last executing test programs: 38.670545064s ago: executing program 4 (id=341): r0 = socket$packet(0x11, 0xa, 0x300) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r5}) mknod(0x0, 0x40, 0x40000007) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="00008100010000000000000000004500005800000000002f9078ac141402ffffffff0420880b000000000000087b190086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x66) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e20, @local}]}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x654, 0x5, 0xfffffff7, 0xe, 0x7}, &(0x7f0000000180)=0x14) fcntl$getownex(r7, 0x10, &(0x7f0000000280)={0x0, 0x0}) capset(&(0x7f00000002c0)={0x20071026, r10}, &(0x7f0000000300)={0x7, 0x82, 0x800, 0x1}) 36.591187487s ago: executing program 4 (id=342): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x585, &(0x7f0000000580)="$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") r0 = inotify_init1(0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "4355d6a7b33748f9", "7e71f289f9defc56f3ddee32b0931efb621f3c1a1d7806a7b4dec1e1d1ca357c", "9a9f4427", "6bd7a11112ef29ca"}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) mount$binder(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x150007a2) socket$inet6(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000000280), 0x0, 0xbec1) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4702}, {}], 0x2, 0x0, 0x0, 0x0) close(r5) 35.594350025s ago: executing program 4 (id=344): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioperm(0x0, 0x23d, 0xe) bpf$BPF_PROG_TEST_RUN(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) openat$nvram(0xffffffffffffff9c, &(0x7f00000058c0), 0x4, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000011c0)="2b1547db68f5ec1b919a4c18e861e538a87855ee6256731f1a0fe5cdbd5ad56f16344237a338c1", 0x27}, {&(0x7f0000001280)="7dbffac90e9d5997db11ed3619d44a945820d9a06e4d52557d14b1048d1f801f6ea4ab48bb27e9489e32616180b99e5ac164f23b5f5fc2ec5e9371064a36e8ae9bc50d58c0ff2279fdffa1583094da8584d353ddbf8761", 0x57}, {0x0}, {0x0}, {&(0x7f0000002440)="8f", 0x1}, {&(0x7f00000024c0)="63fc0db7fc6903f473eb7c9068690a4cd4720cdef568cf726810a1e1a4af99f188c7e12d31ccfbb2d87eec820270a2cbc9dd679cfee8e2f32e2633b7cd1265be40e5b2689df05880cc15a58beb8de499ff61f5876aded2ac5c4972", 0x5b}, {&(0x7f0000002580)}], 0x7, &(0x7f0000002e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}}, {{&(0x7f0000003280)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000003b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x80, 0x8840}}, {{&(0x7f0000003c80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000003d00)="772e91957fdb4b1fa88b54304e1dc8a9eb1e66dbf7bc066efff4d014c233ab20be035199e99e5cf9a5cc9b556bf1ffb69e035c6e882565fb68dd9440abe2c1527da861871ced1d5d2195e010e4cfa8e83c91cb502ceddbfdecad846706c8a72afd77033325fd80b60fb6666577157834cdf1fe07f7eadcccd4f64a1cf98c6906d36ab20a47e5668964cf8a31", 0x8c}, {&(0x7f0000003dc0)="1a7b1ab6167ae5a7637207ca45d1ae19734c45f313367e2bddfa2bfa32a3e7882bf6c76908e938ad3be49771b7cb5b00f4b37fbf13600f905d8bba6d3a8ae8cf6e2adca869992d886c155a10bb5c9901a44d79", 0x53}, {&(0x7f0000003e40)="21ce49252976bbffff544cf6b5c94cf3eacbacaa47ae33d6026bad746377cee6f208c1610cff1aef53869b13928b6807c66c55c08a42f2205e3edcdf499050db8605f4757c5030", 0x47}, {&(0x7f0000003ec0)="4558d32fd666b869a9f4c3143ce254aafb01756bb6393f9db42d841069c0724056f7d5f8b867e7749f1fb28fa45d441aa9b0cd711ceed84204a851de8b0d006b7c860cb24ac329309623006d1c9b0d612b670a1832c2922f18d58b6f992b01ed8fb61c996a7af8f48f37006b0d61644c6740ce8505f31c619f17083b45dd04beff08018d35a54fc1ee124876b2c1dac8474ba5ad37d368144a8aa2fbd1f1678a217b03b53d429a10d4d2175a0b359bbc27ca48d536662f5f567c8cec9341b369d5dda38e8fc4e1ff1761b695f52eff5c00", 0xd1}, {0x0}], 0x5, 0x0, 0x0, 0x40044}}, {{&(0x7f0000004140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005600)=[{0x0}, {&(0x7f0000005280)="4aa3d242722f3b7ba7cdd52310fca4cfba4888a3a21e746ee60f4fe8bd27f45f9d8f1b4fd75de74af8621c7bdec665e3062a2135bdccef5018321fa0db60bfec08f8ecd464fc5ca62a9e01d0ed6a273db9389b67205dea81d8d026649e231de879faaef205a4d82648dabb45ff71f6acddb58a8c6b746607ad6bda17b5b2a7edb01584e6edef59dd92f44a2c4e130554a05f32408c490060c425cfbc0cd8396f25cae0fa94c2e70489f53b24b5bdd236b0", 0xb1}, {0x0}, {&(0x7f0000005480)}, {&(0x7f0000005540)="19ab4e7e40d921f5cec75c130edc7c8176e3260dae7f5b77fcb7be6e5ffcea68862f1d3d025bade5ef2e7c37d9414d295fbf7c7767d0e351003f14f5b15503f51d1d8b9815e485510228e23de39fb3136b56e0d86c88d4c41534331b711e10a6b3146d5a15fd20d0a7453f6e0b28c28d1e428f1e1fb85c6579251ad693158361676e4ea29663d94eeb1cc431fa1d354baaf57b8c11d48d2fdfffff2cad738e729d29", 0xa2}, {0x0}], 0x6, &(0x7f00000057c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005900)=[@rights={{0x10}}], 0x10, 0x94}}], 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_read_part_table(0x5bf, &(0x7f0000000000)="$eJzs27GrI0UcB/DvbpLdPPCINpYauMbKK6wf90TuHgcWh2AnaGsjIlgIShIUbdTKxsJ/4JorBCvrQ/wLRDi0ENRKxEItfCOb7Cbrs5IgevD5sEx+85uZ30xgttzwYCuLSTK5lJzWdTXEiz+SzYtPJ+1y25/1+W7C83du3Ly1vF01+1yV/LRO6r5O1zTJY/vCWfbR59N8cOf8vQ8/erPJOutvVkk+SdZJaYejbdfm4+Zvh/6tGorz33riUr/aN511Hs58G11Lf8sm23TaLmrePXr/u6f3Nte7oOw2PWkOuyc5S/Lj4XbXWV3dRbP8fJFZvdwP9bfp+u54f9UmpZTZqMzwFsxGuz31xberbJrdyGS0tnP/JHn1/nNPVqMaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8/5TetnOWR+ZJ1T1V8ulsmDTdPnmmme76v48XHefu6b3F2++8VueN05e/euWt785/mP+SZJJr5w+Vtt3PeyntaNU0qS+SPHpy7P5lKPv6C+P0Mpt8efXrx+tJSlkc8rOqaz9L1nn2sBYAAAAAAAAAAAAAAAAAAACOdOPmreXtuhq+rq+HfMk8qS594F5+LaWcpTTj5Kr/rZJ8n1KNx5pkcSVJ+36TfmCdlHJl/i/9Hf6hPwMAAP//+iNa6w==") r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e2701"], 0xb8}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0, 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 29.018972126s ago: executing program 4 (id=349): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() ioprio_set$pid(0x2, r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000240)={'dvmrp1\x00', 0x6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) migrate_pages(r0, 0xff, &(0x7f0000000140)=0xc, &(0x7f0000000180)=0x80000001) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53c, &(0x7f00000025c0)="$eJzs3c9vI1cdAPDvTH52mzZb6AEqYBcoLGi19sbbrqpe2r2AUFUJUXFAHLYh8UZh7XWIndKESKR/A0ggcYI/gQMSB6SeOHDjyA0hlQPSAhFog0SF0YwnqZvYjWkcm8afjzQ7P178vu/FO/Oe38TzAphYVyNiLyJmI+L1iFgsjifFEi93luznHu3vrhzs767Ef9rt1/6W5OnZseh6TebxIs/5iPjGVyO+k5yM29zeub9cq1U3i/1yq75Rbm7v3FivL69V16oPKpXbS7dvvnDr+crQ6nql/suHX1l/5Zu/+fWn3/n93pd/kBVroUjrrscwdao+cxQnMx0Rr5xHsDGYKtazYy4HH04aER+LiM/l5/9iTOX/OwGAi6zdXoz2Yvc+AHDRpfkYWJKWirGAhUjTUqkzhvd0XEprjWbr+r3G1oPVzljZ5ZhJ54q+wvfyf2eSe+u16lKelqfn+5Vj+7ci4qmI+PHcY/l+aaVRWx1PlwcAJt7jx9r/f8512v8B9LirBwB8ZMyPuwAAwMhp/wFg8mj/AWDyDND+Fzf79869LADAaPj8DwCTR/sPAJNH+w8AE+Xrr76aLe2D4vnXq29sb91vvHFjtdq8X6pvrZRWGpsbpbVGYy1/Zk/9tPxqjcbG0nOx9Wa5VW22ys3tnbv1xtaD1t38ud53qzMjqRUA8EGeuvL2H5KI2HvxsXwJcznAxEjHXQBgbKbGXQBgbMz2BZNr8PH4351rOYDx6fkw7/mem+/30/8hiL8zgv8r1z7Zf/z/eN/AfQG4WIz/w+T6cOP/Lw29HMDo9Rr/18+HydBuJ8fn/J89SgIALqQzfB+v/cNhdUKAsTptMu+h3P8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC2YhIr4bSVoq5gJfiDQtlSKeiIjLMZPcW69Vb0bEk3ElImbmsv2lcRcaADij9C9JMf/XtcVnF46nzib/motiTvDv/+y1n7y53GptLmXH/350fO5w+rDKe687w7yCAMCQ5e13pVh3fZB/tL+7criMsjwP78S7xVTEKwf7u/nSSZmO6Xw9n/clLv0jKfY7c5E+ExFTQ4i/91ZEfOKo/sm77XYRP8nHRi4XM592x48i9hPDj9/1+z8eP31f/DRP66yzztfHj+WbDqFscNG9fSciXu51/qVxNV/3Pv/n8yvU2T2808ns8Np30BX/8Po31SN+ds5fHTTGc7/92omD7cVO2lsRz0z3ip8cxU/6xH92wPh//NRnfvRSn7T2zyOuRe/43bHKrfpGubm9c2O9vrxWXas+qFRuL92++cKt5yvlfIy6fDhSfdJfX7z+ZL+yZfW/1Cf+fM/6zx699gsD1v8X/37925/9gPhf+nzv9//pnvE7sjbxiwPGX770q77Td2fxV/vU/7T3//qA8d/5887qgD8KAIxAc3vn/nKtVt0800b2aXMY+ZzYyIo41AxP2fhTjC7WqRsz5/VbPfeN6aO+4nBz/laW44irkw69FmfaeDSqWOO9LgHn772TftwlAQAAAAAAAAAAAAAA+hnFV5fGXUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAurv8GAAD//5S5ywU=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000004d40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0x208e24b) 20.333572918s ago: executing program 0 (id=359): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) syz_open_dev$I2C(&(0x7f0000000240), 0xffffffffffffffff, 0x5b9100) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000080)) r7 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r7}) ioctl$VHOST_NET_SET_BACKEND(r6, 0xaf02, 0x0) 17.521713589s ago: executing program 0 (id=363): sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x90) mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x2000000000000130, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000000000000000000003000000851000000600000018110000", @ANYRES32, @ANYBLOB="00b702000000000000850000008600000064000000000000001800000000000000000000000100000095000000000000009500000000000000291f46d40b54a4a91009d5f51668718439e039405a3b44481a2163af3cdc8f1352f6149a42a0fd4d5219289ceee25c6afea8a6f640da7d139d3f938e47fd00000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) accept(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x37000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000400), 0x4) getsockopt$MRT6(r0, 0x29, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xfdef) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000480), 0xfc, 0x1) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000100)}, {&(0x7f0000005a40)="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", 0xffe}], 0x2) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="0001000000000000897c637dadeb608727d6fca47b0000000074001c00028008"], 0x48}}, 0x0) 16.89818488s ago: executing program 0 (id=366): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0081"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = open$dir(&(0x7f0000000300)='./file0\x00', 0x438c40, 0x0) r5 = open_tree(r4, &(0x7f0000000340)='./file0\x00', 0x89901) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r7, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x1e27, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x3ad6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 15.707088122s ago: executing program 0 (id=370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x90) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@umask={'umask', 0x3d, 0x3f}}, {@umask={'umask', 0x3d, 0x9}}, {@umask={'umask', 0x3d, 0x361274c1}}, {@dmask={'dmask', 0x3d, 0x9}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@errors_continue}]}, 0x5, 0x1518, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) r5 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r5, &(0x7f0000000480)=""/170, 0xaa, 0x40002120, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x4, @local, 0x8000}, 0x80) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r6, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x37000}]) 14.227983043s ago: executing program 2 (id=372): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303020026006500000002000020"]) 14.048661117s ago: executing program 0 (id=373): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0) preadv(r4, &(0x7f0000000840)=[{&(0x7f0000000640)=""/39, 0x27}], 0x1, 0x3ff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 12.90053459s ago: executing program 2 (id=374): syz_open_dev$video4linux(&(0x7f00000004c0), 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x20], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa90d]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mknod$loop(0x0, 0x0, 0x1) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(r7, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x4000000000001cd, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000340), &(0x7f0000000480)=r0}, 0x20) 12.855627951s ago: executing program 0 (id=375): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x100400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_usbip_server_init(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x3, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a68daa40d35b7c315e040000000c0902120001000100000904000000ef"], 0x0) r2 = socket$inet(0x2, 0x80000, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0xfffffffffffffef0) listen(r1, 0x0) fchdir(0xffffffffffffffff) r3 = syz_usbip_server_init(0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r4, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f00000004c0)='4', 0x1}, {0x0}, {&(0x7f0000002780)="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", 0x1000}], 0x3) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0100010086380000000000e700"]) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20007, 0x0) capget(&(0x7f00000000c0)={0x19980330, r4}, &(0x7f0000000100)={0x3, 0x1, 0x41ca, 0x8f9a, 0xfffffffa, 0x80000000}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 12.674631019s ago: executing program 3 (id=376): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xffffffff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000001e80)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x134, r3, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x46a57051}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd2605200}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x20004041) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000380)={0x1, 'nr0\x00', {}, 0x1}) sendto$packet(r0, &(0x7f00000000c0)="3f043608eee812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1529fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$inet(0x2, 0x3, 0x2) r5 = shmget(0x2, 0xa000, 0x400, &(0x7f0000ff5000/0xa000)=nil) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000001840)=""/4096) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x2404c7fc, &(0x7f00000028c0)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004801) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000034080380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000"], 0x48}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11.55499266s ago: executing program 2 (id=377): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x6, 0xd55a, 0x9, 0x800, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0xf}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fae00000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@ifindex, 0x12, 0x0, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)={@cgroup, r0, 0x8, 0x3000, r3, @link_id=r5, r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018010000786c6c0500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r9, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="006d65ff6f03df98c3"], 0x8) 11.341203335s ago: executing program 2 (id=378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000f6ffffe3ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff07000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0xb, 0x0, "2431d0edd9b36cb74d7df7671ee3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b27a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/65}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d735931001800007f004103ff0100"}}}}, 0x118) r6 = syz_open_dev$amidi(&(0x7f0000000240), 0x9, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f00000003c0)={0x1}) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 11.158748643s ago: executing program 3 (id=379): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x0, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r3, 0x8000000000000000, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200020000000800010003000000a37a9d30ba6fbd543a0b77e9"], 0x50}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000004c0), 0xe) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x102c002, &(0x7f0000000c00)={[{@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@lazytime}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@data_err_abort}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfsdef={'smackfsdef', 0x3d, '%,]*&'}}, {@euid_eq}]}, 0x1, 0x5ef, &(0x7f0000000600)="$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") write$cgroup_devices(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000000"], 0xffdd) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 11.112608898s ago: executing program 1 (id=380): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x171, &(0x7f0000000400)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '0x0}) mount$nfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x210000, &(0x7f00000008c0)={[{'squashfs\x00'}, {'afs\x00'}, {'sourse'}, {'sK\x90\x9c\xe86\x1d\x14(E\xba\xcb\xb4\xca\xa71\xe9\xec\xb4$\xc0\xd2e\x9b\x9f\xbc,G\x90i7\x86\a\xbc\xbb\x16Hb\xba4>\\\xaa\xb4\xb9\n\x94\x85\xa6\x9a\xc6\xe2,]\x87+\x0f\x10\x97\xea\xf7=\xc6y\x8b\xaa\xcf\xe6\xf6#\xe2YYDz\xd6|\xd6\xd4IV\xffb\xbe\x7fE\xec\x0fw\xfa]/hr\x05+\xe7]\x7f\xa3\x8d4u\xd3\x17\x93\x8c\x12\x87\xe0\xba\xb0\xf7\xe7\x1dm\xeer\n\x14\x7f\xd9\x83+\x13\xbb\x83B\xf7\xd8\x1b7E\x98\x84M\x1b1l\a\xe5\xa6\f\x9f4x\x8b\xc3R_y\xf6\x8a\xc1\x9eSo\xba\xae\xf6j'}], [{@appraise_type}, {@appraise}, {@obj_role={'obj_role', 0x3d, '++'}}, {@obj_type={'obj_type', 0x3d, '-\x85]@\'\xa3((.p\xac:x%#(\'}:\xc5+'}}, {@euid_lt={'euid<', r0}}, {@fsmagic={'fsmagic', 0x3d, 0x100000000}}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '\''}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mremap(&(0x7f0000aeb000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mremap(&(0x7f0000c41000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f00004c3000/0x3000)=nil) mbind(&(0x7f0000be0000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x1000000000000085, 0x4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) userfaultfd(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002580)=ANY=[@ANYBLOB="240000001a00010008000000000000001c000000000000000000000008000100008001"], 0x24}}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x110, r1, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES16=0x0], 0x1, 0x1a3, &(0x7f0000000440)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='sK\x90\x9c\xe86\x1d\x14(E\xba\xcb\xb4\xca\xa71\xe9\xec\xb4$\xc0\xd2e\x9b\x9f\xbc,G\x90i7\x86\a\xbc\xbb\x16Hb\xba4>\\\xaa\xb4\xb9\n\x94\x85\xa6\x9a\xc6\xe2,]\x87+\x0f\x10\x97\xea\xf7=\xc6y\x8b\xaa\xcf\xe6\xf6#\xe2YYDz\xd6|\xd6\xd4IV\xffb\xbe\x7fE\xec\x0fw\xfa]/hr\x05+\xe7]\x7f\xa3\x8d4u\xd3\x17\x93\x8c\x12\x87\xe0\xba\xb0\xf7\xe7\x1dm\xeer\n\x14\x7f\xd9\x83+\x13\xbb\x83B\xf7\xd8\x1b7E\x98\x84M\x1b1l\a\xe5\xa6\f\x9f4x\x8b\xc3R_y\xf6\x8a\xc1\x9eSo\xba\xae\xf6j', &(0x7f0000000180)='\x85\xab\xfb0\xa4*', 0x0) 9.279033593s ago: executing program 1 (id=382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x90) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@umask={'umask', 0x3d, 0x3f}}, {@umask={'umask', 0x3d, 0x9}}, {@umask={'umask', 0x3d, 0x361274c1}}, {@dmask={'dmask', 0x3d, 0x9}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@errors_continue}]}, 0x5, 0x1518, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000f80)=""/4115, 0x26, 0x1013, 0x1}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) r5 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r5, &(0x7f0000000480)=""/170, 0xaa, 0x40002120, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x4, @local, 0x8000}, 0x80) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r6, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x37000}]) 7.478475389s ago: executing program 3 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x8000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSBRK(r4, 0x5427) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303020026006500000002000020"]) 7.403084274s ago: executing program 1 (id=384): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/42, 0x2a}], 0x1, 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x3ff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 5.500396181s ago: executing program 1 (id=385): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x201, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/252) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000240)={0x0, r10, r11}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 5.445973214s ago: executing program 2 (id=386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071123600000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x6c0200, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "7d3b331a312ee08bcc36dc36e12b49e0b393e8bf81058dc2d5762b17464cff0d", "1c64ed0b4a59ae1c119ddbc71b0930d8", {"d23dd644021a65f4b2db00f46fda5861", "72997824b931d497927989ebef22a608"}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x240) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xde, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac141416e000030a44079f03fe8000000000000000000000000000223a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x8000000}, 0x50) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpgid(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@map, 0x2b, 0x0, 0x1ff, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netkit={@link_fd=r5, r6}}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5c, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010002020400000400000000000000030109024a000101084007090400a9030206ec3d0b2406000028c5fea270a52b23bb71a8a1e88381020f00000800f9ff050905810905820210002005ee09050302400d65de345aa76ada7ca6caa907a2a3f882444a4ca50265"], &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x72, 0xa8, 0x3f, 0x10, 0x4}, 0x181, &(0x7f0000000380)={0x5, 0xf, 0x181, 0x6, [@generic={0x80, 0x10, 0x3, "4b83dcdbad2695c98ee64d07fe4c9ee0f3ed7ad9d33f7e9a1c42de0635d0af51269d0eaa250bd117159c0bf4aa993258d9d228869a34c1fd5f183ccf16f6fb24276c19eb45414c572b0a6ab2dd618b5d5fd8df3dfcfb09f2c7ad8b40613a2eaa6ad8b3e9beb60942d9fcdfc49c7ac7ef8d42000c01e68658e61769f725"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "7430a533f5b6e60b5d8ced7f443b4ff9"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xe1, 0x6, 0x0, 0xf000, 0x5, [0xc0c0, 0x3fc0, 0x30, 0xc00f, 0xff0000, 0x3f0f]}, @generic={0xb5, 0x10, 0xf, "797073d0c5882581c3caed5f19ada99376ff0dc30c0eda843453db623a1ae57a02fae1cce7c317e48699e8ccc420de448ce9940f3e75bdf820296b2ee0f417ce703682f9472e595b63bd2d1c57d85075a34a84a939212259ecd4c2cb45294dac400336c92fe1d8acfd19329c1e9be7e92d65b34590018c0f2fe8c30a6535df25537163b943051cd434301791a76dffb33d5134970f74990e804c09d87a2e2ff497a522f870be5d34081744d25fba445da048"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0xb4, 0xf00, 0x6}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x81d}}, {0xac, &(0x7f0000000540)=ANY=[@ANYBLOB="ac03a806431d1077f413e2165a60bfb7d4858e86e039b20ff7fe84b322ef0993dc78f13537737a380dc49209ba85b1b7f2d4ef20d4ae32cba6faf91d3bb6b91638d655fd54958bbf2c7ef1b453d23b5815ca1c62ec3dadf142199ef5a9baceb08f3885b5670d1b0712a15d6397a615fded3f3d514ab38d695136acd62f1e11e01ec8367f43f0727cddb0203f4ef6348a990f1f45a821d6744209911d1736e0254ade0c2016f86f2768c881f6"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3001}}, {0xb, &(0x7f00000006c0)=@string={0xb, 0x3, "0aa3aa7df9e4ea6ef6"}}, {0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="081131b7afb6078c"]}, {0xfa, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]}]}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) 5.031106324s ago: executing program 3 (id=387): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d0000009500645e23c1af91f7f047e9fe457fca48d6e9ee538028f0eba431605b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x2c}}, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.230369279s ago: executing program 1 (id=388): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) r6 = io_uring_setup(0x33b2, &(0x7f0000000180)={0x0, 0x0, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x75e5, &(0x7f00000000c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000000033fe20902e6c62aebfa2000000000021c22dce58dc9c3effb703000008000000b70400000000000085000000030000009500000000000000355a23b9e71f2e3b47a591aa0b46d5323cc2411f8f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.089334672s ago: executing program 3 (id=389): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x10000101, 0x80, 0xb4d, 0x328b, 0xffffffffffffffff, 0x10000, '\x00', r4, r5, 0x2, 0x0, 0x4}, 0x48) setsockopt$inet_msfilter(r3, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @private}, @address_request}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000001400030073797a5f74756e"], 0x3c}}, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) io_setup(0x5, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x5420) r8 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e80)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x9, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000080)=['-\x00', ''], 0x2}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0) dup3(r1, r2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0}) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 2.79550784s ago: executing program 4 (id=350): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000100)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\x81\xff\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\xd5W \xe3\xf3\xb7\xa8\xc0\x8dC8\xb7\xfd\xa9\r\xac7A\x94\x03\xce\t\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\x9044\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc4\x01\xff\xc29\xfd\xe76\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\xd9\xb0:\xf4\x17\xcc\xbae\xc1)\xfc=)\x99/\x00\x00\x00\x00\x00\xcd\xc7\x8eg\x1e\x97}J_\xfe\\C\xf6\x13V\xac\xf8$\x13O\xb1#3g4{\x1eF\xa9\xb7\xee\xa3\x943\xde\xd9\x89\x1c\x9f\xa9\xff\xd3\xb8\xaekvN\x19\x91\xc1\xd9\x1c\xd3@{\xce\xcf)\xe2\xe1&\x8c>\r\xd0\xf0\xc1\x8a\xd5H\x89\xc6\r!r5D.k\xc0\xe9E\x87\xc6\xa1\xba`^\xc39\x99\"\x9c5f?\xc8\xa0Q\xcdp\xfe\xa1\x12\xae\xded!\xae=\x87\xbb\x8cX\xea\r\xc7\xce\x8f6{\x1dT?\xa1v\xd3df\n\xf7\xf7\xd4\x91\xe2\xf6-\x10\xb4\xb5$b/\x0eZ2\xf6\x94(d \x0e\x81Y\xacu\x1b\x8d4L_o\xe7p\xed\aT\"\xe3T\x1b\xc2\xc4S2', 0x0) ftruncate(r1, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3fffffe, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @struct}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x3, &(0x7f0000000500)=[{0x45, 0x0, 0x1}, {}, {0x6}]}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c, 0x80000) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x7f}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000040), 0x1, 0x76a, &(0x7f0000000fc0)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x203, &(0x7f0000000040)=0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x1670e68) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x9, 0x1, 0x0, r5, 0x0, 0x0, 0x1000000}]) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r9 = dup(r4) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000040)) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) io_setup(0x0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80) 1.227223636s ago: executing program 1 (id=391): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102503000000000000000109025c0002010000000904000001020d0041bc6baa872a7e731200000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e000000010000905000000000000fafd17ff030000a90000002b0e13e735a3184f12540eee4f6abf8fe63d6da2f1acfac0ee3dd2b184b27db1f3020000bf852c8c4894d4c6d9ad9db6f28e256e815244e4"], 0xe0}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800800124000050000080008400000000012000300686173683a6e65742c706f72740000000500050002040000050004"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01008f9c819c000000000c0000000c0000003a00000004000000000002040000000000002e00612e00"], 0x0, 0x2b}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0x1e4, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xf9, 0x7, 0x1, 0x0, "fb9c2da730c47248e020c850d358001fbc29c1338a5f3ae6d90cff999a7be60e31d079c1d81c7f61181d0c40945dbea956acd8e74f0218dd38e8c8a675c067f0e1c3559fd30b42373a0f020e0cfeef19d0d3cb582821ca3aab29834a22a415f15136a7bfb341cc4cdc93ec0fd385cc67d1752107fa59474cd7971b5c0827a011fcba278830cd7e17cb62cb45cd4566d9a079d2db7f0baab5c8d9806eeba7b1dd95b65330b4e801aacacc12c6f4db2088807b6ba483881fba857e791940c1596da853df5e61680a9a3f73d879798bae3c3dc1739fb53c31f1d600d372920ec6c08c10845658ff7b6b732076aae881706cb6ba0d3479"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x79, 0x7, 0x1, 0x0, "2c8572b77840bc8504f5974196ec99ecea7aaf4cd3193afa3c7fdc5e39fd4e3606a8fa813bd143398d7553692bd072aef7d2d05b6e943c236cdd9515a389489efe9055f87111ff3a1db722bf0773493477d66879547ba6a071cc224516a9c209c177b96158da10c1ab093666509c92fa1f902bc512"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x264}}, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioprio_get$pid(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$rds(0x15, 0x5, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x2) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x0, "6e306b3925024a000000004118f25b2040a2f0ffffff00000000000300", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x0, "ce0edfe3181085c23e75a96da420cfa0c88d3f4ecf5ebc10d54e511ebdb8b8f6", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000180)={"0104000000000000c9b889d96d007cb69a00000000010400", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f0000000440)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 1.052161346s ago: executing program 3 (id=392): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x254, &(0x7f0000000840)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzLTn1EkpvTXssvYReWgo9pW0O6aXQhh4aemgPW2Znt2yTDW2zyU7JfD4wO/P2vZnfDMz37V5mN4DCGo2IyYgoR8RYRFQjIuke8H62jLabK7X12Yhm85t7SWtc1s509huJiEZEfBZR6fQtrf2w9WDjq4/+Wax+eGrt+9qgrq/b9tbm1zsnp/8+O/Xp0pVrd6aTmIx6u6/7Og5T0uO9ShLxxlEUe0kklbzPgOcx8+eZ62nu34yID1r5r0apHdl/F165WI1PTuy37393r749yHMFDl+zWU0/AxtNoHBKEVGPpDQeEdl2qTQ+nn2Hv1EeLv02v/DH2K/zi3O/5D1TAYelHrH55fmhcyO78n+7nOUfOL7S/H87s3oz3d4p5302wEC8k63S/I/9tPxxyD8UjvxDcck/FJf8wzFwwOzKPxSX/ENxyT8cY9XORqNnt/xDcck/FJf8Q3F15x8AKJbmUN5PIAN5yXv+AQAAAAAAAAAAAAAAAAAA9lqprc92lkHVvPR/xPYXEVHpVb/c+j/iiFdbr8P3k3TYE0m2W19+fK/PA/TpdM5PX792K9/6l989muP+9XSztt+45bmIRjp4olLZe/8l7fvv4F5/Rn/15z4LvKBkV/vz7wZbf7dHq/nWn9qIuJDOPxO95p9SvNVa955/6t0/sXxAvz/s8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMzOMAAAD//7MNbSk=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001}, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4}}, 0xe8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) pipe2(0x0, 0x80080) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, r3}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) 0s ago: executing program 4 (id=393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x90) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@umask={'umask', 0x3d, 0x3f}}, {@umask={'umask', 0x3d, 0x9}}, {@umask={'umask', 0x3d, 0x361274c1}}, {@dmask={'dmask', 0x3d, 0x9}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@errors_continue}]}, 0x5, 0x1518, &(0x7f0000002280)="$eJzs3AuYTlX7MPD7XmvtMSQ9TXIY1lr35iGHZZIkhyQ5JEmSJDklJE3ySl4khpCkIQnJYUgOQ0gOE5PG+Xw+JknSJElITsn6rgl/b2/1vf++t+/1v/5z/65rX8+6n7XX2ms9937stbeZ+bbr0FpNaldvRETwb8GLL0kAEAsAAwHgOgAIAKB8XPm4rPqcEpP+vYOwv9bDqVd7BOxq4vxnb5z/7I3zn71x/rM3zn/2xvnP3jj/2Rvnn7HsbPP0gtfzln03fv6fnfH1/3+RzDJjv1xb5sZuf6IJ5z974/z/rxX8d3bi/GdvnP/sjfOfvXH+s4Mcf1jD+c+uLp4TnH/GsrOr/fyZt6u7Xe3zjzHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZY9nDGX6EA4HL5ao+LMcYYY4wxxhhjfx2f42qPgDHGGGOMMcYYY///IQiQoCCAGMgBsZATcoEAgGshD1wHEbge4uAGyAs3Qj7IDwWgIMRDISgMGgxYIAihCBSFKBSD4nATlICSUApKg4MykAA3Q1m4BcrBrVAeboMKcDtUhEpQGarAHVAV7oRqcBdUh7uhBtSEWlAb7oE6cC/UhfugHtwP9eEBaAAPQkN4CBrBw9AYHoEm8Cg0hcegGTSHFtASWv0/tX8BesKL0At6QxL0gb7wEvSD/v/1iQyCV2EwvAbJMASGwuswDN6A4fAmjICRMAregtHwNoyBsTAOxkMKTICJ8A5MgndhMkyBqTANUmE6zID3YCbMgtnwPsyBD2AuzIP5sADS4ENYCIsgHT6CxfAxZMASWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCttgO+yAnbALdsMnsAc+hb3wGeyDz/9k+9P/1L4bAgIKFKhQYQzGYCzGYi7MhbkxN+bBPBjBCMZhHObFvJgP82EBLIDxGI+FsTAaNEhIWASLYBSjWByLYwksgaWwFDp0mIAJWBZvwXJYDstjeayAFbAiVsJKWAWrYFWsitWwGlbH6lgDa2AtrIX34D3YB+tiXayH9bA+1r/8eAobYSNsjI2xCTbBptgUm2EzbIEtsBW2wtbYGttgG2yH7bA9tscO2AETMRE7YkfshJ2wM3bGLtgFu2JX7IbdsTu+kAPwRXwRe2MN0Qf7Yl/sh8k5BuDL+DK+goPwVXwVX8NkHIJD8XV8Hd/A4XgKR+BIHIWjsKp4G8fgWCQxHlMwBSfiRJyEk3AyTsEpOA1TcTrOwBk4E2fhLHwf5+AH+AHOw3m4ANMwDRfiIkzHdFyMpzEDl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7AXagA8BP8FD/FZNyH+3A/7scDeAAP4kHMxEw8hIfwMB7GI3gEj+JRPIbH8QQex5N4Ek/haTyDZ/AcnsPz+Hz81413lVyTDCKLEkrEiBgRK2JFLpFL5Ba5RR6RR0RERMSJOJFX5BX5RD5RQBQQ8SJeFBaFhRFGkAhjAEBERVQUF8VFCVFClBKlhBNOJIgEUVaUFeVEOVFe3CYqiNtFRVFJtHVVRBVRVbRz1cRdorqoLmqImqKWqC1qizqijqgr6op6op6oL+qLBuJB0VD0wQH4sMjKTBMxBJuKodhMNBfy0ve1tRiObURb0U48KUbiCOwgWrtE8YzoKMZgJ/E3MRafE13EeOwq/i66ie6ih3hB9BRtXC/RW0zGPqKvmIb9RH8xQLwsZmJN8T7OyVlLvCaSxRAxVLwuFuAbYrh4U4wQI8Uo8ZYYLd4WY8RYMU6MFyligpgo3hGTxLtispgipoppIlVMFzPEe2KmmCVmi/fFHPGBmCvmifligUgTH4qFYpFIFx+JxeJjkSGWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaInWKX2C0+EXvEp2Kv+EzsE5+L/eILcUB8KQ6Kr0Sm+FocEt+Iw+JbcUR8J46K78UxcVycED+Ik+JHcUqcFmfEWXFO/CTOi5/FBeEFSJRCSqlkIGNkDhkrc8pc8hqZWwaXPt3rZZy8QeaVN8p8Mr8sIAvKeFlIFpZaGmklyVAWkUVlVBaTxeVNsoQsKUvJ0tLJMjJB3izLyltkOXmrLC9vkxXk7bKirCQryyryDllV3ikhcvEYNWRNWUvWlvfIOvJeWVfeJ+vJ+2V9+YBsIB+UDeVDspF8WDaWj8gm8lHZVD4mm8nmsoVsKVvJx2Vr+YRsI9vKdvJJ2V4+JTvIp2WifEZ2lP7SKfKc7CKfl13l32U32V32kD/LC9LLXrK3BOgj+8qXZD/ZXw6QL8uB8hU5SL4qB8vXZLIcIofK1+Uw+YYcLt+UI+RIOUq+JUfLt+UYOVaOk+NlipwgJ8p35CT5rpwsp8ipcppMldPlgEs9zZbyX7Z/53faD/7l6JvkZrlFbpXb5Ha5Q+6Uu+RuuVvukXvkXrlX7pP75H65Xx6QB+RBeVBmykx5SB6Sh+VheUQekUflUXlMHpdn5Q/ypPxRnpKn5Wl5Vp6T5+T5S58BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqoqoYXjphVClVWjlVRiWom/9Me1Vc3aRKqJK/an95fEl/ML5WqpVqrVqrNqqNaqfaqfaqveqgOqhElag6qo6qk+qkOqvOqovqorqqrqqb6qZ6qB6qp+qpeqleKkklqb7qJdVP9VcD1MtqoHpFDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUCfVSXVKnVJn1Bl1Tp1T59V5dUFdyFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuJT0aFAuKBzcFJYKSQamgdOCCMkFCcHNQNrglKBfcGpQPbgsqBLcHFYNKQeWgSnBHUDW4M6gW3BVUD+4OagQ1g1pB7eCeoE5wb1A3uC+oF9wf1A8eCBoEDwYNg4eCRsHDQePgkaBJ8GjQNHgsaBY0D1oELYNWf2n/3p/K/4TrpXvrJN1H99Uv6X66vx6gX9YD9St6kH5VD9av6WQ9RA/Vr+th+g09XL+pR+iRepR+S4/Wb+sxeqwep8frFD1BT9Tv6En6XT1ZT9FT9TSdqqfrGfo9PVPP0rP1+3qO/kDP1fP0fL1Ap+kP9UK9SKfrj/Ri/bHO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/oPfpTvVd/pvfpz/V+/YU+oL/UB/VXOlN/rQ/pb/Rh/a0+or/TR/X3+pg+rk/oH/RJ/aM+pU/rM/qsPqd/0uf1z/qC9lmL+6zLu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDfFTQlTwpQypYwzziSYBFPWlDXlTDlT3pQ3FUwFU9FUNJVNZXOHucPcae40d5m7zN3mblPT1DS1TW1Tx9QxdU1dU8/UM/VNfdPANDANTUPTyDQyjU1j08Q0MU1NU9PMNDMtTAvTyrQyrU1r08a0Me1MO9PetDcdTAeTaBJNR9PRdDKdTGfT2XQxXUxX09V0M91MD9PD9DQ9TS/TyySZJNPX9DX9TD8zwAwwA81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap524wxY804M96kmBQz0Uw0k8wkM9lMNlONN6km1cwwM8xMM9PMNrPNHDPHzDVzzXwz36SZNLPQLDTpJt0sNotNhskwS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZbXabPWaP2Wv2mn1mn9lv9psD5oA5aA6aTJNpDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyX/peulNrM1pc9lrbG57rc1jr7P/HBewBW28LWQLW23z2fy/io21toQtaUvZ0tbZMjbB3vybuKKtZCvbKvYOW9Xeaav9Jq5j77V17X22nr3f1rb3/Cqubx+wDeyjtiEigG1uG9uWtol91Da1j9lmtrltYVva9vYp28E+bRPtM7ajffY38UK7yK62a+xau87usZ/aM/asPWy/tefsT7aX7W0H2lfsIPuqHWxfs8l2yG/iUfYtO9q+bcfYsXacHf+beKqdZlPtdDvDvmdn2lm/idPsh3aOTbdz7Tw73y74Jc4aU7r9yC62H9sMu8QutcvscrvCrrSr/musy+wGu9FusrvtJ3ar3Wa32x12p931S5w1j732M7vPfm4P2W/sAfulPWiP2Ez79S9x1vyO2O/sUfu9PWaP2xP2B3vS/mhP2dO/zD9r7j/Yn+0F6y0QEpAkRQHFUA6KpZyUi66h3HQt5aHrKELXUxzdQHnpRspH+akAFaR4KkSFSZMhS0QhFaGiFKVidHmdXopKk6MylEA3U1m6hcrRrVSebqMKdDtVpEpUmarQHVSV7qRqdBdVp7upBtWkWlSb7qE6dC/VpfuoHt1P9ekBakAPUkN6iBrRw9SYHqEm9Cg1pceoGTWnFtSSWtHj1JqeoDbUltrRk9SenqIO9DQl0jPUkZ6lTvQ36kzPURd6nrrS36kbdace9AL1pBepF/WmJOpDfekl6kf9aQC9TAPpFRpEr9Jgeo2SaQgNpddpGL1Bw+lNGkEjaRS9RaPpbRpDY2kcjacUmkAT6R2aRO/SZJpCU2kapdJ0mkHv0UyaRbPpfZpDH9BcmkfzaQGl0Ye0kBZROn1Ei+ljyqAltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lbbRdtpBO2kX7aZPaA99SnvpM9pHn9N++oIO0Jd0kL6iTPqaDtE3dJi+pSP0ne9N39MxOk4n6Ac6ST/SKTpNZ+gsnaOf6Dz9TBfIE4QYilCGKgzCmDBHGBvmDHOF14S5w2vDPOF1YSS8PowLbwjzhjeG+cL8YYGwYBgfFgoLhzo0oQ0pDMMiYdEwGhYLi4c3hSXCkmGpsHTowjJhQnhzWDa8JSwX3hqWD28LK4S3hxXDSuGj91cJ7wirhneG1cK7wurh3WGNsGZYK6wd3hPWCe8N64b3hfXC+8Ny4QNhg/DBsGH4UNgofDhsHD4SNgkfDZuGj4XNwuZhi7Bl2Cp8PGwdPhG2CduG7cInw/bhU2GH8OkwMXwm7Bg++0v9A4v+uD4p7BP2DV8KXwq9v0/Ojy6IpkU/jC6MLoqmRz+KLo5+HM2ILokujS6LLo+uiK6Mroqujq6Jro2ui66PbohujG6Kel87Bzh0wkmnXOBiXA4X63K6XO4al9td6/K461zEXe/i3A0ur7vR5XP5XQFX0MW7Qq6w084468iFrogr6qKumCvubnIlXElXypV2zpVxCa6la+VaudbuCdfGtXXt3JPuSfeUe8o97Z52z7iO7lnXyf3NdXbPuS7ueRUD4Lq57q6He8H1dBPyXPxOJrm+rq/r5/q5AW6AG+gGukFukBvsBrtkl+yGuqFumBvmhrvhboTLCQCj3Gg32o1xY9w4N86luBQ30U10k9wkN9lNdlPdVJfqUt0MN8PNdDNd1VkXjzLXzXXz3XyX5tLcQpe1Zkx3i91il+Ey3FK31C13y91Kt9KtdqvdWrfWrXfr3Ua30W12m91Wt9Vtd9vdTrfT7Xa73R5/3cVO3T633+13B9wBd9B95TLd1+6Q+8Yddt+6I+47d9R974654+6E+8GddD+6U+60O+POunPuJ3fe/ewuOO9SIhMiEyPvRCZF3o1MjkyJTI1Mi6RGpkdmRN6LzIzMisyOvB+ZE/kgMjcyLzI/siCSFvkwsjCyKJIe+SiyOPJxJCOyJLI0siyyPLIi4n2hraEv4ov6qC/mi/ubfAlf0pfypb3zZXyCv9mX9bf4cv5WX97f5iv4231FX8lX9o/5Zr65b+Fb+lb+cd/aP+Hb+La+nX/St/dP+Q7+aZ/on/Ed/bO+k/+b7+yf8138876r/7vv5rv7Hv4F39O/6Hv53j7J9/F9/Uu+n+/vB/iX/UD/ih/kX/WD/Ws+2Q/xQ/3rfph/ww/3b/oRfqQfFfOWH335FhnG+xQ/wU/07/hJ/l0/2U/xU/00n+qn+xn+PT/Tz/Kz/ft+jv8Akvw8P98v8Gn+Q7/QL/Lp/iO/2H/sM/ySy49Q/Uq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/xOv8vv9p/4Pf5Tv9d/5vf5z/1+/4U/4L/0B/1XPtN/7Q/5b/xh/60/4r/zR/33/pg/7k/4H/xJ/6M/5U/7M/6sP+d/8uf9z/4C/84aY4wxxth/y4QrRfF79X1+5z3xDzv3BYBrtxXM/Mf6rBXl+nwXy/1FfPsIADzTu+vDl7caNZKSki7tmyEhKDoP4PL/BGWJgSvxEmgHT0EitIWyvzv+/qL7OfoX/UdvA8j1D21i4Up8pf8v/qD/x58ctbBCeCbu/9L/PIASRa+0ybpPuhwvgXYq67UtlPuD/vO3/hfjz/llCkCbf2iTG67EV8afAE/As5D4qz0ZY4wxxhhjjLGL+ovKnS/ff17+ic/fuz+PV1fa5IAr8b+6P2eMMcYYY4wxxtjV91z3Hk8/fk2xtp1/KSQm/olCtT+zMxd+r+Dhf8QwLha8B7j8jgKAf7NDgP/4LLb8R46VfOmr889Vy8/6AP5npPKvKFzlf5gYY4wxxhhjf7kri/5fv6+u1oAYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLFs6D/x58Su9hwZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxq+3/BAAA///vPAgR") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000f80)=""/4115, 