135bdc4f222c95e7d9048d7bed4d4ccdfa48d79b6f9626afc12b8a8633011757e419401cc84e5c422cc0a075a106547c60b332d34c4d53dd9d90db13597a44b4e9b9ef12f5d3fa43164e187a5698589abd0736c2cbe3cb72ead5ba0532c6afca3db0723f693c0dfe0309f53e94001d562e88dbf750bc163169f6b60759685f9c075f0b7f6645171f9df0649ed0fee18265b6e55e283b2df84a8ff50880f24a4e0f72bb230b500769a1b809e237132beeee5c6990427e1d5bdea0d30e13d69a3ebfb9994e6788c5c1592c42f7d535b15c0cd013dc14a6480491cd7a02db7f96609bc7f29c2256b66dc1f0083c451bc5134d5d5a82b5d4fed0763c6c1be01e086d15f17a215b5bd457f03d00fa7396e9d3f12adb9e979d01d0554f7e49744c19e5fd16e1711deab71747a65a84c00543243ce8d96eb6256380d7a10bcfb965db2ce67f42d413f872b321d919b03f425602f99a856b8f4447de2704cf2b511a0888438cbdab3a8fe8dd931ecee8adaff5241a5a1cfbd52c968df27a2062a9d641928c5580dc2ffe64d1a30123807c5ed5a73a13d71f6e5cf6e66ea5fdbe7e74a3046f3f17867d0eb0b5212fc1fdf8abb75b753c88b7232500f6af4cf9d9c4066c44b0cf0722b70419153a2e153a0bdf2302f64058fdd8b95a23e1660817733d7103238449073e95a718acd647e87e37df165f4802673216d48c2aaf5df7e70d153bf689dedb7c2eec8a957a5821b493c4caf1bc253f5e9cfc7e85d65425e7fa9ace912c4a4b9d804a91434828d24cca143cb0e83a38bd0ec3387328401d2b8fdd67f1aa6cbc8f334875dcd923d2403ddb792896628ad1ec0fccd61a81804e5fa5695ed6e9a898252b21e2b480bd799de802d01a272c42603faa091ea501e9c506da3e5a77e54a316fc34e92f0c169fe52a146bf29cd2983dc02617f147cfac112be612926cdf2699f0c3586205356d60e600ca502e36a48819a8adc35f4c4a775f40ce77bf1f330230300a48a8dd9e15d9bcc8bc658", 0x2000, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 751.116292ms ago: executing program 2 (id=138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000040)='\f\x00', 0x2, 0x1200, &(0x7f0000000340)={0x2, 0x4e22}, 0x10) 444.184141ms ago: executing program 2 (id=139): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x1c, r0, 0xf25, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x404c040) 443.633206ms ago: executing program 5 (id=140): socket$nl_netfilter(0x10, 0x3, 0xc) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 362.132824ms ago: executing program 0 (id=141): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x8000000000000009, 0x4) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r5, 0x5418, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="eac8b17bc4570080ffe8534fc11799e6551f5b045058fde55328081c2d7d28a761b351b7b7c33746065bc5b96e205e8593cf2d5a7a0ea220bda32fd00100010000000000017a2a5d8e887515aa9dad3854452a7dfaa416c38c9b53bd64"], 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x86b1b18158a7cb82) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000002b00)={0x59, 0x1, 0x7, 0x4, 0x0, 0x63f8cf8fc3a6a8ac}) dup3(0xffffffffffffffff, r0, 0x0) 259.955969ms ago: executing program 3 (id=142): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) 0s ago: executing program 4 (id=143): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0xfffffffc}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 86.193107][ T5816] cgroup: Unknown subsys name 'net' [ 86.306948][ T5816] cgroup: Unknown subsys name 'cpuset' [ 86.315817][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.853920][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.364158][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.373332][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.387013][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.403157][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.412054][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.420994][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.429931][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.439121][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.446672][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.450521][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.461497][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.469621][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.479300][ T5137] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.487383][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.499806][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.527337][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.542852][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.555587][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.563635][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.568966][ T5137] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.571189][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.586851][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.588538][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.594044][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.609408][ T5137] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.616624][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.617755][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.638206][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.645804][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.653538][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.662823][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.663120][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.671211][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.685755][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.692520][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.700428][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.313772][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 93.344647][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 93.425446][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 93.508946][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 93.593351][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 93.640144][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 93.715510][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.724049][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.731604][ T5828] bridge_slave_0: entered allmulticast mode [ 93.739170][ T5828] bridge_slave_0: entered promiscuous mode [ 93.754212][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.761392][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.769050][ T5831] bridge_slave_0: entered allmulticast mode [ 93.777511][ T5831] bridge_slave_0: entered promiscuous mode [ 93.821794][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.829219][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.836956][ T5828] bridge_slave_1: entered allmulticast mode [ 93.844253][ T5828] bridge_slave_1: entered promiscuous mode [ 93.857892][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.866455][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.874338][ T5831] bridge_slave_1: entered allmulticast mode [ 93.881668][ T5831] bridge_slave_1: entered promiscuous mode [ 93.958998][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.972080][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.979852][ T5849] bridge_slave_0: entered allmulticast mode [ 93.987386][ T5849] bridge_slave_0: entered promiscuous mode [ 94.038106][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.045406][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.052839][ T5845] bridge_slave_0: entered allmulticast mode [ 94.059670][ T5845] bridge_slave_0: entered promiscuous mode [ 94.070046][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.079548][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.087935][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.095377][ T5849] bridge_slave_1: entered allmulticast mode [ 94.102149][ T5849] bridge_slave_1: entered promiscuous mode [ 94.109111][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.116352][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.123732][ T5837] bridge_slave_0: entered allmulticast mode [ 94.130572][ T5837] bridge_slave_0: entered promiscuous mode [ 94.159130][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.171265][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.181243][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.188948][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.196249][ T5845] bridge_slave_1: entered allmulticast mode [ 94.203478][ T5845] bridge_slave_1: entered promiscuous mode [ 94.220686][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.248970][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.260984][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.269485][ T5837] bridge_slave_1: entered allmulticast mode [ 94.276757][ T5837] bridge_slave_1: entered promiscuous mode [ 94.293490][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.300582][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.308015][ T5830] bridge_slave_0: entered allmulticast mode [ 94.315208][ T5830] bridge_slave_0: entered promiscuous mode [ 94.323323][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.330468][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.337745][ T5830] bridge_slave_1: entered allmulticast mode [ 94.344903][ T5830] bridge_slave_1: entered promiscuous mode [ 94.397613][ T5831] team0: Port device team_slave_0 added [ 94.424703][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.452008][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.486445][ T5828] team0: Port device team_slave_0 added [ 94.496467][ T5828] team0: Port device team_slave_1 added [ 94.505314][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.517753][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.529333][ T5831] team0: Port device team_slave_1 added [ 94.547906][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.569982][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.580164][ T5843] Bluetooth: hci0: command tx timeout [ 94.596944][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.653903][ T5843] Bluetooth: hci2: command tx timeout [ 94.674264][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.690462][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.697764][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.724196][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.733750][ T5843] Bluetooth: hci5: command tx timeout [ 94.740402][ T54] Bluetooth: hci4: command tx timeout [ 94.740447][ T5839] Bluetooth: hci1: command tx timeout [ 94.746085][ T5848] Bluetooth: hci3: command tx timeout [ 94.758609][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.766204][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.793291][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.820041][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.827271][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.853709][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.867246][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.874391][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.900675][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.915813][ T5849] team0: Port device team_slave_0 added [ 94.953149][ T5845] team0: Port device team_slave_0 added [ 94.966270][ T5849] team0: Port device team_slave_1 added [ 94.977933][ T5837] team0: Port device team_slave_0 added [ 94.998022][ T5830] team0: Port device team_slave_0 added [ 95.009314][ T5845] team0: Port device team_slave_1 added [ 95.051162][ T5837] team0: Port device team_slave_1 added [ 95.069638][ T5830] team0: Port device team_slave_1 added [ 95.123741][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.130789][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.162563][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.200924][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.208200][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.234958][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.247909][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.258157][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.285170][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.298073][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.305345][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.331472][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.354503][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.361526][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.389002][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.401360][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.408660][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.434955][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.460633][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.468026][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.494250][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.522701][ T5831] hsr_slave_0: entered promiscuous mode [ 95.529501][ T5831] hsr_slave_1: entered promiscuous mode [ 95.558063][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.565314][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.592541][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.608473][ T5828] hsr_slave_0: entered promiscuous mode [ 95.616706][ T5828] hsr_slave_1: entered promiscuous mode [ 95.626016][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.634112][ T5828] Cannot create hsr debugfs directory [ 95.751262][ T5849] hsr_slave_0: entered promiscuous mode [ 95.758127][ T5849] hsr_slave_1: entered promiscuous mode [ 95.765025][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.774398][ T5849] Cannot create hsr debugfs directory [ 95.788578][ T5830] hsr_slave_0: entered promiscuous mode [ 95.800700][ T5830] hsr_slave_1: entered promiscuous mode [ 95.807059][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.814799][ T5830] Cannot create hsr debugfs directory [ 95.894956][ T5845] hsr_slave_0: entered promiscuous mode [ 95.901211][ T5845] hsr_slave_1: entered promiscuous mode [ 95.907968][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.915702][ T5845] Cannot create hsr debugfs directory [ 95.976597][ T5837] hsr_slave_0: entered promiscuous mode [ 95.983877][ T5837] hsr_slave_1: entered promiscuous mode [ 95.990124][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.998523][ T5837] Cannot create hsr debugfs directory [ 96.488451][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.503297][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.534466][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.549684][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.563264][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.577346][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.608002][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.619499][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.653050][ T5843] Bluetooth: hci0: command tx timeout [ 96.725484][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.733042][ T5843] Bluetooth: hci2: command tx timeout [ 96.741852][ T25] cfg80211: failed to load regulatory.db [ 96.762651][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.808470][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.815871][ T5843] Bluetooth: hci1: command tx timeout [ 96.821338][ T5843] Bluetooth: hci5: command tx timeout [ 96.823467][ T5848] Bluetooth: hci3: command tx timeout [ 96.829405][ T54] Bluetooth: hci4: command tx timeout [ 96.844175][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.933805][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.951895][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.972022][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.009106][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.078723][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.089528][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.105450][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.122283][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.146161][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.244457][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.274996][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.286340][ T5845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.306928][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.314181][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.329089][ T5845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.348984][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.356094][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.376974][ T5845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.390208][ T5845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.434923][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.468066][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.475204][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.521777][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.529223][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.567262][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.637016][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.672622][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.691278][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.722129][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.729272][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.756267][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.804898][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.812192][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.866655][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.883527][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.890630][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.949296][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.956463][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.978516][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.986087][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.000560][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.007654][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.118931][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.136950][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.201613][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.271511][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.381881][ T5831] veth0_vlan: entered promiscuous mode [ 98.441297][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.477860][ T5828] veth0_vlan: entered promiscuous mode [ 98.490848][ T5831] veth1_vlan: entered promiscuous mode [ 98.553480][ T5828] veth1_vlan: entered promiscuous mode [ 98.583823][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.591051][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.617548][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.624814][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.736293][ T5843] Bluetooth: hci0: command tx timeout [ 98.748302][ T5831] veth0_macvtap: entered promiscuous mode [ 98.763006][ T5828] veth0_macvtap: entered promiscuous mode [ 98.789014][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.808707][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.823172][ T5843] Bluetooth: hci2: command tx timeout [ 98.844476][ T5831] veth1_macvtap: entered promiscuous mode [ 98.866220][ T5828] veth1_macvtap: entered promiscuous mode [ 98.892954][ T5843] Bluetooth: hci5: command tx timeout [ 98.898463][ T5843] Bluetooth: hci3: command tx timeout [ 98.904223][ T54] Bluetooth: hci4: command tx timeout [ 98.909735][ T54] Bluetooth: hci1: command tx timeout [ 98.949626][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.984105][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.015070][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.044888][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.082966][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.105012][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.118668][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.159620][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.180761][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.200995][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.252085][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.270423][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.279546][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.297197][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.312303][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.324911][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.335849][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.344783][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.383856][ T5837] veth0_vlan: entered promiscuous mode [ 99.457145][ T5837] veth1_vlan: entered promiscuous mode [ 99.530154][ T5830] veth0_vlan: entered promiscuous mode [ 99.564698][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.616238][ T5849] veth0_vlan: entered promiscuous mode [ 99.654099][ T5830] veth1_vlan: entered promiscuous mode [ 99.661297][ T5837] veth0_macvtap: entered promiscuous mode [ 99.699102][ T5837] veth1_macvtap: entered promiscuous mode [ 99.751873][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.764048][ T5849] veth1_vlan: entered promiscuous mode [ 99.779508][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.815609][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.829611][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.878819][ T5830] veth0_macvtap: entered promiscuous mode [ 99.891596][ T5830] veth1_macvtap: entered promiscuous mode [ 