last executing test programs: 9m41.453657495s ago: executing program 32 (id=387): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0xf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x84}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x50}}, 0x2000c800) syz_emit_vhci(&(0x7f00000009c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xf8, 0xc9, @none, 0x2, 0xa, 0x6, 0x5, 0x74, 0x2}}}, 0x14) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) epoll_create(0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f34", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) 9m16.504763423s ago: executing program 0 (id=456): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x22000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x761ad000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000a40)={0x23d, 0x7d, 0x0, {{0x500, 0xfc, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{evbox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x00\x00\xff\n\xbc\x92\xff`\x00', 0x2c, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb5\xf6\x1d\x8d\xd8\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03C\xda>\xf7uS\xab4\xd5\x15\x1a\x1e6\x04P\xb1T\aT\x99\x8c8\xe0V\v\xf0-\xd8\v\xb1\xef\xb24\xd5\x9e\x13Q\xe4\x85\x98\x00\x00\x00\x00\x00\x00\x00\x00', 0x1d, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6z\xd4\xd9\x8b\xf8\xc2\xa5c3\x80\xca\x00^\xdc\x02SL\xbc\x9flF\x9f\xcb\xf0\xa2\xcb\x8d>\xbc&Q\xeb\xf0m\xff\xe9\xd2k\xa5\'t\xd7\xd3\x1bD\xa5\xde\x01\x13;\xd4-\xf8\x05F\x1a\xe69b\xe1\xcf\xb5\x14\xa1\xb1\x9e\xab\xe8\x94\xbel\xe0G\xf4\x1d\xbd\\\xf0\x03\xf4\xbe\xc1;y>+\x10\x05\xca\v\xac\xe0\x01\x84\xfa\xe0\n\xff\x0f1\xf4\xf5\xed\xe9\xf18\x94\xcbFs\x89\xe30\x06\xc6\xfe\xba\xa0\x0e\xf8o\xe3\xcb\x86Q\xfe4\xff\xd3\xa7|\xf9\xf1\xae\x1b\xcf\x93\xe4\xb6*\x99P\xd9\xb4x\xd4\xb47$p\n\xe8\xac:\xcfr\xe3\xed0s^\xb0W/z?\xae\x89\"\x8cw\xc4\x85\xfb\xcd\xceq8\n\x9a\xd3z.\xaa\x9ax\x1d\x8flM\xdeg2\x8c\xf6', 0x55, '\xf8\xf6i\xfbhm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec%\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xffffff63) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6(0xa, 0x6, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r7) socket$kcm(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, r2, 0x3, 0x1, 0xfffffffc, 0x800, {0x5, 0x8de4, 0x4, 0x69, 0x200, 0x0, 0x0, 0x5, 0x4cab, 0xe154, 0x1000, 0x8001, 0xe4, 0xf9, "fe1d00003413000000000000000caa00000009000000000000a726b427180010"}}) 9m15.449797298s ago: executing program 0 (id=457): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x749bc, 0x2}) fstat(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='&\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xffffffffffffff4c) fanotify_init(0x40, 0x40c02) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) 9m14.675143282s ago: executing program 0 (id=459): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x100600}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 9m14.339363661s ago: executing program 0 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e21, 0x6, @mcast2, 0x10}, {0xa, 0x4e23, 0x3eb3, @mcast1, 0x8}, 0x1, {[0x8, 0x8, 0x6, 0xfffff801, 0x7, 0x2, 0x1, 0x478]}}, 0x5c) r5 = syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0x80885659, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r8, r9, 0x0, 0x2) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r7) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x1}, 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x1, 