0x26, 0x1013, 0x1}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) r5 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r5, &(0x7f0000000480)=""/170, 0xaa, 0x40002120, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x4, @local, 0x8000}, 0x80) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r6, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x37000}]) kernel console output (not intermixed with test programs): eady exists on: batadv_slave_1 [ 249.374697][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.390923][ T941] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 249.397852][ T941] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 249.406422][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.418948][ T941] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 249.429724][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.443292][ T941] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 249.450215][ T941] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 249.458906][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.480720][ T6823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.490191][ T6823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.503273][ T941] ntrig 0003:1B96:000A.0002: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 249.534251][ T6823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.558502][ T6823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.660085][ T6927] loop3: detected capacity change from 0 to 256 [ 249.789264][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.815206][ T941] usb 4-1: USB disconnect, device number 3 [ 249.863594][ T6926] loop4: detected capacity change from 0 to 32768 [ 249.908944][ T6808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.908971][ T6808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.941459][ T6926] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 249.980953][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.004621][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.011795][ T510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.036136][ T6926] XFS (loop4): Ending clean mount [ 250.060492][ T510] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.060687][ T6926] XFS (loop4): Quotacheck needed: Please wait. [ 250.067667][ T510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.081274][ T510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.105824][ T510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.156857][ T6926] XFS (loop4): Quotacheck: Done. [ 250.402180][ T6859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.979876][ T6859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.073816][ T6710] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 251.130598][ T5279] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 251.346379][ T6950] overlay: ./file0 is not a directory [ 251.391609][ T6953] netlink: 19 bytes leftover after parsing attributes in process `syz.3.232'. [ 251.400738][ T5279] usb 2-1: Using ep0 maxpacket: 32 [ 251.479218][ T5279] usb 2-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 251.537531][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.545541][ T5279] usb 2-1: Product: syz [ 251.571175][ T5279] usb 2-1: Manufacturer: syz [ 251.610293][ T5279] usb 2-1: SerialNumber: syz [ 251.656378][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.681551][ T6953] netlink: 'syz.3.232': attribute type 2 has an invalid length. [ 251.692500][ T6953] netlink: 244 bytes leftover after parsing attributes in process `syz.3.232'. [ 251.729605][ T5279] r8152-cfgselector 2-1: Unknown version 0x0000 [ 251.751507][ T5279] r8152-cfgselector 2-1: config 0 descriptor?? [ 251.894066][ T6859] veth0_vlan: entered promiscuous mode [ 251.919029][ T6859] veth1_vlan: entered promiscuous mode [ 251.979940][ T6859] veth0_macvtap: entered promiscuous mode [ 252.012999][ T6859] veth1_macvtap: entered promiscuous mode [ 252.025172][ T6958] loop0: detected capacity change from 0 to 1024 [ 252.026824][ T6953] loop3: detected capacity change from 0 to 64 [ 252.058122][ T6953] minix: Unknown parameter '¹ò¢;£[ uâ`Ü2AoãžœvPÝ3¼ŸíÊÝ.Gè#ÓÛ„MÅ/ÝR¤¡ÕÓÔø^Wg)Nr«öÔôö8·—˜êúnX²'Ä' [ 252.075605][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.017259][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.043942][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.045406][ T6958] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 253.055248][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.075692][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.076066][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.105530][ T6958] System zones: 0-1, 3-12 [ 253.123495][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.134776][ T6958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.176222][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.386376][ T6965] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 253.409468][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.370448][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.481295][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.505916][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.518351][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.555651][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.598692][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.621530][ T5310] r8152-cfgselector 2-1: USB disconnect, device number 11 [ 254.626172][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.626192][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.626206][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.626217][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.626231][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.626255][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.632017][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.647937][ T6859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.647986][ T6859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.648019][ T6859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.648049][ T6859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.675916][ T6823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.001809][ T2463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.001835][ T2463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.032588][ T6975] loop4: detected capacity change from 0 to 2048 [ 255.076167][ T6808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.076190][ T6808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.232339][ T6979] overlayfs: failed to resolve './file0': -2 [ 256.010531][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 256.165341][ T4621] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 256.165592][ T4621] Bluetooth: hci1: Injecting HCI hardware error event [ 256.167680][ T4621] Bluetooth: hci1: hardware error 0x00 [ 256.232202][ T8] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 256.369717][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.384802][ T8] usb 2-1: config 0 descriptor?? [ 257.089576][ T6986] loop0: detected capacity change from 0 to 40427 [ 257.149629][ T6986] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 257.157684][ T6986] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 257.193146][ T6974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.245024][ T5844] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 257.681037][ T8] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 257.689701][ T8] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 257.701989][ T6974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.732376][ T6986] F2FS-fs (loop0): Found nat_bits in checkpoint [ 257.779950][ T6986] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 257.787019][ T6986] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 257.960593][ T6994] netlink: 56 bytes leftover after parsing attributes in process `syz.0.240'. [ 258.250555][ T5844] usb 5-1: device descriptor read/all, error -71 [ 258.308681][ T3352] usb 2-1: USB disconnect, device number 12 [ 258.559982][ T4621] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 258.987775][ T5844] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 259.189704][ T7004] loop1: detected capacity change from 0 to 1024 [ 259.219010][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.396571][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.410546][ T5844] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 259.420843][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.451615][ T7004] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 259.462137][ T7004] System zones: 0-1, 3-12 [ 260.306133][ T5844] usb 5-1: config 0 descriptor?? [ 260.323143][ T7004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.365696][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 260.365715][ T29] audit: type=1326 audit(1723795407.170:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.0.243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26ec3799b9 code=0x0 [ 262.134259][ T6261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.222360][ T7025] loop3: detected capacity change from 0 to 1024 [ 263.283862][ T7025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.353552][ T7029] loop4: detected capacity change from 0 to 256 [ 263.393650][ T7029] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 263.408343][ T5844] usb 5-1: USB disconnect, device number 8 [ 263.719942][ T6534] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.333011][ T5239] Bluetooth: hci3: command 0x0405 tx timeout [ 264.683851][ T6808] bond0: (slave bond_slave_0): interface is now down [ 264.713947][ T6808] bond0: (slave bond_slave_1): interface is now down [ 264.857373][ T6808] bond0: now running without any active interface! [ 265.116473][ T7039] loop4: detected capacity change from 0 to 512 [ 265.171122][ T7039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.237054][ T7039] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.573351][ T7050] ptrace attach of "./syz-executor exec"[6261] was attempted by " À @  [ 267.049967][ T6710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.286323][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.292668][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.521683][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 269.191913][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 269.952779][ T7069] loop1: detected capacity change from 0 to 1024 [ 270.685374][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.696355][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.705582][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.713984][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.722795][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.730573][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.816540][ T5239] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 271.825304][ T5239] Bluetooth: hci4: Injecting HCI hardware error event [ 271.840952][ T4621] Bluetooth: hci4: hardware error 0x00 [ 271.995830][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.009919][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.018317][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.026208][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.046560][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.057257][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.358746][ T7080] loop1: detected capacity change from 0 to 256 [ 272.619556][ T7080] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 274.221756][ T5231] Bluetooth: hci5: command tx timeout [ 274.296576][ T5231] Bluetooth: hci6: command tx timeout [ 274.303032][ T4621] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 274.682903][ T7086] 9pnet_fd: Insufficient options for proto=fd [ 275.270735][ T7095] loop3: detected capacity change from 0 to 256 [ 276.064432][ T6808] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.206092][ T7088] netdevsim netdevsim4 €: renamed from netdevsim0 (while UP) [ 276.221642][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.266'. [ 276.434703][ T5231] Bluetooth: hci5: command tx timeout [ 276.527352][ T5231] Bluetooth: hci6: command tx timeout [ 276.533068][ T4621] Bluetooth: hci4: Opcode 0x206c failed: -110 [ 276.568015][ T7105] loop4: detected capacity change from 0 to 1024 [ 276.591277][ T7105] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 276.617719][ T7105] System zones: 0-1, 3-12 [ 276.636378][ T7105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.751045][ T4621] Bluetooth: hci4: Opcode 0x2046 failed: -110 [ 278.763640][ T4621] Bluetooth: hci5: command tx timeout [ 278.779733][ T4621] Bluetooth: hci6: command tx timeout [ 278.813758][ T7108] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 278.828780][ T6808] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.268732][ T6710] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /9/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.295566][ T6710] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.316308][ T6710] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 279.337503][ T6710] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /9/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.365825][ T6710] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.389300][ T6710] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 279.401226][ T6710] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /9/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.452396][ T6710] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.474476][ T6710] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 279.489925][ T6710] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /9/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.517914][ T6808] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.531117][ T7122] syz.1.270[7122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.531218][ T7122] syz.1.270[7122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.535465][ T6710] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.542870][ T7122] syz.1.270[7122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.565406][ T6710] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 279.597673][ T6710] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /9/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 279.641610][ T6710] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 279.651636][ T7072] chnl_net:caif_netlink_parms(): no params data found [ 279.669674][ T6710] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 279.682477][ T6710] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 279.697526][ T6808] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.754712][ T6710] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 279.792826][ T6710] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 279.814350][ T6710] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 279.840810][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 279.980597][ T7075] chnl_net:caif_netlink_parms(): no params data found [ 280.251551][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.265439][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.273024][ T7072] bridge_slave_0: entered allmulticast mode [ 280.279977][ T7072] bridge_slave_0: entered promiscuous mode [ 280.382129][ T7133] loop3: detected capacity change from 0 to 2048 [ 280.473607][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.488159][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.511664][ T7072] bridge_slave_1: entered allmulticast mode [ 280.528874][ T7133] loop3: p3 < > p4 < > [ 280.533823][ T7133] loop3: partition table partially beyond EOD, truncated [ 280.542090][ T7133] loop3: p3 start 4284289 is beyond EOD, truncated [ 280.564101][ T7072] bridge_slave_1: entered promiscuous mode [ 280.574955][ T4683] loop3: p3 < > p4 < > [ 280.579179][ T4683] loop3: partition table partially beyond EOD, truncated [ 280.606176][ T4683] loop3: p3 start 4284289 is beyond EOD, truncated [ 280.886938][ T7072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.969646][ T4621] Bluetooth: hci6: command tx timeout [ 280.975103][ T4621] Bluetooth: hci5: command tx timeout [ 281.028417][ T6808] bridge_slave_1: left allmulticast mode [ 281.045698][ T6808] bridge_slave_1: left promiscuous mode [ 281.051454][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.079397][ T6808] bridge_slave_0: left allmulticast mode [ 281.095060][ T6808] bridge_slave_0: left promiscuous mode [ 281.101986][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.301713][ T6710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.738870][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.753454][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.761624][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.770907][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.780621][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.788410][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.922633][ T7153] loop1: detected capacity change from 0 to 1024 [ 283.252079][ T7153] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 283.265446][ T29] audit: type=1326 audit(1723795428.469:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c869799b9 code=0x7ffc0000 [ 283.378689][ T7153] System zones: 0-1, 3-12 [ 283.459274][ T7153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.702476][ T29] audit: type=1326 audit(1723795428.469:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c869799b9 code=0x7ffc0000 [ 283.728160][ T29] audit: type=1326 audit(1723795428.469:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c869799b9 code=0x7ffc0000 [ 283.750592][ T29] audit: type=1326 audit(1723795428.478:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c869799b9 code=0x7ffc0000 [ 283.775473][ T29] audit: type=1326 audit(1723795428.478:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c869799b9 code=0x7ffc0000 [ 283.807365][ T6808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.821927][ T29] audit: type=1326 audit(1723795428.478:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c869799b9 code=0x7ffc0000 [ 283.856266][ T6808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.875473][ T29] audit: type=1326 audit(1723795428.478:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c869799b9 code=0x7ffc0000 [ 283.910829][ T6808] bond0 (unregistering): Released all slaves [ 283.924326][ T29] audit: type=1326 audit(1723795428.488:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c869799b9 code=0x7ffc0000 [ 283.948570][ T7072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.993637][ T29] audit: type=1326 audit(1723795428.488:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c869799b9 code=0x7ffc0000 [ 284.016360][ T29] audit: type=1326 audit(1723795428.488:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c869799b9 code=0x7ffc0000 [ 284.045045][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.052697][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.060276][ T7075] bridge_slave_0: entered allmulticast mode [ 284.069131][ T7075] bridge_slave_0: entered promiscuous mode [ 284.365163][ T7155] netlink: 'syz.3.276': attribute type 15 has an invalid length. [ 284.373303][ T7155] netlink: 719 bytes leftover after parsing attributes in process `syz.3.276'. [ 284.970680][ T7072] team0: Port device team_slave_0 added [ 284.980733][ T7166] loop3: detected capacity change from 0 to 256 [ 284.987664][ T5239] Bluetooth: hci0: command tx timeout [ 285.000305][ T6261] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /32/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 285.024913][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.033633][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.040996][ T7075] bridge_slave_1: entered allmulticast mode [ 285.047945][ T7075] bridge_slave_1: entered promiscuous mode [ 285.053138][ T6261] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 285.085722][ T6261] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 285.100994][ T6261] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /32/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 285.179959][ T6261] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 285.280841][ T6261] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 285.363704][ T6261] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /32/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 285.534541][ T6261] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 285.633959][ T7072] team0: Port device team_slave_1 added [ 285.661470][ T6261] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 285.671555][ T7158] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 285.683009][ T6261] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /32/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 285.815771][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.826084][ T6261] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 285.853690][ T6261] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 285.875877][ T6261] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /32/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 285.886823][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.924352][ T6261] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 285.940093][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.968367][ T7072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.982060][ T6261] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 285.995192][ T6261] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 286.007632][ T6261] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 286.026916][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.037280][ T6261] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 286.048824][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.078513][ T6261] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 286.092409][ T7072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.110806][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.327666][ T6808] hsr_slave_0: left promiscuous mode [ 286.355936][ T7171] loop3: detected capacity change from 0 to 2048 [ 286.373578][ T7171] NILFS (loop3): invalid segment: Sequence number mismatch [ 286.381175][ T7171] NILFS (loop3): trying rollback from an earlier position [ 286.397670][ T6808] hsr_slave_1: left promiscuous mode [ 286.409699][ T7171] NILFS (loop3): recovery complete [ 286.416158][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.428370][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.428728][ T7172] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.470025][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.481088][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.526420][ T6808] veth1_macvtap: left promiscuous mode [ 286.532224][ T6808] veth0_macvtap: left promiscuous mode [ 286.547414][ T6808] veth1_vlan: left promiscuous mode [ 286.552922][ T6808] veth0_vlan: left promiscuous mode [ 287.255564][ T5239] Bluetooth: hci0: command tx timeout [ 287.865279][ T6808] team0 (unregistering): Port device team_slave_1 removed [ 288.170890][ T6808] team0 (unregistering): Port device team_slave_0 removed [ 288.985690][ T7184] loop3: detected capacity change from 0 to 512 [ 289.004682][ T7184] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent [ 289.531517][ T5239] Bluetooth: hci0: command tx timeout [ 289.912410][ T7072] hsr_slave_0: entered promiscuous mode [ 289.922704][ T7072] hsr_slave_1: entered promiscuous mode [ 289.935587][ T7075] team0: Port device team_slave_0 added [ 289.987053][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 289.989537][ T7075] team0: Port device team_slave_1 added [ 290.086419][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.094237][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.120762][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.145920][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.153217][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.179473][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.214933][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 290.226628][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.233217][ T6261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.242924][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32770, setting to 1024 [ 290.259405][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 290.272532][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 290.290033][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.321363][ T8] usb 4-1: config 0 descriptor?? [ 290.365780][ T7075] hsr_slave_0: entered promiscuous mode [ 290.372895][ T7075] hsr_slave_1: entered promiscuous mode [ 290.381975][ T7075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.390659][ T7075] Cannot create hsr debugfs directory [ 290.440891][ T7072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.628441][ T7072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.762576][ T7072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.785302][ T8] microsoft 0003:045E:07DA.0003: global environment stack underflow [ 290.808738][ T8] microsoft 0003:045E:07DA.0003: item 0 4 1 11 parsing failed [ 290.816804][ T4621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.827312][ T4621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.837597][ T4621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.847578][ T8] microsoft 0003:045E:07DA.0003: parse failed [ 290.847583][ T4621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.853716][ T8] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 290.871464][ T4621] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 290.879840][ T4621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.949523][ T7072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.975258][ T7149] chnl_net:caif_netlink_parms(): no params data found [ 291.203511][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.222566][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.229883][ T7149] bridge_slave_0: entered allmulticast mode [ 291.242185][ T7149] bridge_slave_0: entered promiscuous mode [ 291.260537][ T7072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 291.304702][ T7149] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.315693][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.324125][ T7149] bridge_slave_1: entered allmulticast mode [ 291.331964][ T7149] bridge_slave_1: entered promiscuous mode [ 291.362673][ T6808] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.380335][ T7072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 291.421764][ T7072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 291.438861][ T7072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 291.465323][ T7149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.499001][ T6808] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.533211][ T7149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.577294][ T7149] team0: Port device team_slave_0 added [ 291.612956][ T6808] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.626390][ T7149] team0: Port device team_slave_1 added [ 291.718026][ T6808] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.743609][ T5239] Bluetooth: hci0: command tx timeout [ 291.759548][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.774593][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.801045][ T7149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.824178][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.832258][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.858811][ T7149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.892053][ T7188] chnl_net:caif_netlink_parms(): no params data found [ 292.002130][ T7149] hsr_slave_0: entered promiscuous mode [ 292.009114][ T7149] hsr_slave_1: entered promiscuous mode [ 292.017296][ T7149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.025228][ T7149] Cannot create hsr debugfs directory [ 292.153690][ T5282] usb 4-1: USB disconnect, device number 4 [ 292.219495][ T6808] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.252432][ T7188] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.260354][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.269094][ T7188] bridge_slave_0: entered allmulticast mode [ 292.276181][ T7188] bridge_slave_0: entered promiscuous mode [ 292.291179][ T7188] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.298368][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.307680][ T7188] bridge_slave_1: entered allmulticast mode [ 292.315244][ T7188] bridge_slave_1: entered promiscuous mode [ 292.405146][ T6808] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.485705][ T7188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.516170][ T7188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.526006][ T7075] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.602255][ T6808] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.711756][ T7075] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.731631][ T7075] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.793281][ T6808] netdevsim netdevsim4 € (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.843923][ T7075] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.895140][ T7205] loop3: detected capacity change from 0 to 2048 [ 292.902510][ T7188] team0: Port device team_slave_0 added [ 292.915458][ T7188] team0: Port device team_slave_1 added [ 292.963625][ T7205] loop3: p3 < > p4 < > [ 292.967848][ T7205] loop3: partition table partially beyond EOD, truncated [ 292.982353][ T7205] loop3: p3 start 4284289 is beyond EOD, truncated [ 293.024208][ T7188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.035647][ T7188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.072594][ T7188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.088802][ T7072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.112412][ T5239] Bluetooth: hci2: command tx timeout [ 293.140063][ T7188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.200860][ T7188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.251186][ T7188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.378671][ T7188] hsr_slave_0: entered promiscuous mode [ 293.416943][ T7188] hsr_slave_1: entered promiscuous mode [ 293.425734][ T7188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.443627][ T7188] Cannot create hsr debugfs directory [ 293.548530][ T6808] bridge_slave_1: left allmulticast mode [ 293.561641][ T6808] bridge_slave_1: left promiscuous mode [ 293.579458][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.598964][ T6808] bridge_slave_0: left allmulticast mode [ 293.605078][ T6808] bridge_slave_0: left promiscuous mode [ 293.611068][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.638280][ T6808] bridge_slave_1: left allmulticast mode [ 293.643935][ T6808] bridge_slave_1: left promiscuous mode [ 293.650429][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.681436][ T6808] bridge_slave_0: left allmulticast mode [ 293.687087][ T6808] bridge_slave_0: left promiscuous mode [ 293.700849][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.714488][ T6808] bridge_slave_1: left allmulticast mode [ 293.720130][ T6808] bridge_slave_1: left promiscuous mode [ 293.749224][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.771776][ T6808] bridge_slave_0: left allmulticast mode [ 293.789746][ T6808] bridge_slave_0: left promiscuous mode [ 293.799803][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.825696][ T6808] bridge_slave_1: left allmulticast mode [ 293.832578][ T6808] bridge_slave_1: left promiscuous mode [ 293.838289][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.874289][ T6808] bridge_slave_0: left allmulticast mode [ 293.879971][ T6808] bridge_slave_0: left promiscuous mode [ 293.896117][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.309474][ T7211] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 295.368328][ T5239] Bluetooth: hci2: command tx timeout [ 295.506443][ T7216] loop3: detected capacity change from 0 to 164 [ 297.190374][ T6808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.212838][ T6808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.237968][ T6808] bond0 (unregistering): Released all slaves [ 297.318915][ T7222] loop3: detected capacity change from 0 to 512 [ 297.341743][ T7222] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.290: corrupted in-inode xattr: e_value size too large [ 297.357585][ T7222] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.290: couldn't read orphan inode 15 (err -117) [ 297.371784][ T7222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.507746][ T6534] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.559590][ T5239] Bluetooth: hci2: command tx timeout [ 297.590654][ T6808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.607866][ T6808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.621039][ T6808] bond0 (unregistering): Released all slaves [ 297.804005][ T6808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.829691][ T6808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.848028][ T6808] bond0 (unregistering): Released all slaves [ 297.946248][ T7227] loop3: detected capacity change from 0 to 4096 [ 298.080562][ T6808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.098005][ T7227] loop3: detected capacity change from 0 to 512 [ 298.107535][ T6808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.128019][ T6808] bond0 (unregistering): Released all slaves [ 298.306021][ T7072] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.429272][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.436447][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.445614][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.452766][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.775570][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.783015][ T5239] Bluetooth: hci2: command tx timeout [ 299.888929][ T7234] loop3: detected capacity change from 0 to 2048 [ 299.899658][ T7234] udf: Unknown parameter 'unhnoadinicb' [ 299.951020][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.226733][ T7149] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 300.253094][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.260425][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.318302][ T7149] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 300.358679][ T7149] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 300.398942][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.406084][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.439295][ T7149] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 301.391523][ T7072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.629483][ T7245] loop3: detected capacity change from 0 to 2048 [ 301.693263][ T7245] loop3: p3 < > p4 < > [ 301.700168][ T7245] loop3: partition table partially beyond EOD, truncated [ 301.758341][ T7245] loop3: p3 start 4284289 is beyond EOD, truncated [ 301.920020][ T7149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.979196][ T7149] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.088408][ T7072] veth0_vlan: entered promiscuous mode [ 302.207902][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.215056][ T6133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.256881][ T7188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 302.291433][ T7188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.333412][ T7188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.359190][ T7188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 302.394685][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.401809][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.430369][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.447901][ T7072] veth1_vlan: entered promiscuous mode [ 302.466226][ T6808] hsr_slave_0: left promiscuous mode [ 302.498855][ T6808] hsr_slave_1: left promiscuous mode [ 302.532776][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.540202][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.565472][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.572921][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.614065][ T6808] hsr_slave_0: left promiscuous mode [ 302.620731][ T6808] hsr_slave_1: left promiscuous mode [ 302.657800][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.678464][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.688180][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.696770][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.714347][ T6808] hsr_slave_0: left promiscuous mode [ 302.720542][ T6808] hsr_slave_1: left promiscuous mode [ 302.726592][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.734465][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.741879][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.753101][ T6808] hsr_slave_0: left promiscuous mode [ 302.759903][ T6808] hsr_slave_1: left promiscuous mode [ 302.766085][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.773507][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.793745][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.803793][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.937560][ T6808] veth1_macvtap: left promiscuous mode [ 302.943118][ T6808] veth0_macvtap: left promiscuous mode [ 302.949404][ T6808] veth1_vlan: left promiscuous mode [ 302.954665][ T6808] veth0_vlan: left promiscuous mode [ 302.961658][ T6808] veth1_macvtap: left promiscuous mode [ 302.967196][ T6808] veth0_macvtap: left promiscuous mode [ 302.972961][ T6808] veth1_vlan: left promiscuous mode [ 302.978255][ T6808] veth0_vlan: left promiscuous mode [ 303.376078][ T6808] veth1_macvtap: left promiscuous mode [ 303.404515][ T6808] veth0_macvtap: left promiscuous mode [ 303.434247][ T6808] veth1_vlan: left promiscuous mode [ 303.469105][ T6808] veth0_vlan: left promiscuous mode [ 303.508632][ T6808] veth1_macvtap: left promiscuous mode [ 303.543038][ T6808] veth0_macvtap: left promiscuous mode [ 303.644059][ T6808] veth1_vlan: left promiscuous mode [ 303.649430][ T6808] veth0_vlan: left promiscuous mode [ 304.208885][ T46] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 304.430443][ T46] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 304.448838][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.470517][ T46] usb 4-1: config 0 descriptor?? [ 304.532874][ T6808] team0 (unregistering): Port device team_slave_1 removed [ 304.592384][ T6808] team0 (unregistering): Port device team_slave_0 removed [ 304.743563][ T7258] loop3: detected capacity change from 0 to 128 [ 304.792519][ T46] usb 4-1: string descriptor 0 read error: -71 [ 304.810284][ T46] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 304.821536][ T46] gspca_sonixj: reg_w1 err -71 [ 304.826395][ T46] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 304.849131][ T46] usb 4-1: USB disconnect, device number 5 [ 305.536727][ T6808] team0 (unregistering): Port device team_slave_1 removed [ 305.592708][ T6808] team0 (unregistering): Port device team_slave_0 removed [ 306.122764][ T5279] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 306.329697][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.342546][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.353061][ T5279] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 306.363169][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.374019][ T5279] usb 4-1: config 0 descriptor?? [ 306.481843][ T6808] team0 (unregistering): Port device team_slave_1 removed [ 306.540715][ T6808] team0 (unregistering): Port device team_slave_0 removed [ 306.826048][ T5279] hid (null): nested delimiters [ 306.842564][ T5279] hid-led 0003:27B8:01ED.0004: nested delimiters [ 306.849049][ T5279] hid-led 0003:27B8:01ED.0004: item 0 1 2 10 parsing failed [ 306.869142][ T5279] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -22 [ 307.049544][ T5279] usb 4-1: USB disconnect, device number 6 [ 307.360834][ T6808] team0 (unregistering): Port device team_slave_1 removed [ 307.405829][ T6808] team0 (unregistering): Port device team_slave_0 removed [ 308.608384][ T7072] veth0_macvtap: entered promiscuous mode [ 308.717390][ T7072] veth1_macvtap: entered promiscuous mode [ 308.815541][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.828689][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.840633][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.038649][ T7188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.156403][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.249336][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.322880][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.345489][ T7271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.301'. [ 309.403543][ T7072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.417077][ T7072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.459974][ T7072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.484679][ T7072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.554990][ T7075] veth0_vlan: entered promiscuous mode [ 309.733591][ T7188] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.854529][ T7075] veth1_vlan: entered promiscuous mode [ 309.866766][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.873915][ T6133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.907568][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.914668][ T6133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.947293][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.972873][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.990743][ T7278] loop3: detected capacity change from 0 to 8192 [ 310.011328][ T7149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.038610][ T7278] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 310.109038][ T7075] veth0_macvtap: entered promiscuous mode [ 310.137559][ T7278] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 310.139111][ T7075] veth1_macvtap: entered promiscuous mode [ 310.157697][ T7278] FAT-fs (loop3): Filesystem has been set read-only [ 310.197293][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.205235][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.239478][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.259277][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.276358][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.287103][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.315009][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.439609][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.451558][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.462143][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.483627][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.506206][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.551979][ T7075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.779307][ T7075] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.854406][ T7075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.943965][ T7075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.222909][ T6135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.232777][ T6135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.338853][ T6133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.361002][ T6133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.442920][ T7297] xt_ecn: cannot match TCP bits for non-tcp packets [ 311.494293][ T7188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.552668][ T7149] veth0_vlan: entered promiscuous mode [ 311.628467][ T7301] loop2: detected capacity change from 0 to 1024 [ 311.791050][ T7302] loop3: detected capacity change from 0 to 2048 [ 311.962434][ T7301] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 312.152619][ T7149] veth1_vlan: entered promiscuous mode [ 312.205241][ T7301] System zones: 0-1, 3-12 [ 312.283139][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 312.335514][ T7301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.680877][ T7149] veth0_macvtap: entered promiscuous mode [ 312.709824][ T7188] veth0_vlan: entered promiscuous mode [ 312.735557][ T7188] veth1_vlan: entered promiscuous mode [ 312.754886][ T7149] veth1_macvtap: entered promiscuous mode [ 312.818205][ T7188] veth0_macvtap: entered promiscuous mode [ 312.845365][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.894934][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.941981][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.960735][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.971001][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.975642][ T5279] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 312.981583][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.033515][ T7149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.040376][ T7075] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /0/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 314.099197][ T7188] veth1_macvtap: entered promiscuous mode [ 314.106611][ T7305] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 314.154171][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.174965][ T7075] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 314.202956][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.212929][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.223502][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.233581][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.247282][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.262418][ T7075] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 314.271719][ T7149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.282588][ T7075] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /0/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 314.284989][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.315322][ T7075] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 314.315658][ T7075] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 314.347656][ T7075] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /0/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 314.350766][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.379148][ T5279] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 314.385167][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.390010][ T7318] loop3: detected capacity change from 0 to 1024 [ 314.405125][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.405144][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.416054][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.433763][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.436398][ T7075] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 314.450173][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.467591][ T5279] usb 1-1: config 0 descriptor?? [ 314.482586][ T7318] EXT4-fs: Mount option(s) incompatible with ext3 [ 314.503089][ T7075] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 314.504276][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.520509][ T7075] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /0/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 314.536668][ T7188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.555308][ T7075] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 314.578106][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.597181][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.610522][ T7075] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 314.611714][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.627435][ T7075] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /0/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 314.654721][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.674126][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.685244][ T7075] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 314.697845][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.699014][ T7075] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 314.714842][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.724722][ T7075] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 314.732634][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.750669][ T7075] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 314.755134][ T7188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.772564][ T7075] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 314.778192][ T7149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.785844][ T7075] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 314.804849][ T7149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.813620][ T7149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.824236][ T7149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.855904][ T7188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.868230][ T7188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.877180][ T7188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.887350][ T7188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.084334][ T6135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.105488][ T6135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.176887][ T510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.206128][ T510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.237681][ T5279] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 315.256095][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.259244][ T5279] asix 1-1:0.0: probe with driver asix failed with error -71 [ 315.271028][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.282931][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.298910][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.322461][ T5279] usb 1-1: USB disconnect, device number 6 [ 315.351092][ T7075] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.452274][ T510] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.667890][ T510] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.574493][ T510] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.698233][ T7330] loop3: detected capacity change from 0 to 1024 [ 317.605469][ T7335] evm: overlay not supported [ 318.547479][ T7330] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 318.609240][ T7330] System zones: 0-1, 3-12 [ 318.649625][ T7330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.704811][ T510] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.983525][ T7338] netlink: 68 bytes leftover after parsing attributes in process `syz.4.312'. [ 319.286132][ T4621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.299238][ T4621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.409052][ T4621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.422458][ T6534] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /42/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 319.478585][ T4621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.518745][ T6534] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 319.541876][ T4621] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 319.559035][ T4621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.841756][ T6534] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 319.854976][ T6534] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /42/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 319.893858][ T510] bridge_slave_1: left allmulticast mode [ 319.903522][ T510] bridge_slave_1: left promiscuous mode [ 321.271262][ T510] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.451630][ T6534] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 321.481413][ T510] bridge_slave_0: left allmulticast mode [ 321.495714][ T510] bridge_slave_0: left promiscuous mode [ 321.503063][ T510] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.526495][ T6534] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 321.762914][ T4621] Bluetooth: hci3: command tx timeout [ 322.184334][ T6534] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /42/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 322.436666][ T6534] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 322.485616][ T6534] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 322.526818][ T6534] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /42/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 322.581450][ T6534] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 322.610086][ T6534] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 322.639831][ T6534] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /42/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 322.862939][ T6534] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 322.900729][ T6534] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 322.901339][ T7378] input: syz1 as /devices/virtual/input/input11 [ 322.956481][ T6534] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 323.041708][ T6534] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 323.066241][ T7378] netlink: 'syz.1.320': attribute type 6 has an invalid length. [ 323.070118][ T6534] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 323.091603][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 323.096645][ T6534] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 323.136167][ T6534] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 323.756706][ T510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.777578][ T510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.797265][ T510] bond0 (unregistering): Released all slaves [ 323.873490][ T7381] ALSA: seq fatal error: cannot create timer (-22) [ 323.986733][ T4621] Bluetooth: hci3: command tx timeout [ 324.159571][ T6534] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.450203][ T7388] 9pnet_fd: Insufficient options for proto=fd [ 325.588661][ T510] hsr_slave_0: left promiscuous mode [ 325.641757][ T510] hsr_slave_1: left promiscuous mode [ 325.679033][ T510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.700698][ T510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.728628][ T510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.779260][ T510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.852775][ T510] veth1_macvtap: left promiscuous mode [ 325.872526][ T510] veth0_macvtap: left promiscuous mode [ 325.885322][ T510] veth1_vlan: left promiscuous mode [ 325.901373][ T510] veth0_vlan: left promiscuous mode [ 326.211076][ T4621] Bluetooth: hci3: command tx timeout [ 327.781281][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 327.791726][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 327.799723][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 327.808404][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.816083][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 327.823392][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.840842][ T5239] Bluetooth: hci3: command tx timeout [ 329.021221][ T7415] 9pnet_fd: Insufficient options for proto=fd [ 329.286330][ T510] team0 (unregistering): Port device team_slave_1 removed [ 329.353462][ T510] team0 (unregistering): Port device team_slave_0 removed [ 329.493604][ T7419] 9pnet_fd: Insufficient options for proto=fd [ 329.513816][ T5237] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 329.727335][ T5237] usb 5-1: Using ep0 maxpacket: 16 [ 329.747450][ T5237] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 329.776767][ T5237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 329.788210][ T5237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 329.800334][ T5237] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 329.809987][ T5237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.821960][ T5237] usb 5-1: Product: syz [ 329.826588][ T5237] usb 5-1: Manufacturer: syz [ 329.831295][ T5237] usb 5-1: SerialNumber: syz [ 329.853383][ T5237] usb 5-1: config 0 descriptor?? [ 329.973575][ T5239] Bluetooth: hci1: command tx timeout [ 330.120712][ T5237] usb 5-1: USB disconnect, device number 9 [ 330.367530][ T7350] chnl_net:caif_netlink_parms(): no params data found [ 330.597807][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.610882][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.619914][ T7350] bridge_slave_0: entered allmulticast mode [ 330.627600][ T7350] bridge_slave_0: entered promiscuous mode [ 330.669904][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.710918][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.718195][ T7350] bridge_slave_1: entered allmulticast mode [ 330.750074][ T7350] bridge_slave_1: entered promiscuous mode [ 331.876819][ T4621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.891035][ T4621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.893393][ T7350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.912750][ T4621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.925551][ T4621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.936432][ T4621] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 331.947645][ T7436] loop4: detected capacity change from 0 to 2048 [ 331.956650][ T7350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.965510][ T4621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.103209][ T7436] loop4: p3 < > p4 < > [ 332.107416][ T7436] loop4: partition table partially beyond EOD, truncated [ 332.139804][ T7436] loop4: p3 start 4284289 is beyond EOD, truncated [ 332.179856][ T7408] chnl_net:caif_netlink_parms(): no params data found [ 332.198398][ T4621] Bluetooth: hci1: command tx timeout [ 332.206693][ T7350] team0: Port device team_slave_0 added [ 332.236949][ T7350] team0: Port device team_slave_1 added [ 332.513010][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.531727][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.558411][ T7350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.620642][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.638230][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.672208][ T7350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.751898][ T510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.858934][ T7350] hsr_slave_0: entered promiscuous mode [ 332.870232][ T7350] hsr_slave_1: entered promiscuous mode [ 332.877551][ T7350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.892267][ T7350] Cannot create hsr debugfs directory [ 332.918838][ T7450] loop4: detected capacity change from 0 to 32768 [ 332.953643][ T510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.968956][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.976647][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.988951][ T7450] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 333.061154][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.068913][ T7450] XFS (loop4): Starting recovery (logdev: internal) [ 333.090174][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.112548][ T7408] bridge_slave_0: entered allmulticast mode [ 333.139159][ T7450] XFS (loop4): Ending recovery (logdev: internal) [ 333.147431][ T7408] bridge_slave_0: entered promiscuous mode [ 333.177714][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.187453][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.200988][ T7408] bridge_slave_1: entered allmulticast mode [ 333.212197][ T7408] bridge_slave_1: entered promiscuous mode [ 333.313858][ T510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.439256][ T510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.489673][ T7408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.535409][ T7408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.654384][ T7149] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 333.660351][ T7408] team0: Port device team_slave_0 added [ 333.680728][ T7408] team0: Port device team_slave_1 added [ 333.958915][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.983704][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.013460][ T7408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.106916][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 334.106935][ T29] audit: type=1326 audit(1723795476.156:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.4.339" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2afc7799b9 code=0x0 [ 334.171332][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.178632][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.205261][ T7408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.260468][ T4621] Bluetooth: hci2: command tx timeout [ 334.290479][ T510] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.322507][ T7470] netlink: 'syz.4.339': attribute type 10 has an invalid length. [ 334.371208][ T7470] team0: Port device netdevsim0 added [ 334.423038][ T510] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.432143][ T4621] Bluetooth: hci1: command tx timeout [ 334.497193][ T510] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.512051][ T7408] hsr_slave_0: entered promiscuous mode [ 334.528148][ T7408] hsr_slave_1: entered promiscuous mode [ 334.545322][ T7408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.558272][ T7408] Cannot create hsr debugfs directory [ 334.593643][ T510] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.613553][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 334.633622][ T7440] chnl_net:caif_netlink_parms(): no params data found [ 334.799895][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.808882][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.816414][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 334.823892][ T46] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 334.824430][ T7440] bridge_slave_0: entered allmulticast mode [ 334.833356][ T46] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 334.839703][ T7440] bridge_slave_0: entered promiscuous mode [ 334.849726][ T46] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 334.868278][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.876194][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.880955][ T46] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 334.884537][ T7440] bridge_slave_1: entered allmulticast mode [ 334.904479][ T7440] bridge_slave_1: entered promiscuous mode [ 334.915215][ T7350] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 334.923417][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 334.932954][ T46] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 334.942864][ T46] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 334.961866][ T46] usb 1-1: Product: syz [ 334.966932][ T46] usb 1-1: Manufacturer: syz [ 334.971587][ T46] usb 1-1: SerialNumber: syz [ 334.988375][ T46] usb 1-1: config 0 descriptor?? [ 334.996691][ T46] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 335.031956][ T46] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 335.079102][ T7350] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 335.098545][ T510] bridge_slave_1: left allmulticast mode [ 335.106110][ T510] bridge_slave_1: left promiscuous mode [ 335.111889][ T510] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.122096][ T510] bridge_slave_0: left allmulticast mode [ 335.128186][ T510] bridge_slave_0: left promiscuous mode [ 335.134044][ T510] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.280989][ T510] bridge_slave_1: left allmulticast mode [ 335.336979][ T510] bridge_slave_1: left promiscuous mode [ 335.371257][ T7488] capability: warning: `syz.4.341' uses deprecated v2 capabilities in a way that may be insecure [ 335.424358][ T510] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.676055][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 335.692028][ T7475] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 335.704551][ T510] bridge_slave_0: left allmulticast mode [ 335.770365][ T5316] usb 1-1: USB disconnect, device number 7 [ 335.779965][ T510] bridge_slave_0: left promiscuous mode [ 335.852417][ T510] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.972000][ T5316] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 336.473138][ T4621] Bluetooth: hci2: command tx timeout [ 336.637563][ T510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.646528][ T4621] Bluetooth: hci1: command tx timeout [ 336.655855][ T510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.667273][ T510] bond0 (unregistering): Released all slaves [ 336.789860][ T510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.802465][ T510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.813646][ T510] bond0 (unregistering): Released all slaves [ 336.833032][ T7440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.845680][ T7440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.856484][ T7350] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 337.028246][ T7350] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.075508][ T7494] loop4: detected capacity change from 0 to 1024 [ 337.132173][ T7440] team0: Port device team_slave_0 added [ 337.145264][ T7494] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 337.145319][ T7440] team0: Port device team_slave_1 added [ 337.157513][ T7494] System zones: 0-1, 3-12 [ 337.169747][ T7494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.348466][ T7497] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 337.386329][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.400071][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.441442][ T7440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.455591][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.462946][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.489149][ T7440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.615698][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.690666][ T7440] hsr_slave_0: entered promiscuous mode [ 337.697620][ T7440] hsr_slave_1: entered promiscuous mode [ 337.707817][ T7440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.723686][ T7440] Cannot create hsr debugfs directory [ 337.824393][ T7350] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.883338][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.890491][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.938147][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.945275][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.050868][ T7149] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /11/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 338.074286][ T510] hsr_slave_0: left promiscuous mode [ 338.074443][ T7149] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 338.100653][ T7149] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 338.112238][ T5330] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 338.121837][ T7149] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /11/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 338.128807][ T510] hsr_slave_1: left promiscuous mode [ 338.145290][ T7149] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 338.169270][ T510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.169312][ T7149] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 338.177258][ T510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.196630][ T7149] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /11/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 338.218997][ T7149] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 338.219464][ T510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.247351][ T7149] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 338.252585][ T510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.259818][ T7149] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /11/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 338.289153][ T7149] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 338.308999][ T7149] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 338.320969][ T7149] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /11/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 338.327375][ T5330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.345022][ T7149] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 338.353440][ T510] hsr_slave_0: left promiscuous mode [ 338.371154][ T5330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.372759][ T7149] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 338.389726][ T5330] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 338.397574][ T7149] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 338.406657][ T510] hsr_slave_1: left promiscuous mode [ 338.418303][ T7149] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 338.424060][ T5330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.435214][ T7149] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 338.448251][ T5330] usb 1-1: config 0 descriptor?? [ 338.455349][ T510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.470752][ T510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.490095][ T510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.501594][ T510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.505160][ T7149] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 338.593841][ T510] veth1_macvtap: left promiscuous mode [ 338.599497][ T510] veth0_macvtap: left promiscuous mode [ 338.605934][ T510] veth1_vlan: left promiscuous mode [ 338.615357][ T510] veth0_vlan: left promiscuous mode [ 338.631156][ T510] veth1_macvtap: left promiscuous mode [ 338.641465][ T510] veth0_macvtap: left promiscuous mode [ 338.651288][ T510] veth1_vlan: left promiscuous mode [ 338.672933][ T510] veth0_vlan: left promiscuous mode [ 338.697171][ T4621] Bluetooth: hci2: command tx timeout [ 338.917852][ T5330] hid (null): nested delimiters [ 338.934917][ T5330] hid-led 0003:27B8:01ED.0005: nested delimiters [ 338.941308][ T5330] hid-led 0003:27B8:01ED.0005: item 0 1 2 10 parsing failed [ 338.986201][ T5330] hid-led 0003:27B8:01ED.0005: probe with driver hid-led failed with error -22 [ 339.164037][ T3352] usb 1-1: USB disconnect, device number 8 [ 339.514679][ T510] team0 (unregistering): Port device team_slave_1 removed [ 339.557091][ T510] team0 (unregistering): Port device team_slave_0 removed [ 341.059682][ T4621] Bluetooth: hci2: command tx timeout [ 342.073955][ T510] team0 (unregistering): Port device team_slave_1 removed [ 342.148507][ T510] team0 (unregistering): Port device team_slave_0 removed [ 344.324804][ T29] audit: type=1326 audit(1723795485.715:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.0.348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45697799b9 code=0x0 [ 344.386921][ T7408] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.408663][ T7520] netlink: 'syz.0.348': attribute type 10 has an invalid length. [ 344.449753][ T7520] team0: Port device netdevsim0 added [ 344.478628][ T7408] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.503383][ T7408] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.515761][ T7408] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.524124][ T7149] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.755740][ T7408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.822029][ T7408] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.862029][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.869197][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.916385][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.923579][ T6133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.075427][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.137089][ T7440] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.164136][ T7440] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.203199][ T7440] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.233057][ T7440] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.291770][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.302926][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.311978][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.325042][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.333680][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 345.341142][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.678572][ T7350] veth0_vlan: entered promiscuous mode [ 346.000393][ T6808] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.032451][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.351'. [ 346.079774][ T7350] veth1_vlan: entered promiscuous mode [ 346.123614][ T6808] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.204528][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 346.235924][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.259074][ T6808] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.301384][ T7440] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.337481][ T7408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.375706][ T7408] veth0_vlan: entered promiscuous mode [ 346.462555][ T6808] team0: Port device netdevsim0 removed [ 346.479081][ T6808] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.509064][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.516237][ T510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.540284][ T510] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.547512][ T510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.567789][ T7408] veth1_vlan: entered promiscuous mode [ 346.580579][ T7350] veth0_macvtap: entered promiscuous mode [ 346.594430][ T7350] veth1_macvtap: entered promiscuous mode [ 347.481218][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.492440][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.503544][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.514508][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.527945][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.553185][ T7408] veth0_macvtap: entered promiscuous mode [ 347.591542][ T5239] Bluetooth: hci0: command tx timeout [ 347.663412][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.685146][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.699618][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.710187][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.734393][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.746589][ T7350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.755534][ T7350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.766490][ T7350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.775783][ T7350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.825073][ T7408] veth1_macvtap: entered promiscuous mode [ 347.918748][ T6808] bridge_slave_1: left allmulticast mode [ 347.936092][ T6808] bridge_slave_1: left promiscuous mode [ 347.942168][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.969751][ T6808] bridge_slave_0: left allmulticast mode [ 347.975402][ T6808] bridge_slave_0: left promiscuous mode [ 347.993296][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.752278][ T6808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.793468][ T6808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.879294][ T6808] bond0 (unregistering): Released all slaves [ 349.021768][ T7527] chnl_net:caif_netlink_parms(): no params data found [ 349.105621][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.119835][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.129932][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.140750][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.150970][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.161599][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.173053][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.240879][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.256697][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.267388][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.283121][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.293306][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.308716][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.320263][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.392019][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.404572][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.451021][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.478452][ T6808] hsr_slave_0: left promiscuous mode [ 349.510732][ T6808] hsr_slave_1: left promiscuous mode [ 349.546784][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.555757][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.576159][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.591367][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.640582][ T6808] veth1_macvtap: left promiscuous mode [ 349.647606][ T6808] veth0_macvtap: left promiscuous mode [ 349.653343][ T6808] veth1_vlan: left promiscuous mode [ 349.658992][ T6808] veth0_vlan: left promiscuous mode [ 349.820228][ T5239] Bluetooth: hci0: command tx timeout [ 350.101013][ T6808] team0 (unregistering): Port device team_slave_1 removed [ 350.144980][ T6808] team0 (unregistering): Port device team_slave_0 removed [ 350.530273][ T7408] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.540102][ T7408] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.548912][ T7408] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.557740][ T7408] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.567876][ T7527] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.582101][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.590280][ T7527] bridge_slave_0: entered allmulticast mode [ 350.601496][ T7527] bridge_slave_0: entered promiscuous mode [ 350.609669][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.617045][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.624554][ T7527] bridge_slave_1: entered allmulticast mode [ 350.631497][ T7527] bridge_slave_1: entered promiscuous mode [ 350.740738][ T7527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.759403][ T7527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.775756][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.788245][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.875525][ T7527] team0: Port device team_slave_0 added [ 350.898593][ T7527] team0: Port device team_slave_1 added [ 351.022483][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.047878][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.131560][ T7527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.160889][ T7440] veth0_vlan: entered promiscuous mode [ 351.968824][ T7440] veth1_vlan: entered promiscuous mode [ 352.053672][ T5239] Bluetooth: hci0: command tx timeout [ 352.081847][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.088821][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.120374][ T7527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.202771][ T7573] loop2: detected capacity change from 0 to 2048 [ 352.232020][ T7573] EXT4-fs: Ignoring removed nobh option [ 352.237603][ T7573] EXT4-fs: Ignoring removed mblk_io_submit option [ 352.263522][ T6135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.284291][ T6135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.313932][ T7527] hsr_slave_0: entered promiscuous mode [ 352.327753][ T7527] hsr_slave_1: entered promiscuous mode [ 352.335032][ T7527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.345318][ T7527] Cannot create hsr debugfs directory [ 352.404133][ T7573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.418411][ T7440] veth0_macvtap: entered promiscuous mode [ 352.643637][ T7578] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 352.821458][ T7578] EXT4-fs (loop2): Remounting filesystem read-only [ 352.996373][ T7579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.358'. [ 353.017384][ T6808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.028712][ T7440] veth1_macvtap: entered promiscuous mode [ 353.060516][ T6808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.125638][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.147747][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.173444][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.185545][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.198224][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.226710][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.254461][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.317960][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.329766][ T7350] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.353979][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.363892][ T7584] loop3: detected capacity change from 0 to 256 [ 353.363928][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.388357][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.401935][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.424588][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.601061][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.636512][ T7440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.644170][ T7584] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 353.716209][ T7440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.789616][ T7440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.798803][ T7440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.519237][ T5239] Bluetooth: hci0: command tx timeout [ 355.063590][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 356.077639][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.124883][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.255595][ T7611] netlink: 32 bytes leftover after parsing attributes in process `syz.3.361'. [ 356.260579][ T7607] GUP no longer grows the stack in syz.0.363 (7607): 20009000-2000c000 (20006000) [ 356.287751][ T7605] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 356.310312][ T7607] CPU: 0 UID: 0 PID: 7607 Comm: syz.0.363 Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 356.320512][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 356.330745][ T7607] Call Trace: [ 356.334082][ T7607] [ 356.337052][ T7607] dump_stack_lvl+0x241/0x360 [ 356.341795][ T7607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.347039][ T7607] ? __pfx__printk+0x10/0x10 [ 356.351784][ T7607] ? find_vma+0xf9/0x170 [ 356.356142][ T7607] ? vma_is_secretmem+0xd/0x50 [ 356.360930][ T7607] ? check_vma_flags+0x531/0x5a0 [ 356.365880][ T7607] __get_user_pages+0x438c/0x4910 [ 356.370916][ T7607] ? __kernel_text_address+0xd/0x40 [ 356.376142][ T7607] ? mark_lock+0x9a/0x350 [ 356.380504][ T7607] ? __pfx___get_user_pages+0x10/0x10 [ 356.385889][ T7607] ? __pfx_lock_acquire+0x10/0x10 [ 356.390956][ T7607] __gup_longterm_locked+0x3ba/0x17d0 [ 356.396363][ T7607] pin_user_pages+0x137/0x1f0 [ 356.401067][ T7607] ? __pfx_pin_user_pages+0x10/0x10 [ 356.406277][ T7607] ? __kmalloc_node_noprof+0x247/0x440 [ 356.411757][ T7607] xdp_umem_create+0x978/0xf30 [ 356.416543][ T7607] xsk_setsockopt+0x732/0x950 [ 356.421243][ T7607] ? __pfx_xsk_setsockopt+0x10/0x10 [ 356.426452][ T7607] ? aa_sock_opt_perm+0x79/0x120 [ 356.431408][ T7607] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 356.436963][ T7607] ? security_socket_setsockopt+0x87/0xb0 [ 356.442701][ T7607] ? __pfx_xsk_setsockopt+0x10/0x10 [ 356.447918][ T7607] do_sock_setsockopt+0x3af/0x720 [ 356.452980][ T7607] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 356.458572][ T7607] __sys_setsockopt+0x1a8/0x250 [ 356.463442][ T7607] __x64_sys_setsockopt+0xb5/0xd0 [ 356.468487][ T7607] do_syscall_64+0xf3/0x230 [ 356.473019][ T7607] ? clear_bhb_loop+0x35/0x90 [ 356.477716][ T7607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.483730][ T7607] RIP: 0033:0x7f45697799b9 [ 356.488174][ T7607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.507800][ T7607] RSP: 002b:00007f456a566038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 356.516237][ T7607] RAX: ffffffffffffffda RBX: 00007f4569915f80 RCX: 00007f45697799b9 [ 356.524238][ T7607] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 356.532225][ T7607] RBP: 00007f45697e78d8 R08: 0000000000000020 R09: 0000000000000000 [ 356.540208][ T7607] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 356.548209][ T7607] R13: 0000000000000000 R14: 00007f4569915f80 R15: 00007ffc61b91138 [ 356.556224][ T7607] [ 356.565130][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.587262][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.644230][ T7607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.363'. [ 356.917162][ T7613] Bluetooth: MGMT ver 1.23 [ 357.301123][ T7622] loop1: detected capacity change from 0 to 1024 [ 357.730347][ T7527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 357.796624][ T7527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 357.863763][ T7527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 357.904314][ T7527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 358.028087][ T7527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.200059][ T7527] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.241352][ T7527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.388156][ T4621] Bluetooth: hci0: command 0x0401 tx timeout [ 358.886517][ T7638] loop2: detected capacity change from 0 to 32768 [ 358.987544][ T7527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.050824][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.058070][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.069228][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.076479][ T6808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.086732][ T5281] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 359.161532][ T7634] jfs_strtoUCS: char2uni returned -22. [ 359.167343][ T7634] charset = cp949, char = 0xd4 [ 359.413199][ T5281] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 359.448055][ T5281] usb 2-1: config 0 has no interface number 0 [ 359.467409][ T5281] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.591718][ T5281] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.641412][ T5281] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 359.661619][ T5281] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 359.680581][ T5281] usb 2-1: Manufacturer: syz [ 359.688217][ T5281] usb 2-1: config 0 descriptor?? [ 359.952124][ T7527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.507524][ T4621] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 360.593095][ T4621] Bluetooth: hci1: Injecting HCI hardware error event [ 360.602641][ T5239] Bluetooth: hci1: hardware error 0x00 [ 360.689928][ T7628] loop1: detected capacity change from 0 to 256 [ 360.735777][ T7628] vfat: Bad value for 'fmask' [ 360.793638][ T5281] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.0006/input/input12 [ 360.849630][ T5281] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 360.923236][ T5281] usb 2-1: USB disconnect, device number 13 [ 362.130727][ T7665] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 362.297262][ T7671] netlink: 52 bytes leftover after parsing attributes in process `syz.3.376'. [ 362.428758][ T7527] veth0_vlan: entered promiscuous mode [ 362.478433][ T7527] veth1_vlan: entered promiscuous mode [ 362.579814][ T5330] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 362.595886][ T7527] veth0_macvtap: entered promiscuous mode [ 362.683158][ T7527] veth1_macvtap: entered promiscuous mode [ 362.900456][ T5239] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 363.146015][ T5330] usb 1-1: too many configurations: 12, using maximum allowed: 8 [ 363.167181][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.197061][ T7682] loop3: detected capacity change from 0 to 1024 [ 363.413692][ T5330] usb 1-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 363.422801][ T5330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.433833][ T5330] usb 1-1: config 0 descriptor?? [ 363.439408][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.065512][ C0] hrtimer: interrupt took 45742 ns [ 364.362786][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.384766][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.431505][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.462454][ T7690] loop1: detected capacity change from 0 to 256 [ 364.508790][ T7690] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 364.522740][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.699401][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.800410][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.827971][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.141385][ T7693] loop2: detected capacity change from 0 to 8 [ 366.246234][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.311744][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.351502][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.652906][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.720900][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.138800][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.198242][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.240879][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.285971][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.561338][ T7527] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.572720][ T7527] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.373257][ T5330] usb 1-1: string descriptor 0 read error: -32 [ 369.420512][ T7527] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.457235][ T7527] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.946077][ T29] audit: type=1326 audit(1723795509.493:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aeff799b9 code=0x7ffc0000 [ 370.031391][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.122167][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.582863][ T7713] syzkaller0: entered promiscuous mode [ 370.588750][ T7713] syzkaller0: entered allmulticast mode [ 370.619722][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.637177][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.669461][ T29] audit: type=1326 audit(1723795509.493:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aeff799b9 code=0x7ffc0000 [ 370.793869][ T29] audit: type=1326 audit(1723795509.493:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f4aeff799b9 code=0x7ffc0000 [ 371.851882][ T29] audit: type=1326 audit(1723795509.503:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aeff799b9 code=0x7ffc0000 [ 371.895344][ T5279] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 372.006810][ T29] audit: type=1326 