99.949718][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.964509][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.973121][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.980811][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.993438][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.007641][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.019492][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.030476][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.043267][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.085608][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.111089][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.122892][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.133875][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.146109][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.159821][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.171308][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.182438][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.193066][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.203441][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.214669][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.227267][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.252302][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.261371][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.261568][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.286216][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.295076][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.316960][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.338837][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.358888][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.371021][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.388140][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.400403][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.420603][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.451357][ T5849] veth0_macvtap: entered promiscuous mode [ 100.505180][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.523581][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.535378][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.545671][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.561772][ T5849] veth1_macvtap: entered promiscuous mode [ 100.587598][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.599699][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.610076][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.642056][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.667813][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.689125][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.707228][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.731680][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.755119][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.812750][ T54] Bluetooth: hci0: command tx timeout [ 100.887900][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.819814][ T54] Bluetooth: hci2: command tx timeout [ 101.825371][ T5843] Bluetooth: hci4: command tx timeout [ 101.825436][ T5839] Bluetooth: hci5: command tx timeout [ 101.830800][ T5843] Bluetooth: hci1: command tx timeout [ 101.836315][ T5848] Bluetooth: hci3: command tx timeout [ 101.848736][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.859111][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.869721][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.918220][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.931614][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.972891][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.995072][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.012246][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.152703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.267355][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.318506][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.359746][ T5947] Bluetooth: MGMT ver 1.23 [ 102.364871][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.399363][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.034627][ T5845] veth0_vlan: entered promiscuous mode [ 103.097852][ T5845] veth1_vlan: entered promiscuous mode [ 103.237173][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.260460][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.311074][ T5845] veth0_macvtap: entered promiscuous mode [ 103.329030][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.363100][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.402091][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.410757][ T5845] veth1_macvtap: entered promiscuous mode [ 103.433398][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.503237][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.515014][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.636336][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.660372][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.676862][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.705582][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.736078][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.755110][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.770801][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.805377][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.818708][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.834471][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.846409][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.868455][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.877091][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.409796][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.452597][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.487843][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.527810][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.575816][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.622700][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.664666][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.675451][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.693182][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.703772][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.716173][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.758044][ T5964] netlink: 'syz.1.14': attribute type 10 has an invalid length. [ 104.792623][ T5964] netlink: 55 bytes leftover after parsing attributes in process `syz.1.14'. [ 104.804077][ T5845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.826229][ T5845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.837380][ T5845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.846864][ T5845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.379501][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.389121][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.335957][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.359211][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.760900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.872882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.881990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.890804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.000408][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.031902][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.580254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.264525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.525796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.628246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.730710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.789945][ T6039] ubi0: attaching mtd0 [ 111.866331][ T6039] ubi0: scanning is finished [ 111.871025][ T6039] ubi0: empty MTD device detected [ 111.905741][ T6038] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 111.912653][ T6038] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 111.954199][ T6038] vhci_hcd vhci_hcd.0: Device attached [ 112.215154][ T5894] vhci_hcd: vhci_device speed not set [ 112.346232][ T5894] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 113.138397][ T6041] vhci_hcd: connection closed [ 113.141245][ T6004] vhci_hcd: stop threads [ 113.164163][ T6004] vhci_hcd: release socket [ 113.197225][ T6004] vhci_hcd: disconnect device [ 113.203594][ T5894] usb 43-1: enqueue for inactive port 0 [ 113.395910][ T5894] vhci_hcd: vhci_device speed not set [ 113.558926][ T6055] loop1: detected capacity change from 0 to 512 [ 113.639866][ T6055] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.195031][ T6039] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 114.302559][ T6055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.378640][ T6055] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.443669][ T6064] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 114.872309][ T6071] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.341002][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.805042][ T968] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 117.190566][ T968] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.248362][ T968] usb 5-1: not running at top speed; connect to a high speed hub [ 117.292882][ T968] usb 5-1: config 7 has an invalid interface number: 180 but max is 0 [ 117.301304][ T968] usb 5-1: config 7 has no interface number 0 [ 117.372523][ T968] usb 5-1: config 7 interface 180 has no altsetting 0 [ 117.427570][ T968] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=3c.f2 [ 117.503540][ T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.511782][ T968] usb 5-1: Product: syz [ 118.424137][ T968] usb 5-1: Manufacturer: syz [ 118.579647][ T968] usb 5-1: SerialNumber: syz [ 120.446104][ T968] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 120.712736][ T968] gspca_topro: reg_w err -71 [ 120.824549][ T968] gspca_topro: Sensor soi763a [ 121.803769][ T968] usb 5-1: USB disconnect, device number 2 [ 123.950384][ T6147] netlink: 'syz.3.61': attribute type 27 has an invalid length. [ 124.536877][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.545674][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.583195][ T6156] syz.4.64 (6156): drop_caches: 2 [ 125.935626][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.980220][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.238253][ T6147] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.248277][ T6147] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.258432][ T6147] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.268750][ T6147] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.549961][ T6150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.583352][ T6150] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.624316][ T6150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.157413][ T6166] binder: 6165:6166 ioctl 4018620d 0 returned -22 [ 127.225971][ T6169] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[6169] [ 127.881198][ T6169] netlink: 36 bytes leftover after parsing attributes in process `syz.5.69'. [ 129.503573][ T29] audit: type=1800 audit(1738218716.964:2): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.72" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 133.504534][ T6213] netlink: 173 bytes leftover after parsing attributes in process `syz.0.80'. [ 138.093489][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.421444][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.029063][ T6268] netlink: 40 bytes leftover after parsing attributes in process `syz.4.100'. [ 139.830227][ T6276] fuse: Unknown parameter 'group_i00000000000000000000' [ 143.985279][ T6316] 9pnet_fd: Insufficient options for proto=fd [ 144.233563][ T29] audit: type=1326 audit(1738218732.634:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.5.118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ff5b8cda9 code=0x0 [ 147.071024][ T6337] evm: overlay not supported [ 148.265135][ T5839] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 148.274618][ T5839] Bluetooth: hci4: Injecting HCI hardware error event [ 148.285454][ T5848] Bluetooth: hci4: hardware error 0x00 [ 148.903050][ T6360] Zero length message leads to an empty skb [ 150.493689][ T5848] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 152.832586][ T5892] IPVS: starting estimator thread 0... [ 152.933064][ T6447] IPVS: using max 17 ests per chain, 40800 per kthread [ 153.654263][ T6460] ubi0: attaching mtd0 [ 153.703477][ T6460] ubi0: scanning is finished [ 153.873649][ T6460] ================================================================== [ 153.881798][ T6460] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x3ac/0x420 [ 153.890448][ T6460] Read of size 4 at addr ffff8880356b18d8 by task syz.3.142/6460 [ 153.898212][ T6460] [ 153.900572][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.3.142 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 153.900618][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.900640][ T6460] Call Trace: [ 153.900651][ T6460] [ 153.900665][ T6460] dump_stack_lvl+0x116/0x1f0 [ 153.900733][ T6460] print_report+0xc3/0x620 [ 153.900793][ T6460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.900855][ T6460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.900915][ T6460] ? __phys_addr+0xc6/0x150 [ 153.900954][ T6460] kasan_report+0xd9/0x110 [ 153.901013][ T6460] ? notifier_chain_register+0x3ac/0x420 [ 153.901055][ T6460] ? notifier_chain_register+0x3ac/0x420 [ 153.901101][ T6460] notifier_chain_register+0x3ac/0x420 [ 153.901144][ T6460] blocking_notifier_chain_register+0x76/0xd0 [ 153.901198][ T6460] ubi_wl_init+0x1018/0x17b0 [ 153.901263][ T6460] ubi_attach+0x1b92/0x4c00 [ 153.901333][ T6460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 153.901387][ T6460] ? lockdep_init_map_type+0x16d/0x7d0 [ 153.901444][ T6460] ? __pfx_ubi_attach+0x10/0x10 [ 153.901501][ T6460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.901566][ T6460] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 153.901607][ T6460] ubi_attach_mtd_dev+0x158f/0x3590 [ 153.901654][ T6460] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 153.901691][ T6460] ? __pfx_get_mtd_device+0x10/0x10 [ 153.901747][ T6460] ctrl_cdev_ioctl+0x339/0x3d0 [ 153.901784][ T6460] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 153.901827][ T6460] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 153.901866][ T6460] __x64_sys_ioctl+0x193/0x200 [ 153.901913][ T6460] do_syscall_64+0xcd/0x250 [ 153.901953][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.902007][ T6460] RIP: 0033:0x7f36a338cda9 [ 153.902034][ T6460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.902071][ T6460] RSP: 002b:00007f36a41c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.902105][ T6460] RAX: ffffffffffffffda RBX: 00007f36a35a5fa0 RCX: 00007f36a338cda9 [ 153.902130][ T6460] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000004 [ 153.902153][ T6460] RBP: 00007f36a340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.902183][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.902206][ T6460] R13: 0000000000000000 R14: 00007f36a35a5fa0 R15: 00007ffe4f176748 [ 153.902241][ T6460] [ 153.902254][ T6460] [ 154.142167][ T6460] Allocated by task 6039: [ 154.146531][ T6460] kasan_save_stack+0x33/0x60 [ 154.151283][ T6460] kasan_save_track+0x14/0x30 [ 154.156033][ T6460] __kasan_kmalloc+0xaa/0xb0 [ 154.160695][ T6460] ubi_attach_mtd_dev+0x3ce/0x3590 [ 154.165860][ T6460] ctrl_cdev_ioctl+0x339/0x3d0 [ 154.170681][ T6460] __x64_sys_ioctl+0x193/0x200 [ 154.175506][ T6460] do_syscall_64+0xcd/0x250 [ 154.180067][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.186036][ T6460] [ 154.188374][ T6460] Freed by task 6039: [ 154.192384][ T6460] kasan_save_stack+0x33/0x60 [ 154.197144][ T6460] kasan_save_track+0x14/0x30 [ 154.201895][ T6460] kasan_save_free_info+0x3b/0x60 [ 154.206981][ T6460] __kasan_slab_free+0x51/0x70 [ 154.211816][ T6460] kfree+0x2c4/0x4d0 [ 154.215778][ T6460] device_release+0xa4/0x240 [ 154.220444][ T6460] kobject_put+0x1e7/0x5a0 [ 154.224917][ T6460] put_device+0x1f/0x30 [ 154.229143][ T6460] ubi_attach_mtd_dev+0xe25/0x3590 [ 154.234310][ T6460] ctrl_cdev_ioctl+0x339/0x3d0 [ 154.239123][ T6460] __x64_sys_ioctl+0x193/0x200 [ 154.244121][ T6460] do_syscall_64+0xcd/0x250 [ 154.248680][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.254647][ T6460] [ 154.257175][ T6460] The buggy address belongs to the object at ffff8880356b0000 [ 154.257175][ T6460] which belongs to the cache kmalloc-8k of size 8192 [ 154.271277][ T6460] The buggy address is located 6360 bytes inside of [ 154.271277][ T6460] freed 8192-byte region [ffff8880356b0000, ffff8880356b2000) [ 154.285302][ T6460] [ 154.287674][ T6460] The buggy address belongs to the physical page: [ 154.294122][ T6460] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880356b0000 pfn:0x356b0 [ 154.304238][ T6460] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 154.312785][ T6460] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 154.320812][ T6460] page_type: f5(slab) [ 154.324840][ T6460] raw: 00fff00000000040 ffff88801b042280 0000000000000000 dead000000000001 [ 154.333482][ T6460] raw: ffff8880356b0000 0000000000020001 00000000f5000000 0000000000000000 [ 154.342206][ T6460] head: 00fff00000000040 ffff88801b042280 0000000000000000 dead000000000001 [ 154.350930][ T6460] head: ffff8880356b0000 0000000000020001 00000000f5000000 0000000000000000 [ 154.359739][ T6460] head: 00fff00000000003 ffffea0000d5ac01 ffffffffffffffff 0000000000000000 [ 154.368464][ T6460] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 154.377171][ T6460] page dumped because: kasan: bad access detected [ 154.383622][ T6460] page_owner tracks the page as allocated [ 154.389370][ T6460] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5819, tgid 5819 (sh), ts 86558872017, free_ts 86458050646 [ 154.409239][ T6460] post_alloc_hook+0x181/0x1b0 [ 154.414074][ T6460] get_page_from_freelist+0xfce/0x2f80 [ 154.419606][ T6460] __alloc_frozen_pages_noprof+0x221/0x2470 [ 154.425576][ T6460] alloc_pages_mpol+0x1fc/0x540 [ 154.430674][ T6460] new_slab+0x23d/0x330 [ 154.434893][ T6460] ___slab_alloc+0xc5d/0x1720 [ 154.439638][ T6460] __slab_alloc.constprop.0+0x56/0xb0 [ 154.445087][ T6460] __kmalloc_cache_noprof+0xfa/0x410 [ 154.450446][ T6460] tomoyo_init_log+0xcb3/0x2170 [ 154.455354][ T6460] tomoyo_supervisor+0x313/0x12f0 [ 154.460454][ T6460] tomoyo_env_perm+0x193/0x210 [ 154.465292][ T6460] tomoyo_find_next_domain+0xed4/0x20c0 [ 154.470912][ T6460] tomoyo_bprm_check_security+0x12e/0x1d0 [ 154.476700][ T6460] security_bprm_check+0x1b9/0x1e0 [ 154.481886][ T6460] bprm_execve+0x832/0x16d0 [ 154.486456][ T6460] do_execveat_common.isra.0+0x4a2/0x610 [ 154.492332][ T6460] page last free pid 5816 tgid 5816 stack trace: [ 154.498697][ T6460] free_frozen_pages+0x6db/0xfb0 [ 154.503703][ T6460] vfree+0x174/0x950 [ 154.507656][ T6460] kcov_put+0x2a/0x40 [ 154.511703][ T6460] kcov_close+0xd/0x20 [ 154.515841][ T6460] __fput+0x402/0xb70 [ 154.519870][ T6460] __fput_sync+0xa1/0xc0 [ 154.524171][ T6460] __x64_sys_close+0x86/0x100 [ 154.528916][ T6460] do_syscall_64+0xcd/0x250 [ 154.533466][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.539600][ T6460] [ 154.541947][ T6460] Memory state around the buggy address: [ 154.547610][ T6460] ffff8880356b1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.555713][ T6460] ffff8880356b1800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.563818][ T6460] >ffff8880356b1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.571915][ T6460] ^ [ 154.578887][ T6460] ffff8880356b1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.586999][ T6460] ffff8880356b1980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.595097][ T6460] ================================================================== [ 155.277037][ T6460] Disabling lock debugging due to kernel taint [ 155.311904][ T6460] ================================================================== [ 155.320048][ T6460] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x3c8/0x420 [ 155.328518][ T6460] Read of size 8 at addr ffff8880356b18d0 by task syz.3.142/6460 [ 155.336270][ T6460] [ 155.338619][ T6460] CPU: 1 UID: 0 PID: 6460 Comm: syz.3.142 Tainted: G B 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 155.338671][ T6460] Tainted: [B]=BAD_PAGE [ 155.338684][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 155.338707][ T6460] Call Trace: [ 155.338720][ T6460] [ 155.338734][ T6460] dump_stack_lvl+0x116/0x1f0 [ 155.338801][ T6460] print_report+0xc3/0x620 [ 155.338861][ T6460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.338923][ T6460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.338984][ T6460] ? __phys_addr+0xc6/0x150 [ 155.339023][ T6460] kasan_report+0xd9/0x110 [ 155.339081][ T6460] ? notifier_chain_register+0x3c8/0x420 [ 155.339124][ T6460] ? notifier_chain_register+0x3c8/0x420 [ 155.339168][ T6460] notifier_chain_register+0x3c8/0x420 [ 155.339211][ T6460] blocking_notifier_chain_register+0x76/0xd0 [ 155.339255][ T6460] ubi_wl_init+0x1018/0x17b0 [ 155.339320][ T6460] ubi_attach+0x1b92/0x4c00 [ 155.339387][ T6460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.339446][ T6460] ? lockdep_init_map_type+0x16d/0x7d0 [ 155.339504][ T6460] ? __pfx_ubi_attach+0x10/0x10 [ 155.339561][ T6460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.339625][ T6460] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 155.339666][ T6460] ubi_attach_mtd_dev+0x158f/0x3590 [ 155.339711][ T6460] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 155.339748][ T6460] ? __pfx_get_mtd_device+0x10/0x10 [ 155.339804][ T6460] ctrl_cdev_ioctl+0x339/0x3d0 [ 155.339841][ T6460] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 155.339884][ T6460] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 155.339923][ T6460] __x64_sys_ioctl+0x193/0x200 [ 155.339969][ T6460] do_syscall_64+0xcd/0x250 [ 155.340008][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.340062][ T6460] RIP: 0033:0x7f36a338cda9 [ 155.340090][ T6460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.340127][ T6460] RSP: 002b:00007f36a41c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.340161][ T6460] RAX: ffffffffffffffda RBX: 00007f36a35a5fa0 RCX: 00007f36a338cda9 [ 155.340185][ T6460] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000004 [ 155.340209][ T6460] RBP: 00007f36a340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.340232][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.340255][ T6460] R13: 0000000000000000 R14: 00007f36a35a5fa0 R15: 00007ffe4f176748 [ 155.340293][ T6460] [ 155.340305][ T6460] [ 155.585014][ T6460] Allocated by task 6039: [ 155.589337][ T6460] kasan_save_stack+0x33/0x60 [ 155.594033][ T6460] kasan_save_track+0x14/0x30 [ 155.598726][ T6460] __kasan_kmalloc+0xaa/0xb0 [ 155.603333][ T6460] ubi_attach_mtd_dev+0x3ce/0x3590 [ 155.608450][ T6460] ctrl_cdev_ioctl+0x339/0x3d0 [ 155.613228][ T6460] __x64_sys_ioctl+0x193/0x200 [ 155.617999][ T6460] do_syscall_64+0xcd/0x250 [ 155.622506][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.628411][ T6460] [ 155.630728][ T6460] Freed by task 6039: [ 155.634788][ T6460] kasan_save_stack+0x33/0x60 [ 155.639498][ T6460] kasan_save_track+0x14/0x30 [ 155.644214][ T6460] kasan_save_free_info+0x3b/0x60 [ 155.649248][ T6460] __kasan_slab_free+0x51/0x70 [ 155.654027][ T6460] kfree+0x2c4/0x4d0 [ 155.657933][ T6460] device_release+0xa4/0x240 [ 155.662538][ T6460] kobject_put+0x1e7/0x5a0 [ 155.666960][ T6460] put_device+0x1f/0x30 [ 155.671127][ T6460] ubi_attach_mtd_dev+0xe25/0x3590 [ 155.676250][ T6460] ctrl_cdev_ioctl+0x339/0x3d0 [ 155.681021][ T6460] __x64_sys_ioctl+0x193/0x200 [ 155.685889][ T6460] do_syscall_64+0xcd/0x250 [ 155.690573][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.696486][ T6460] [ 155.698804][ T6460] The buggy address belongs to the object at ffff8880356b0000 [ 155.698804][ T6460] which belongs to the cache kmalloc-8k of size 8192 [ 155.713051][ T6460] The buggy address is located 6352 bytes inside of [ 155.713051][ T6460] freed 8192-byte region [ffff8880356b0000, ffff8880356b2000) [ 155.727049][ T6460] [ 155.729453][ T6460] The buggy address belongs to the physical page: [ 155.735856][ T6460] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880356b0000 pfn:0x356b0 [ 155.745920][ T6460] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 155.754418][ T6460] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 155.762411][ T6460] page_type: f5(slab) [ 155.766416][ T6460] raw: 00fff00000000040 ffff88801b042280 0000000000000000 dead000000000001 [ 155.775008][ T6460] raw: ffff8880356b0000 0000000000020001 00000000f5000000 0000000000000000 [ 155.783601][ T6460] head: 00fff00000000040 ffff88801b042280 0000000000000000 dead000000000001 [ 155.792289][ T6460] head: ffff8880356b0000 0000000000020001 00000000f5000000 0000000000000000 [ 155.800967][ T6460] head: 00fff00000000003 ffffea0000d5ac01 ffffffffffffffff 0000000000000000 [ 155.809643][ T6460] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 155.818411][ T6460] page dumped because: kasan: bad access detected [ 155.824821][ T6460] page_owner tracks the page as allocated [ 155.830610][ T6460] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5819, tgid 5819 (sh), ts 86558872017, free_ts 86458050646 [ 155.850331][ T6460] post_alloc_hook+0x181/0x1b0 [ 155.855115][ T6460] get_page_from_freelist+0xfce/0x2f80 [ 155.860611][ T6460] __alloc_frozen_pages_noprof+0x221/0x2470 [ 155.866523][ T6460] alloc_pages_mpol+0x1fc/0x540 [ 155.871393][ T6460] new_slab+0x23d/0x330 [ 155.875581][ T6460] ___slab_alloc+0xc5d/0x1720 [ 155.880266][ T6460] __slab_alloc.constprop.0+0x56/0xb0 [ 155.885652][ T6460] __kmalloc_cache_noprof+0xfa/0x410 [ 155.890947][ T6460] tomoyo_init_log+0xcb3/0x2170 [ 155.895828][ T6460] tomoyo_supervisor+0x313/0x12f0 [ 155.900864][ T6460] tomoyo_env_perm+0x193/0x210 [ 155.905734][ T6460] tomoyo_find_next_domain+0xed4/0x20c0 [ 155.911321][ T6460] tomoyo_bprm_check_security+0x12e/0x1d0 [ 155.917077][ T6460] security_bprm_check+0x1b9/0x1e0 [ 155.922205][ T6460] bprm_execve+0x832/0x16d0 [ 155.926720][ T6460] do_execveat_common.isra.0+0x4a2/0x610 [ 155.932377][ T6460] page last free pid 5816 tgid 5816 stack trace: [ 155.938718][ T6460] free_frozen_pages+0x6db/0xfb0 [ 155.943693][ T6460] vfree+0x174/0x950 [ 155.947616][ T6460] kcov_put+0x2a/0x40 [ 155.951610][ T6460] kcov_close+0xd/0x20 [ 155.955699][ T6460] __fput+0x402/0xb70 [ 155.959685][ T6460] __fput_sync+0xa1/0xc0 [ 155.963930][ T6460] __x64_sys_close+0x86/0x100 [ 155.968612][ T6460] do_syscall_64+0xcd/0x250 [ 155.973118][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.979028][ T6460] [ 155.981348][ T6460] Memory state around the buggy address: [ 155.986973][ T6460] ffff8880356b1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.995031][ T6460] ffff8880356b1800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.003123][ T6460] >ffff8880356b1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.011217][ T6460] ^ [ 156.017995][ T6460] ffff8880356b1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.026075][ T6460] ffff8880356b1980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.034408][ T6460] ================================================================== [ 156.070853][ T6460] ================================================================== [ 156.078997][ T6460] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x403/0x420 [ 156.087460][ T6460] Write of size 8 at addr ffff8880356b18d0 by task syz.3.142/6460 [ 156.095469][ T6460] [ 156.097810][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.3.142 Tainted: G B 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 156.097861][ T6460] Tainted: [B]=BAD_PAGE [ 156.097874][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 156.097895][ T6460] Call Trace: [ 156.097908][ T6460] [ 156.097922][ T6460] dump_stack_lvl+0x116/0x1f0 [ 156.097989][ T6460] print_report+0xc3/0x620 [ 156.098047][ T6460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.098109][ T6460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.098168][ T6460] ? __phys_addr+0xc6/0x150 [ 156.098207][ T6460] kasan_report+0xd9/0x110 [ 156.098264][ T6460] ? notifier_chain_register+0x403/0x420 [ 156.098305][ T6460] ? notifier_chain_register+0x403/0x420 [ 156.098348][ T6460] notifier_chain_register+0x403/0x420 [ 156.098390][ T6460] blocking_notifier_chain_register+0x76/0xd0 [ 156.098439][ T6460] ubi_wl_init+0x1018/0x17b0 [ 156.098503][ T6460] ubi_attach+0x1b92/0x4c00 [ 156.098570][ T6460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 156.098622][ T6460] ? lockdep_init_map_type+0x16d/0x7d0 [ 156.098679][ T6460] ? __pfx_ubi_attach+0x10/0x10 [ 156.098735][ T6460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.098799][ T6460] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 156.098839][ T6460] ubi_attach_mtd_dev+0x158f/0x3590 [ 156.098883][ T6460] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 156.098919][ T6460] ? __pfx_get_mtd_device+0x10/0x10 [ 156.098974][ T6460] ctrl_cdev_ioctl+0x339/0x3d0 [ 156.099010][ T6460] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 156.099052][ T6460] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 156.099090][ T6460] __x64_sys_ioctl+0x193/0x200 [ 156.099135][ T6460] do_syscall_64+0xcd/0x250 [ 156.099173][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.099226][ T6460] RIP: 0033:0x7f36a338cda9 [ 156.099254][ T6460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.099288][ T6460] RSP: 002b:00007f36a41c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.099321][ T6460] RAX: ffffffffffffffda RBX: 00007f36a35a5fa0 RCX: 00007f36a338cda9 [ 156.099346][ T6460] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000004 [ 156.099369][ T6460] RBP: 00007f36a340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 156.099391][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.099418][ T6460] R13: 0000000000000000 R14: 00007f36a35a5fa0 R15: 00007ffe4f176748 [ 156.099451][ T6460] [ 156.099463][ T6460] [ 156.344682][ T6460] Allocated by task 6039: [ 156.349022][ T6460] kasan_save_stack+0x33/0x60 [ 156.353737][ T6460] kasan_save_track+0x14/0x30 [ 156.358465][ T6460] __kasan_kmalloc+0xaa/0xb0 [ 156.363107][ T6460] ubi_attach_mtd_dev+0x3ce/0x3590 [ 156.368275][ T6460] ctrl_cdev_ioctl+0x339/0x3d0 [ 156.373093][ T6460] __x64_sys_ioctl+0x193/0x200 [ 156.377916][ T6460] do_syscall_64+0xcd/0x250 [ 156.382479][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.388529][ T6460] [ 156.390861][ T6460] Freed by task 6039: [ 156.394851][ T6460] kasan_save_stack+0x33/0x60 [ 156.399826][ T6460] kasan_save_track+0x14/0x30 [ 156.404645][ T6460] kasan_save_free_info+0x3b/0x60 [ 156.409821][ T6460] __kasan_slab_free+0x51/0x70 [ 156.414630][ T6460] kfree+0x2c4/0x4d0 [ 156.418571][ T6460] device_release+0xa4/0x240 [ 156.423284][ T6460] kobject_put+0x1e7/0x5a0 [ 156.427736][ T6460] put_device+0x1f/0x30 [ 156.431926][ T6460] ubi_attach_mtd_dev+0xe25/0x3590 [ 156.437071][ T6460] ctrl_cdev_ioctl+0x339/0x3d0 [ 156.441899][ T6460] __x64_sys_ioctl+0x193/0x200 [ 156.446698][ T6460] do_syscall_64+0xcd/0x250 [ 156.451258][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.457192][ T6460] [ 156.459652][ T6460] The buggy address belongs to the object at ffff8880356b0000 [ 156.459652][ T6460] which belongs to the cache kmalloc-8k of size 8192 [ 156.473723][ T6460] The buggy address is located 6352 bytes inside of [ 156.473723][ T6460] freed 8192-byte region [ffff8880356b0000, ffff8880356b2000) [ 156.487718][ T6460] [ 156.490051][ T6460] The buggy address belongs to the physical page: [ 156.496469][ T6460] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880356b0000 pfn:0x356b0 [ 156.506653][ T6460] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 156.515169][ T6460] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 156.523217][ T6460] page_type: f5(slab) [ 156.527242][ T6460] raw: 00fff00000000040 ffff88801b042280 0000000000000000 dead000000000001 [ 156.535896][ T6460] raw: ffff8880356b0000 0000000000020001 00000000f5000000 0000000000000000 [ 156.544538][ T6460] head: 00fff00000000040 ffff88801b042280 0000000000000000 dead000000000001 [ 156.553353][ T6460] head: ffff8880356b0000 0000000000020001 00000000f5000000 0000000000000000 [ 156.562141][ T6460] head: 00fff00000000003 ffffea0000d5ac01 ffffffffffffffff 0000000000000000 [ 156.570834][ T6460] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 156.579606][ T6460] page dumped because: kasan: bad access detected [ 156.586028][ T6460] page_owner tracks the page as allocated [ 156.591759][ T6460] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5819, tgid 5819 (sh), ts 86558872017, free_ts 86458050646 [ 156.611517][ T6460] post_alloc_hook+0x181/0x1b0 [ 156.616317][ T6460] get_page_from_freelist+0xfce/0x2f80 [ 156.621944][ T6460] __alloc_frozen_pages_noprof+0x221/0x2470 [ 156.627929][ T6460] alloc_pages_mpol+0x1fc/0x540 [ 156.632826][ T6460] new_slab+0x23d/0x330 [ 156.637038][ T6460] ___slab_alloc+0xc5d/0x1720 [ 156.641747][ T6460] __slab_alloc.constprop.0+0x56/0xb0 [ 156.647157][ T6460] __kmalloc_cache_noprof+0xfa/0x410 [ 156.652571][ T6460] tomoyo_init_log+0xcb3/0x2170 [ 156.657453][ T6460] tomoyo_supervisor+0x313/0x12f0 [ 156.662535][ T6460] tomoyo_env_perm+0x193/0x210 [ 156.667336][ T6460] tomoyo_find_next_domain+0xed4/0x20c0 [ 156.672921][ T6460] tomoyo_bprm_check_security+0x12e/0x1d0 [ 156.678695][ T6460] security_bprm_check+0x1b9/0x1e0 [ 156.683844][ T6460] bprm_execve+0x832/0x16d0 [ 156.688383][ T6460] do_execveat_common.isra.0+0x4a2/0x610 [ 156.694068][ T6460] page last free pid 5816 tgid 5816 stack trace: [ 156.700446][ T6460] free_frozen_pages+0x6db/0xfb0 [ 156.705426][ T6460] vfree+0x174/0x950 [ 156.709351][ T6460] kcov_put+0x2a/0x40 [ 156.713402][ T6460] kcov_close+0xd/0x20 [ 156.717526][ T6460] __fput+0x402/0xb70 [ 156.721531][ T6460] __fput_sync+0xa1/0xc0 [ 156.725808][ T6460] __x64_sys_close+0x86/0x100 [ 156.730496][ T6460] do_syscall_64+0xcd/0x250 [ 156.735005][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.740915][ T6460] [ 156.743233][ T6460] Memory state around the buggy address: [ 156.748854][ T6460] ffff8880356b1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.756915][ T6460] ffff8880356b1800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.765001][ T6460] >ffff8880356b1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.773161][ T6460] ^ [ 156.779830][ T6460] ffff8880356b1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.787912][ T6460] ffff8880356b1980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.795971][ T6460] ================================================================== [ 156.807481][ T6460] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 156.815224][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.3.142 Tainted: G B 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 156.827066][ T6460] Tainted: [B]=BAD_PAGE [ 156.831212][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 156.841352][ T6460] Call Trace: [ 156.844629][ T6460] [ 156.847558][ T6460] dump_stack_lvl+0x3d/0x1f0 [ 156.852179][ T6460] panic+0x71d/0x800 [ 156.856087][ T6460] ? __pfx_panic+0x10/0x10 [ 156.860513][ T6460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.866261][ T6460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.871919][ T6460] ? preempt_schedule_common+0x44/0xc0 [ 156.877401][ T6460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.883062][ T6460] ? preempt_schedule_thunk+0x1a/0x30 [ 156.888453][ T6460] end_report+0x169/0x180 [ 156.892808][ T6460] kasan_report+0xe9/0x110 [ 156.897247][ T6460] ? notifier_chain_register+0x403/0x420 [ 156.902888][ T6460] ? notifier_chain_register+0x403/0x420 [ 156.908552][ T6460] notifier_chain_register+0x403/0x420 [ 156.914032][ T6460] blocking_notifier_chain_register+0x76/0xd0 [ 156.920134][ T6460] ubi_wl_init+0x1018/0x17b0 [ 156.924766][ T6460] ubi_attach+0x1b92/0x4c00 [ 156.929312][ T6460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 156.935674][ T6460] ? lockdep_init_map_type+0x16d/0x7d0 [ 156.941520][ T6460] ? __pfx_ubi_attach+0x10/0x10 [ 156.946495][ T6460] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.952166][ T6460] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 156.957590][ T6460] ubi_attach_mtd_dev+0x158f/0x3590 [ 156.962815][ T6460] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 156.968375][ T6460] ? __pfx_get_mtd_device+0x10/0x10 [ 156.973610][ T6460] ctrl_cdev_ioctl+0x339/0x3d0 [ 156.978389][ T6460] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 156.983699][ T6460] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 156.989002][ T6460] __x64_sys_ioctl+0x193/0x200 [ 156.993791][ T6460] do_syscall_64+0xcd/0x250 [ 156.998311][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.004409][ T6460] RIP: 0033:0x7f36a338cda9 [ 157.008836][ T6460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.028470][ T6460] RSP: 002b:00007f36a41c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.036911][ T6460] RAX: ffffffffffffffda RBX: 00007f36a35a5fa0 RCX: 00007f36a338cda9 [ 157.044928][ T6460] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000004 [ 157.053350][ T6460] RBP: 00007f36a340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 157.061426][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.069418][ T6460] R13: 0000000000000000 R14: 00007f36a35a5fa0 R15: 00007ffe4f176748 [ 157.077413][ T6460] [ 157.080651][ T6460] Kernel Offset: disabled [ 157.084978][ T6460] Rebooting in 86400 seconds..