0x220, &(0x7f0000000780)="$eJzsmb9rFEEUx78zd7d3BgnYCNpYGDCi2dvdU0mTIoJlQIiiloduwpnJnVxWyB0IBhsbSwvB1sbSwsLKwr/AVgsVBAtTWojCyMzO3M3l9m43GrTwfSCb7/x8O+/NfYs7EATx3/Lp47cPjy4uXjkL4DDmUDX9X0rDOdyZ//7J3TOPly49ffHu2Zv27L1Xe/djAKQsHt8D8Hq5hASsnPaMrp4bbms1roLjtNHXwOCn8qfUpI0YDDfMnNuO7hwyQsT+zU4Ng1a41hJxpB4NN756qd0dhlsAavrtpGTO+Favv9EUIu7uFRVpdx4b2q+Ylj/9fsscS7DZk1LV6/rDBzuqbXKDAHyQvxAcodENMKwavYgqfN9XOQjWWkLX3Z7/eHm4f6nI+Q9WfD8mpe1hLH/Vcy2OLOwvVgXASI+6nYWW289IsVg/5GhPe/Zv5HCaOIhr2ut7v7vcfqLyJlcyMp8Tojp+RcfuD3PrfnTXeuBGU6zYmn7+l9XJF9bIsotrRseG3s4IsfIH0T1t3xMKN/Qn5eynHH8qozzwj3qyeae+1esvtDab6/F63I6ixoXgXBCcj+raiNLnFP+raX+acfavTJjrMQ/bzSTphttA0g0H7Sh9Oo67+rLzVa/h2v845k/qpvZUdWhZzY7BzB/X/5WaL2XPvD/xTARBEARBEARBEARBEARBENmcAEP6S5hk5gvRLKLL+hvKXwEAAP//pwVWPg==") r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r11, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) 9m12.451815927s ago: executing program 0 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = socket(0x2, 0x80805, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000000380)=""/96, 0x60) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x1, {0x0}}) ppoll(&(0x7f00000001c0)=[{r3, 0x40}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) 9m11.3390824s ago: executing program 0 (id=470): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r6, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 9m10.219362573s ago: executing program 33 (id=470): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r6, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 8m29.07457703s ago: executing program 6 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r5, 0x0, 0xcf, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x44040) arch_prctl$ARCH_SHSTK_STATUS(0x5005, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'vlan0\x00', &(0x7f0000000180)=@ethtool_rxfh_indir={0x38}}) arch_prctl$ARCH_SHSTK_STATUS(0x5005, 0x0) 8m27.591678904s ago: executing program 6 (id=594): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000500100006000000"], 0x30}, 0x1, 0xffffa888}, 0x0) 8m26.923427838s ago: executing program 6 (id=596): socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$dri(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x1ff}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) 8m23.506157458s ago: executing program 6 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e21, 0x6, @mcast2, 0x10}, {0xa, 0x4e23, 0x3eb3, @mcast1, 0x8}, 0x1, {[0x8, 0x8, 0x6, 0xfffff801, 0x7, 0x2, 0x1, 0x478]}}, 0x5c) r4 = syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0x80885659, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r7, r8, 0x0, 0x2) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r6) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x1}, 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x1, 0x220, &(0x7f0000000780)="$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") r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r10, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) 8m20.362234323s ago: executing program 6 (id=617): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_CAPBSET_DROP(0x18, 0x0) capset(&(0x7f00000003c0)={0x20080522}, &(0x7f0000000440)={0x0, 0x0, 0x7ff}) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, 0x0, 0x400}, 0x14}}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) timer_create(0x8, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe}, {}, {}]}]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) copy_file_range(r1, 0x0, r0, &(0x7f0000000640)=0x9, 0xd8c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8m18.339834929s ago: executing program 6 (id=624): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "11fe75df0cf0b7f306c1c38d006cbcdab485a55631f68b733ef073100463e2c05e2150e7dc069d29328a3e6d3ac59b178d0d1f12d530e9e1513e7ee918c29fd0", 