audit(1723795509.503:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aeff799b9 code=0x7ffc0000 [ 372.148966][ T5279] usb 3-1: Using ep0 maxpacket: 16 [ 372.168222][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 372.201270][ T29] audit: type=1326 audit(1723795511.682:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.4.350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcaa63799b9 code=0x0 [ 372.248059][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 372.323799][ T5279] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 372.373104][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.425621][ T7733] loop4: detected capacity change from 0 to 2048 [ 372.436735][ T5279] usb 3-1: config 0 descriptor?? [ 372.501280][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 372.547040][ T7733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.789327][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 372.826206][ T7741] loop3: detected capacity change from 0 to 128 [ 372.881634][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.898278][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.910781][ T7741] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.950768][ T7741] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 372.990927][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 373.014050][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 373.055493][ T7731] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 373.064776][ T25] usb 2-1: config 1 has an invalid descriptor of length 188, skipping remainder of the config [ 373.074283][ T5279] hid (null): bogus close delimiter [ 373.086752][ T7731] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1986 with error 28 [ 373.118883][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 373.127420][ T5279] hid (null): invalid report_count 58028 [ 373.133744][ T7731] EXT4-fs (loop4): This should not happen!! Data will be lost [ 373.133744][ T7731] [ 373.144273][ T5279] hid (null): unknown global tag 0xd [ 373.149885][ T7731] EXT4-fs (loop4): Total free blocks count 0 [ 373.162114][ T5279] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 373.175697][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.176124][ T7731] EXT4-fs (loop4): Free/Dirty block details [ 373.201798][ T5279] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 373.236825][ T7731] EXT4-fs (loop4): free_blocks=2415919104 [ 373.242952][ T25] usb 2-1: New USB device found, idVendor=0325, idProduct=0000, bcdDevice= 0.00 [ 373.243445][ T5279] hid-generic 0003:0158:0100.0007: bogus close delimiter [ 373.260143][ T7731] EXT4-fs (loop4): dirty_blocks=2000 [ 373.273199][ T7731] EXT4-fs (loop4): Block reservation details [ 373.279874][ T5279] hid-generic 0003:0158:0100.0007: item 0 0 2 10 parsing failed [ 373.288283][ T7731] EXT4-fs (loop4): i_reserved_data_blocks=125 [ 373.297011][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.297579][ T5279] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 373.324561][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.336411][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.354528][ T4621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.369587][ T4621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.378011][ T4621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.385988][ T4621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.396354][ T4621] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 373.403802][ T4621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.419271][ T5330] usb 3-1: USB disconnect, device number 4 [ 373.543938][ T5279] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 373.717923][ T7527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.762200][ T5279] usb 4-1: Using ep0 maxpacket: 16 [ 373.787612][ T5279] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 373.848427][ T5279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 373.917719][ T5279] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 373.923071][ T7747] ------------[ cut here ]------------ [ 373.933783][ T7747] WARNING: CPU: 1 PID: 7747 at include/linux/memcontrol.h:373 folio_memcg+0x111/0x220 [ 373.943508][ T7747] Modules linked in: [ 373.944903][ T5279] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 373.947519][ T7747] CPU: 1 UID: 0 PID: 7747 Comm: syz.1.391 Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 373.971687][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 373.975948][ T7749] loop4: detected capacity change from 0 to 256 [ 373.982768][ T7747] RIP: 0010:folio_memcg+0x111/0x220 [ 373.994290][ T7747] Code: 10 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 e2 2f f8 ff 48 8b 1b 48 89 d8 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 90 <0f> 0b 90 eb ce 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 55 ff ff ff [ 374.008034][ T5279] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.014092][ T7747] RSP: 0018:ffffc9000319e9e0 EFLAGS: 00010246 [ 374.032030][ T7747] RAX: 0000000000000000 RBX: ffff88807bf62e80 RCX: 0000000080000000 [ 374.040137][ T7747] RDX: 0000000000000000 RSI: ffffffff8c0adfc0 RDI: ffffffff8c60a8c0 [ 374.048210][ T7747] RBP: ffffea0001518008 R08: ffffffff9018c5af R09: 1ffffffff20318b5 [ 374.056691][ T7747] R10: dffffc0000000000 R11: fffffbfff20318b6 R12: dffffc0000000000 [ 374.065250][ T7747] R13: 0000000000400018 R14: ffffea0001518000 R15: ffffea0001518030 [ 374.073656][ T7747] FS: 00007fcfca7de6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 374.083491][ T7747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.090841][ T7747] CR2: 00007fb14d8b9440 CR3: 000000005494a000 CR4: 00000000003506f0 [ 374.091729][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 374.098921][ T7747] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 374.115350][ T7747] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 374.123379][ T7747] Call Trace: [ 374.126793][ T7747] [ 374.131396][ T7747] ? __warn+0x163/0x4e0 [ 374.135615][ T7747] ? folio_memcg+0x111/0x220 [ 374.140383][ T7747] ? report_bug+0x2b3/0x500 [ 374.144962][ T7747] ? folio_memcg+0x111/0x220 [ 374.149667][ T7747] ? handle_bug+0x60/0x90 [ 374.154103][ T7747] ? exc_invalid_op+0x1a/0x50 [ 374.158992][ T7747] ? asm_exc_invalid_op+0x1a/0x20 [ 374.164100][ T7747] ? folio_memcg+0x111/0x220 [ 374.168880][ T7747] split_page_memcg+0x58/0x3f0 [ 374.173712][ T7747] ? split_page+0x205/0x230 [ 374.178279][ T7747] __vmalloc_node_range_noprof+0xa63/0x1400 [ 374.184581][ T5279] usb 4-1: SerialNumber: syz [ 374.190373][ T7747] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 374.196781][ T7747] ? rcu_is_watching+0x15/0xb0 [ 374.201901][ T7747] ? trace_kmalloc+0x1f/0xd0 [ 374.206613][ T7747] ? __kmalloc_node_noprof+0x247/0x440 [ 374.212182][ T7747] ? __kvmalloc_node_noprof+0x72/0x1b0 [ 374.217717][ T7747] __kvmalloc_node_noprof+0x142/0x1b0 [ 374.223227][ T7747] ? hash_netport_create+0x356/0x1040 [ 374.228690][ T7747] hash_netport_create+0x356/0x1040 [ 374.234037][ T7747] ? __pfx_hash_netport_create+0x10/0x10 [ 374.237775][ T7741] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 374.239747][ T7747] ip_set_create+0xa5c/0x1900 [ 374.251908][ T7747] ? ip_set_create+0x45e/0x1900 [ 374.259581][ T7747] ? __pfx___mutex_trylock_common+0x2/0x10 [ 374.259627][ T7747] ? __pfx_ip_set_create+0x10/0x10 [ 374.259657][ T7747] ? trace_contention_end+0x3c/0x120 [ 374.259753][ T7747] ? nfnetlink_rcv_msg+0x225/0x1180 [ 374.259791][ T7747] nfnetlink_rcv_msg+0xbec/0x1180 [ 374.259827][ T7747] ? nfnetlink_rcv_msg+0x225/0x1180 [ 374.259911][ T7747] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 374.259951][ T7747] ? stack_trace_save+0x118/0x1d0 [ 374.260042][ T7747] ? dev_hard_start_xmit+0x27a/0x7e0 [ 374.260067][ T7747] ? __dev_queue_xmit+0x1b63/0x3e90 [ 374.260091][ T7747] ? __netlink_deliver_tap+0x54d/0x7c0 [ 374.260122][ T7747] ? netlink_deliver_tap+0x19d/0x1b0 [ 374.260180][ T7747] ? netlink_unicast+0x7c4/0x990 [ 374.260215][ T7747] ? netlink_sendmsg+0x8e4/0xcb0 [ 374.260246][ T7747] ? __sock_sendmsg+0x221/0x270 [ 374.260277][ T7747] ? ____sys_sendmsg+0x525/0x7d0 [ 374.260324][ T7747] ? __sys_sendmsg+0x298/0x390 [ 374.260365][ T7747] netlink_rcv_skb+0x1e3/0x430 [ 374.260398][ T7747] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 374.260466][ T7747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.260511][ T7747] ? apparmor_capable+0x13b/0x1b0 [ 374.260541][ T7747] ? bpf_lsm_capable+0x9/0x10 [ 374.260569][ T7747] ? security_capable+0x90/0xb0 [ 374.260636][ T7747] nfnetlink_rcv+0x297/0x2ad0 [ 374.260676][ T7747] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 374.260716][ T7747] ? __dev_queue_xmit+0x2da/0x3e90 [ 374.260771][ T7747] ? __dev_queue_xmit+0x1763/0x3e90 [ 374.260795][ T7747] ? kasan_save_track+0x51/0x80 [ 374.260828][ T7747] ? do_syscall_64+0xf3/0x230 [ 374.260862][ T7747] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 374.260921][ T7747] ? __dev_queue_xmit+0x2da/0x3e90 [ 374.260957][ T7747] ? __pfx___dev_queue_xmit+0x10/0x10 [ 374.261000][ T7747] ? ref_tracker_free+0x643/0x7e0 [ 374.261064][ T7747] ? __asan_memcpy+0x40/0x70 [ 374.261088][ T7747] ? __pfx_ref_tracker_free+0x10/0x10 [ 374.261134][ T7747] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.261166][ T7747] ? skb_clone+0x240/0x390 [ 374.261236][ T7747] ? __pfx_lock_release+0x10/0x10 [ 374.261282][ T7747] ? __netlink_deliver_tap+0x77e/0x7c0 [ 374.261362][ T7747] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.261411][ T7747] netlink_unicast+0x7f6/0x990 [ 374.261455][ T7747] ? __pfx_netlink_unicast+0x10/0x10 [ 374.261508][ T7747] ? __virt_addr_valid+0x183/0x530 [ 374.261538][ T7747] ? __check_object_size+0x49c/0x900 [ 374.261573][ T7747] ? bpf_lsm_netlink_send+0x9/0x10 [ 374.261611][ T7747] netlink_sendmsg+0x8e4/0xcb0 [ 374.261682][ T7747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.261724][ T7747] ? __import_iovec+0x536/0x820 [ 374.261758][ T7747] ? aa_sock_msg_perm+0x91/0x160 [ 374.261818][ T7747] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 374.261854][ T7747] ? security_socket_sendmsg+0x87/0xb0 [ 374.261884][ T7747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.261916][ T7747] __sock_sendmsg+0x221/0x270 [ 374.261980][ T7747] ____sys_sendmsg+0x525/0x7d0 [ 374.262034][ T7747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.262080][ T7747] __sys_sendmsg+0x298/0x390 [ 374.262147][ T7747] ? __pfx___sys_sendmsg+0x10/0x10 [ 374.262206][ T7747] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 374.262284][ T7747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 374.262321][ T7747] ? exc_page_fault+0x590/0x8c0 [ 374.262356][ T7747] ? do_syscall_64+0xb6/0x230 [ 374.262392][ T7747] do_syscall_64+0xf3/0x230 [ 374.262449][ T7747] ? clear_bhb_loop+0x35/0x90 [ 374.262479][ T7747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.262515][ T7747] RIP: 0033:0x7fcfcad799b9 [ 374.262538][ T7747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.262589][ T7747] RSP: 002b:00007fcfca7de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.262619][ T7747] RAX: ffffffffffffffda RBX: 00007fcfcaf16130 RCX: 00007fcfcad799b9 [ 374.262638][ T7747] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 374.262655][ T7747] RBP: 00007fcfcade78d8 R08: 0000000000000000 R09: 0000000000000000 [ 374.262672][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.262688][ T7747] R13: 0000000000000001 R14: 00007fcfcaf16130 R15: 00007ffc3e011048 [ 374.262748][ T7747] [ 374.262768][ T7747] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 374.262783][ T7747] CPU: 1 UID: 0 PID: 7747 Comm: syz.1.391 Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 374.262809][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 374.262823][ T7747] Call Trace: [ 374.262838][ T7747] [ 374.262850][ T7747] dump_stack_lvl+0x241/0x360 [ 374.262887][ T7747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.262943][ T7747] ? __pfx__printk+0x10/0x10 [ 374.262982][ T7747] ? vscnprintf+0x5d/0x90 [ 374.263009][ T7747] panic+0x349/0x870 [ 374.263041][ T7747] ? __warn+0x172/0x4e0 [ 374.263067][ T7747] ? __pfx_panic+0x10/0x10 [ 374.263118][ T7747] __warn+0x346/0x4e0 [ 374.263142][ T7747] ? folio_memcg+0x111/0x220 [ 374.263169][ T7747] report_bug+0x2b3/0x500 [ 374.263198][ T7747] ? folio_memcg+0x111/0x220 [ 374.263226][ T7747] handle_bug+0x60/0x90 [ 374.263260][ T7747] exc_invalid_op+0x1a/0x50 [ 374.263294][ T7747] asm_exc_invalid_op+0x1a/0x20 [ 374.263316][ T7747] RIP: 0010:folio_memcg+0x111/0x220 [ 374.263338][ T7747] Code: 10 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 e2 2f f8 ff 48 8b 1b 48 89 d8 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 90 <0f> 0b 90 eb ce 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 55 ff ff ff [ 374.263358][ T7747] RSP: 0018:ffffc9000319e9e0 EFLAGS: 00010246 [ 374.263380][ T7747] RAX: 0000000000000000 RBX: ffff88807bf62e80 RCX: 0000000080000000 [ 374.263397][ T7747] RDX: 0000000000000000 RSI: ffffffff8c0adfc0 RDI: ffffffff8c60a8c0 [ 374.263415][ T7747] RBP: ffffea0001518008 R08: ffffffff9018c5af R09: 1ffffffff20318b5 [ 374.263433][ T7747] R10: dffffc0000000000 R11: fffffbfff20318b6 R12: dffffc0000000000 [ 374.263451][ T7747] R13: 0000000000400018 R14: ffffea0001518000 R15: ffffea0001518030 [ 374.263490][ T7747] split_page_memcg+0x58/0x3f0 [ 374.263522][ T7747] ? split_page+0x205/0x230 [ 374.263549][ T7747] __vmalloc_node_range_noprof+0xa63/0x1400 [ 374.263606][ T7747] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 374.263635][ T7747] ? rcu_is_watching+0x15/0xb0 [ 374.263673][ T7747] ? trace_kmalloc+0x1f/0xd0 [ 374.263703][ T7747] ? __kmalloc_node_noprof+0x247/0x440 [ 374.263734][ T7747] ? __kvmalloc_node_noprof+0x72/0x1b0 [ 374.263763][ T7747] __kvmalloc_node_noprof+0x142/0x1b0 [ 374.263788][ T7747] ? hash_netport_create+0x356/0x1040 [ 374.263816][ T7747] hash_netport_create+0x356/0x1040 [ 374.263855][ T7747] ? __pfx_hash_netport_create+0x10/0x10 [ 374.263883][ T7747] ip_set_create+0xa5c/0x1900 [ 374.263915][ T7747] ? ip_set_create+0x45e/0x1900 [ 374.263952][ T7747] ? __pfx___mutex_trylock_common+0x2/0x10 [ 374.263987][ T7747] ? __pfx_ip_set_create+0x10/0x10 [ 374.264015][ T7747] ? trace_contention_end+0x3c/0x120 [ 374.264076][ T7747] ? nfnetlink_rcv_msg+0x225/0x1180 [ 374.264123][ T7747] nfnetlink_rcv_msg+0xbec/0x1180 [ 374.264157][ T7747] ? nfnetlink_rcv_msg+0x225/0x1180 [ 374.264214][ T7747] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 374.264246][ T7747] ? stack_trace_save+0x118/0x1d0 [ 374.264301][ T7747] ? dev_hard_start_xmit+0x27a/0x7e0 [ 374.264322][ T7747] ? __dev_queue_xmit+0x1b63/0x3e90 [ 374.264344][ T7747] ? __netlink_deliver_tap+0x54d/0x7c0 [ 374.264374][ T7747] ? netlink_deliver_tap+0x19d/0x1b0 [ 374.264405][ T7747] ? netlink_unicast+0x7c4/0x990 [ 374.264430][ T7747] ? netlink_sendmsg+0x8e4/0xcb0 [ 374.264461][ T7747] ? __sock_sendmsg+0x221/0x270 [ 374.264488][ T7747] ? ____sys_sendmsg+0x525/0x7d0 [ 374.264510][ T7747] ? __sys_sendmsg+0x298/0x390 [ 374.264548][ T7747] netlink_rcv_skb+0x1e3/0x430 [ 374.264581][ T7747] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 374.264617][ T7747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.264661][ T7747] ? apparmor_capable+0x13b/0x1b0 [ 374.264688][ T7747] ? bpf_lsm_capable+0x9/0x10 [ 374.264716][ T7747] ? security_capable+0x90/0xb0 [ 374.264765][ T7747] nfnetlink_rcv+0x297/0x2ad0 [ 374.264805][ T7747] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 374.264844][ T7747] ? __dev_queue_xmit+0x2da/0x3e90 [ 374.264870][ T7747] ? __dev_queue_xmit+0x1763/0x3e90 [ 374.264893][ T7747] ? kasan_save_track+0x51/0x80 [ 374.264935][ T7747] ? do_syscall_64+0xf3/0x230 [ 374.264969][ T7747] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 374.265002][ T7747] ? __dev_queue_xmit+0x2da/0x3e90 [ 374.265031][ T7747] ? __pfx___dev_queue_xmit+0x10/0x10 [ 374.265077][ T7747] ? ref_tracker_free+0x643/0x7e0 [ 374.265107][ T7747] ? __asan_memcpy+0x40/0x70 [ 374.265129][ T7747] ? __pfx_ref_tracker_free+0x10/0x10 [ 374.265173][ T7747] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.265202][ T7747] ? skb_clone+0x240/0x390 [ 374.265227][ T7747] ? __pfx_lock_release+0x10/0x10 [ 374.265263][ T7747] ? __netlink_deliver_tap+0x77e/0x7c0 [ 374.265305][ T7747] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.265339][ T7747] netlink_unicast+0x7f6/0x990 [ 374.265376][ T7747] ? __pfx_netlink_unicast+0x10/0x10 [ 374.265403][ T7747] ? __virt_addr_valid+0x183/0x530 [ 374.265430][ T7747] ? __check_object_size+0x49c/0x900 [ 374.265463][ T7747] ? bpf_lsm_netlink_send+0x9/0x10 [ 374.265498][ T7747] netlink_sendmsg+0x8e4/0xcb0 [ 374.265542][ T7747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.265577][ T7747] ? __import_iovec+0x536/0x820 [ 374.265610][ T7747] ? aa_sock_msg_perm+0x91/0x160 [ 374.265644][ T7747] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 374.265677][ T7747] ? security_socket_sendmsg+0x87/0xb0 [ 374.265707][ T7747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.265737][ T7747] __sock_sendmsg+0x221/0x270 [ 374.265770][ T7747] ____sys_sendmsg+0x525/0x7d0 [ 374.265810][ T7747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.265852][ T7747] __sys_sendmsg+0x298/0x390 [ 374.265879][ T7747] ? __pfx___sys_sendmsg+0x10/0x10 [ 374.265941][ T7747] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 374.265986][ T7747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 374.266022][ T7747] ? exc_page_fault+0x590/0x8c0 [ 374.266054][ T7747] ? do_syscall_64+0xb6/0x230 [ 374.266089][ T7747] do_syscall_64+0xf3/0x230 [ 374.266120][ T7747] ? clear_bhb_loop+0x35/0x90 [ 374.266146][ T7747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.266181][ T7747] RIP: 0033:0x7fcfcad799b9 [ 374.266199][ T7747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.266219][ T7747] RSP: 002b:00007fcfca7de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.266242][ T7747] RAX: ffffffffffffffda RBX: 00007fcfcaf16130 RCX: 00007fcfcad799b9 [ 374.266260][ T7747] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 374.266274][ T7747] RBP: 00007fcfcade78d8 R08: 0000000000000000 R09: 0000000000000000 [ 374.266290][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.266304][ T7747] R13: 0000000000000001 R14: 00007fcfcaf16130 R15: 00007ffc3e011048 [ 374.266337][ T7747] [ 374.266655][ T7747] Kernel Offset: disabled