0x23}, 0x48, 0xffffffffffffffff) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000340), 0x4, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = mq_open(&(0x7f0000000000)='}{\x00', 0x40, 0x46, 0x0) mq_notify(r2, &(0x7f0000000080)={0x0, 0xb}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000b003bca3b8d3b4260a44d02ba0000000000000000200082b0cfc4317965fd6e38be02000000000022000000007400a391793ba7f40000070000fdf700"/75], 0x40) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x7, @vifc_lcl_ifindex, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xa3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x753240, 0x8) name_to_handle_at(r5, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00'], &(0x7f0000000100), 0x1200) 8m17.679556535s ago: executing program 34 (id=624): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "11fe75df0cf0b7f306c1c38d006cbcdab485a55631f68b733ef073100463e2c05e2150e7dc069d29328a3e6d3ac59b178d0d1f12d530e9e1513e7ee918c29fd0", 0x23}, 0x48, 0xffffffffffffffff) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000340), 0x4, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = mq_open(&(0x7f0000000000)='}{\x00', 0x40, 0x46, 0x0) mq_notify(r2, &(0x7f0000000080)={0x0, 0xb}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000b003bca3b8d3b4260a44d02ba0000000000000000200082b0cfc4317965fd6e38be02000000000022000000007400a391793ba7f40000070000fdf700"/75], 0x40) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x7, @vifc_lcl_ifindex, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xa3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x753240, 0x8) name_to_handle_at(r5, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00'], &(0x7f0000000100), 0x1200) 5m18.192829267s ago: executing program 5 (id=1124): socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$dri(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x1ff}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) 5m16.955352679s ago: executing program 5 (id=1126): r0 = syz_create_resource$binfmt(0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000200), 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000380), &(0x7f0000000540)={[&(0x7f0000000000)='\x00']}, 0x0) 5m16.516153703s ago: executing program 5 (id=1127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x44000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r3 = socket(0x2, 0x80805, 0x0) getsockopt$nfc_llcp(r3, 0x118, 0x4, &(0x7f0000000380)=""/96, 0x60) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x1, {0x0}}) ppoll(&(0x7f00000001c0)=[{r4, 0x40}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) 5m15.571289673s ago: executing program 5 (id=1132): socket$inet6(0xa, 0x6, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x6aa81, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) mkdir(0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0xc0182101, 0x20000000) socket$kcm(0x10, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 5m14.481776841s ago: executing program 5 (id=1134): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000440)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x24, &(0x7f0000000680)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000640)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m10.562704912s ago: executing program 5 (id=1149): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x1ff, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4m54.434486205s ago: executing program 35 (id=1149): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x1ff, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4m0.652247457s ago: executing program 1 (id=1319): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9027, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000400)='ext4_sync_file_enter\x00', r0, 0x0, 0xfffffd}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 3m59.667573481s ago: executing program 1 (id=1323): io_setup(0x2003, 0x0) mount$9p_unix(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)) r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800050000050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffeeff0000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000480)=ANY=[], &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_emit_ethernet(0x26, 0x0, 0x0) 3m55.083157952s ago: executing program 1 (id=1334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x0, [0x2], [0x80ffff]}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00", @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x1ff}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) ioctl$SIOCSIFMTU(r1, 0x89f3, &(0x7f0000000040)={'bond0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0) 3m52.602567296s ago: executing program 1 (id=1338): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "d4dfeb1ceb40eeefe68d6cf265b68e88a8bb314f3c0f82df67e25dad70d6b31e036f9f20b70c42a4dc5b21aa28f606af1557115f56805a217afe6b467cb413b3"}, 0x48, 0xffffffffffffffff) keyctl$negate(0x1d, r0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) tkill(0x0, 0x7) 3m50.494727022s ago: executing program 1 (id=1340): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x60}}, 0x0) 3m50.304513016s ago: executing program 1 (id=1342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000000000071110900000000008510000002000000850000000000000095004c00"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0x2}) write$UHID_INPUT(r5, &(0x7f0000000300)={0x8, {"47313fd8258c6e35ff0376a4f9b04ba79e24f9066e23d9f1e7d8059f5b030b0c37673a9b6610da00bb86d9de0ede87aa725cd7f9a7212de74da209ed040a833abbfa4548f224c7ce24774f9a4de0b92e78361ff1a67b287b0b125f4c51bd8e2d6c1a5e7016211ea634b0984edfed50bca0542374b26c2f3eea994deacf85f0fe389bdac885017cf0915f1b74e45d7c77886d11ae7a3e5fb92e1e1a375a9761a9b6448e747add0aa26a65782dffbef1084c78fec51057a373db392c349ec7d13f2ac9f8fdf560d5545df7ddb9eccc971e35cb08700ebc426e9a566dc57a5f080b7b3725e0a16e9e799df7e3521aaa6ada9c055b31711c420b2c359ad5760fac3f7e9a47afefcd3408c76657bba92e83d65a1860e5ec4ea4d459de24fbcfbdc62ef847b0662a5431afaf600dc53eb48d433014840222e234a07ea9e8da00ec7afba54e05b8c2509e12873874e846a36b327b0c75ddb458fae3896b69c3237b2542cdc73458274fd14e2e70b2ebb7ea3d4f276691c36b56882fa5d40ab1d1e4b450be2a9015f5b6cc1b958bc111298786f4aa1ca2b7c502f1f4767f58a6203085a757114945e197732365ecf17fea52454c1ba8948950f9e53ff08ff517a328d3460a7b4f5a2317ee007a599c62f5e29ad6aede268bbaf95c432db8851d19ba30d9ec7b49870477a349f659b3419198e3a6f3bacc452eb766fb202c6001d51f2cbf1b51e5d119cb3d7cd092924b5427879676013008e2e683bf00a5e21b17fe683dc7ccaaf3541fe480060c050e2bb8aa7a390a4871834d1bffe5e57e2974afb8a67e7410e9d610721b252ae70ae6d58fd271b22c5c48ed3acbd48769f60efdd5b264bbe49a69238efae7001063746f22c467c6cda37c0041b827330f0deec3f675b66202f8d3465743b57eb2188f598e26ad96243736239d1abd9e79c51bacc142eff06494db8cd0156bc619a587da5efddd7603f0c109127e35c439423c797fb2677919aaaa6fa019ef89ddd405f4e5749a2def02c75255d999c7446ce8e6e1d37189a7ab8d37eaeea3482d6a7b9631b847fe29c3c66430d26711900dd9f2429aea812f46233959d161985a60bfc72778371a17f628bd3e19b5fcc731122666b25f6eff2568b83be0b7dd5ecee7af1d9d09cf3db9b0978d7ed674d17f6e34c425b15eeaeae021c6b8f7c83898d4df8a55abdaa68206191b9e50bf005d1992140e6cb9621c2a7cf501312c42132592d32fcbc4a0d1e90ef8e7d80bfcdf203a9d1a0c182cf8f8aeaff01934f94ec27c0727893b6524db08e7d6ec9e59b30409543475b24ee687d53624523187c06886de3d4f65cd19edd6705a81d58a3d21ac1c2cc412ce2a3f925840efe8b0f02d7ac9a718f93d8400339e45edfa3aafb8b945a49e2a43e5b8936eea655ad86df36edb8bef13406cae7e2b616dfbef4e9a003e88ca90440b5a398895be58907b601e3f5d437e0b804008784a6056b0fe88920d32f487753a0d17bdb873525fbd13adfc159186f9b91fc4fc68993cfb7889178809195256423053e083d78ab5631851dab7e07da419a1461de7e458ca0eb8009fa6a791abc04d4395ec31e30b5485a0288a0f9cc14502ad3cf5a614475a118dcf9bfc76b7f5f1cd8efff3dd1a2798cbb4d7255489b04513ae94d6975e6dfe7b23859c9a243b344e230d00d4a83f8894dcc5e7a10f96d4c1a10aabbc2895bd3e3942f83400373d7cd0585b9139feac437184f392b54b2a814b7f74fff69fb424ef80091bf110cb587754c4a013c90847dff23ac3617a0956ae2b89de20f41ab5b1ca7c53a81cf97e94962786a17628f9fd1cfece8105146db8be5af89bcdf5dfd0a7d75c28b5efe02168d33d2bb6f26e06a860e4893c8d62f1577fb7be47a3f5806d9e383186f009b29fb1c6a7760ebad0cf0843161da66125489468988e565aecc53910c4c752fa177f803fb889d5e079d7c0be87d47d8c5d4be9f8141e7bec5388f80ec229fd3e8ef3d304e32e092f2ad96a3930678c7e4b6473c55c895c5cf166360f3e69d20ccba65d0e30324d88d1cf60421c2b5450ed74cd0031c1d29ca2487e49bd3913c9c2d337eecf4d27916e04069905e9463564a96457705a384a5e7d9c208aadf9da7164b46d4db91bbb4b78bb6e3fcd19b32e63f31d5318d35c7b55a589aae9503f7a015d109f897af8f20030496d96f26ad9156cb1c3c2224525c22ecdf8c1986daea8a60be8c847be87e9a014e129e98d260f620dede46f3812a5d3a4c942d0fb4d56b15825b1b67e806f80dea5df051c6b1f9ba01541774c439a604c4e71562ef6e4a125e4f8ac96b72f43449004cfcb4478d5303d411ce3136d5e36f994ec3b45d09d48b528cb7701e40ef2c8e2eefaa62730ce7c6c469239442bc17b60bb6d0223ef282874db3713d2e4da29dfb0eff3b0fe271de933ec2e78600b026a6ee93c1e57d855b762fb26b2e53f8ec0e750be69e77e49e1daf62c6a7abe8ef6b6d53457867e7f0925ed2183d126d0d0c0a76f47fc12db4b343f41e812e0aa741b3cc02f379b5ddbacaf2262f6b41f7eabf14a26bd86a55cc7b33bea343081aa12c3c234a6a5af6f0693c91854e4182342e3ed22a79daa9cec363f90049224ac8160e2eaaf75d7f52b4f2b4d68351fd3987e27d635d24c3f666849fcc329fa9f5e99b292a63c163d3b75684169e25163de0fed51dc3cf3dad77d3d8e8b6cfa7fe4f13318b501e730af238c7351e87386f7dd92c4885b8f581d4be49f1d4078b9eca19a58eed8458b261662418741de22c1e0b5978c87b67fcfc7fc4de2a8a17cdac86e74efb6b1f2c9acc3ef37e8e080f6cc3525166cf6d0a3b5831fc0a8698cfe7543916dcaac521105d097a4aa261a750239a71de308db65175357930f8fa2dd8c4dcd562d4529d3060ea12b2f0bfec508b18d30695c2f784ff8a0abb4ee33476ec481158dd3cdee35b842833a19c8df766c268b17ffe8ba64116638df9212feb348a190f456c65838affaff445f3e5fb0c4d508028daa52a7a4d0d6131e6f12137f84e7d45bc7385968794630bfed0938af1f4469fe39836037970f61a3ead08cb7935cc5053a995f66dda26d95e40d0b009626a3e55668c2c85f181b2a44824434431dad0d46d79ebb657ec2207ed557c035f80419bdd769b1c28dd5b33450b8c456bd717f631586f7409272ac71471f4044a52cf8cdd6dc1a2225307dccbb3b9cd26dcc94c247a49a9111898a5786a59d7460ea36f3e44b49fb581f0be187782529d04657e31279e93732bdef4092d13c4bf473167816027f6fac2e997ae8012708658520bf2a9f02dde03a75d58306d7abff5e6faec41b9f33001131d09d14cef3a50a2125d5dbe8e28c09b053b96dfb45b46c408b059920c2daa9b97b7b1fdffb7166de3a5a75099b85f591c9605c3a3d0b8c31227b73439da9c8dbd2b1cc6d55c4f4d904cd4c798c7b2885e5cdbeaf5e310662f171d8ef6b6fc7191744f0f6b00cfd9911a6930f319437eec3c3a91a6a1669ed73ae209b7e8f79617f1788e967710f41553240ab1aa5df3891443d09a193b04b57e0521583ad8df291627b37f6458c5da7f062506c0b99b774aa4d00242dfd24b20d2c43b7d18a4276f820fd8c4ca5755d0a478cd03d3641cdc23c0fb2b087c526ab0ec7cce0d339c90801452b02a666e024daf1b6578dae90461d273e755c55c475aebec38649c6744ac7984576acb181b494b243de272ca6d2d7bcebd6aee6863c29337cf21cac8ddf063a5172f9951491143a4bf2e6a87e842cad0f65cd96568a5215b5507328d93724de4fcbde5a205833b5c7d7c390bb491ef3f96dc3dc9369deb2b26b0d3a8499165f405387cdba2a20d2efafce0679c708c5ffb39aa8ebb84a64e544b2a601d6432e013e713125cd179ae2af4e666bb7c6a72ed06f49c4b66ad7bb7c48c9091efbd1666698eae5b64730b8f04271ff9d63115d992be3c569b9c2688836dd39b8df911ed23a44fc51c992c27af20818cdb956f69066624dc7bb0a1aa6f06b92868793cd232febdbada24f593e8d4480e94846ea58fa733cbc3ffc17e7d55a69cce2f0940a091e9d680f40d04c10a14c1ae83bf830ad9f96ccfd900a63ea08b31ff8008c322d91f8ff26616539e15c3e5e1b522fc48871ab161183e7798c609180ab351295868dc1f68c30f6efc649acdf0fd0ddae3b8d1e3bf866b6d908932dcf171198048ee8b26f52c13fbb1b60f3f1955c14ac9413d2534be3ad9968498199a704376591d50360c1e6e9dbd57c065e1080398e7094ac9911b443aa8b211837241c6b22aa7416112ff753e3022e97c7ce5a026cc88a5cbda6b29f80095ab5f093141e5b323c895979ea56a076f9a0e3d349a787c0aef21dec48213bdc7120a0b720c705d1bb958e73d6affade82afd09028267d6f87cc2ec225fce6311fa7fb203f8c76b5a2649f0dab08b09e4904b7cd071d922fbc2ccaacc7115a8e879a6d1774889ea50ba9dd59cecd41a5b7caf02faab013f8543c07c7f2413873ab6540a44754d52a69968508c8db74281ca7afa7e9aa6feb4a026fb44fb63fb53a94737854478a60bd41b2ee3c45de06af66048c03e746ea1525dca2ceb35b68a93ffa2ce6ce0e42a8a5e68e97d59441e7ceae46b76905fbe85f557677365d04afb42b3c604c18e891ecdf4fd88c063b466a362a1d8a2fff3dddf5c4e263601d86c8ae270eae8a3a83b47c9096626e868322beb692c7b8031ef4d4be5f2f084678cfe312d58819b8e57b09b7cff770a24728e647e5f1374e9672ff652e53f7c3e7a0aba1f68ebf67543e135e7b153f5830bc0b0d7ed8b75a7b0b1d6276333e8dd802e448ebda58d62b0df55c6e410463a65453c30d04ef00f3d265e77475beac373e5284fccee0fed302de572031ce7df394ae868e9f4f496725d5821fafb0ce92e98a9f3bf3b48d88b212af849bc7e002547cae7084f42af6893f42f99f2fe7bacf5f04183615d8e3154b3d070894b8a6075b4c5bab5780eebfb66a751161f5d36779e3594def92bcdeec866c67fda6b08fc3fc1a0e88a607cce44605b2959a68168248c3211918b2ac30b6039e7ec111785d0a3bbb429d0cd7ff603e2fcab8071ccac2edf7598d067fb6baa83a04854dd7df644c64f9ad657e8cbdfa798391ba7e4d03b3089bab65a8a2f7b81256265baf6f06a4635749c312e4c6fefb1f990e214f1f2bd90bf4e3d58508b816aa372dbcd62ef0739a07c948fa3d7da91e7583470c748b13d6ab9681463c966e54405c07ce7aab793d67ca01c504530762ed25efb5ed120555f1ad0733808acf4efad349b692bdce2370b9535fdac1df2a4e7b706cf0370e2affd3d4e30e103a44e7b1abfe0ab52c2e6a14ebdc3d7f407b401de7aca2a131d6c01674c77e45ea397d9c820e638dc83839952c933b3dac1c373a23071743a56f45e7b9bb208be4b845016da285300a0c2f3d8e4eff695f0628010ca444d849feeb42f3659635d271b286b563812cf2f342ec5cf62ef1053fb43979133fb1654c8a9944cd654a01b5cafbf1a96b8ee208d9895a6c845a1930ddee09d67db42f9ddafe40a27a286d81a2bcccd7e2e6e3dd29e9b893e437c15d220711ceabb7092c8083d200c935ee4b659d6a8ef266c2616c1d96e775908e323ce108a9c5086be192a5de60401a935f93a930fc34c5ca60d0fdcb69a9b4c95d26fdb792a26c15a54e7eaeafcd1cc542d1a3ce337af5260f1ed239bc5784cee77b25032ffad8952a016cf342fd6e4dbd6fd5cc6d3b42f07a3ee6ecf6e72df6", 0x1000}}, 0x1006) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r7 = socket(0x9, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000800", 0x1e) 3m33.710652193s ago: executing program 36 (id=1342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000000000071110900000000008510000002000000850000000000000095004c00"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0x2}) write$UHID_INPUT(r5, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r7 = socket(0x9, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000800", 0x1e) 2m50.343900877s ago: executing program 8 (id=1453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m48.935220695s ago: executing program 8 (id=1457): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e12080011000081040104001600", 0x34}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 2m48.224216488s ago: executing program 8 (id=1460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m47.277650618s ago: executing program 8 (id=1463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e21, 0x6, @mcast2, 0x10}, {0xa, 0x4e23, 0x3eb3, @mcast1, 0x8}, 0x1, {[0x8, 0x8, 0x6, 0xfffff801, 0x7, 0x2, 0x1, 0x478]}}, 0x5c) r5 = syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0x80885659, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r8, r9, 0x0, 0x2) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r7) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x1}, 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x1, 0x220, &(0x7f0000000780)="$eJzsmb9rFEEUx78zd7d3BgnYCNpYGDCi2dvdU0mTIoJlQIiiloduwpnJnVxWyB0IBhsbSwvB1sbSwsLKwr/AVgsVBAtTWojCyMzO3M3l9m43GrTwfSCb7/x8O+/NfYs7EATx3/Lp47cPjy4uXjkL4DDmUDX9X0rDOdyZ//7J3TOPly49ffHu2Zv27L1Xe/djAKQsHt8D8Hq5hASsnPaMrp4bbms1roLjtNHXwOCn8qfUpI0YDDfMnNuO7hwyQsT+zU4Ng1a41hJxpB4NN756qd0dhlsAavrtpGTO+Favv9EUIu7uFRVpdx4b2q+Ylj/9fsscS7DZk1LV6/rDBzuqbXKDAHyQvxAcodENMKwavYgqfN9XOQjWWkLX3Z7/eHm4f6nI+Q9WfD8mpe1hLH/Vcy2OLOwvVgXASI+6nYWW289IsVg/5GhPe/Zv5HCaOIhr2ut7v7vcfqLyJlcyMp8Tojp+RcfuD3PrfnTXeuBGU6zYmn7+l9XJF9bIsotrRseG3s4IsfIH0T1t3xMKN/Qn5eynHH8qozzwj3qyeae+1esvtDab6/F63I6ixoXgXBCcj+raiNLnFP+raX+acfavTJjrMQ/bzSTphttA0g0H7Sh9Oo67+rLzVa/h2v845k/qpvZUdWhZzY7BzB/X/5WaL2XPvD/xTARBEARBEARBEARBEARBENmcAEP6S5hk5gvRLKLL+hvKXwEAAP//pwVWPg==") r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r11, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) 2m45.419468156s ago: executing program 8 (id=1465): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x1, 0x0, 0x0, 0x8, &(0x7f0000000040)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a00fe888000000000000000000000000001ff020000000000000000000000000001030090780000000060fd906300003a00ff0100000000000001fc0100000000000000000000000000011e030b4c95"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 2m44.338106327s ago: executing program 8 (id=1467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@broadcast}, @in6=@loopback, {}, {0x0, 0x48a9, 0x0, 0x1}, {}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x21}, 0x0, 0x800000}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x122008, 0x6, 0x800, 0x1, 0xfffffff7, 0x0, 0x0, 0x10, 0xe}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1efffdaa}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2m27.850433507s ago: executing program 37 (id=1467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@broadcast}, @in6=@loopback, {}, {0x0, 0x48a9, 0x0, 0x1}, {}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x21}, 0x0, 0x800000}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x122008, 0x6, 0x800, 0x1, 0xfffffff7, 0x0, 0x0, 0x10, 0xe}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1efffdaa}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 12.729289439s ago: executing program 2 (id=1973): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x800, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x2, r4, 0x1, 0xd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xfff3}}}, 0x24}}, 0x8000) 11.404172867s ago: executing program 2 (id=1980): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x20, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000b1c125fc0000000000000018150200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 8.364270334s ago: executing program 2 (id=1989): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000001000"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000200)='THAWED\x00', 0x7) 8.087954194s ago: executing program 9 (id=1992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0), &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES2(r2, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) 7.333416156s ago: executing program 2 (id=1994): syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3d173085e040f04cee8010203010902fe0101000000020904b5000ee84ffc0009050e03100006e109072501010604000725018015070009050500400005ff0509050900000207dee107250180970900090507100002020ca3072501030bf9ff09050010ff036002030905040c08000c0a0607250102050104090506"], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000e1ffd018009400000000000109022400010000000009040000000300000009"], 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003"], 0x0) 5.383232567s ago: executing program 9 (id=2000): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x31, 0x1, 0x0, @void, @value}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) 5.182656939s ago: executing program 9 (id=2005): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000001000"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000200)='THAWED\x00', 0x7) 5.002101962s ago: executing program 9 (id=2008): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e23, 0x7ff, @private1, 0xce48}, {0xa, 0x4e20, 0xfff, @mcast2, 0xfffffff8}, 0x0, {[0x6, 0x1, 0x3, 0x7, 0x2, 0x1c8e, 0x70, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 4.053159554s ago: executing program 9 (id=2010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0), &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES2(r2, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) 3.344186109s ago: executing program 2 (id=2014): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r7, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 2.915207715s ago: executing program 7 (id=2018): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000001000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000200)='THAWED\x00', 0x7) 2.877901333s ago: executing program 3 (id=2020): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e23, 0x7ff, @private1, 0xce48}, {0xa, 0x4e20, 0xfff, @mcast2, 0xfffffff8}, 0x0, {[0x6, 0x1, 0x3, 0x7, 0x2, 0x1c8e, 0x70, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 2.752992043s ago: executing program 3 (id=2021): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304, 0x38}, "837ad552eed22b08", "e20000000000000010000000002000", '\x00', "d647cb0002ff00"}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.752558966s ago: executing program 7 (id=2022): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x22000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x761ad000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000a40)={0x23d, 0x7d, 0x0, {{0x500, 0xfc, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{evbox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x00\x00\xff\n\xbc\x92\xff`\x00', 0x2c, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb5\xf6\x1d\x8d\xd8\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03C\xda>\xf7uS\xab4\xd5\x15\x1a\x1e6\x04P\xb1T\aT\x99\x8c8\xe0V\v\xf0-\xd8\v\xb1\xef\xb24\xd5\x9e\x13Q\xe4\x85\x98\x00\x00\x00\x00\x00\x00\x00\x00', 0x1d, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6z\xd4\xd9\x8b\xf8\xc2\xa5c3\x80\xca\x00^\xdc\x02SL\xbc\x9flF\x9f\xcb\xf0\xa2\xcb\x8d>\xbc&Q\xeb\xf0m\xff\xe9\xd2k\xa5\'t\xd7\xd3\x1bD\xa5\xde\x01\x13;\xd4-\xf8\x05F\x1a\xe69b\xe1\xcf\xb5\x14\xa1\xb1\x9e\xab\xe8\x94\xbel\xe0G\xf4\x1d\xbd\\\xf0\x03\xf4\xbe\xc1;y>+\x10\x05\xca\v\xac\xe0\x01\x84\xfa\xe0\n\xff\x0f1\xf4\xf5\xed\xe9\xf18\x94\xcbFs\x89\xe30\x06\xc6\xfe\xba\xa0\x0e\xf8o\xe3\xcb\x86Q\xfe4\xff\xd3\xa7|\xf9\xf1\xae\x1b\xcf\x93\xe4\xb6*\x99P\xd9\xb4x\xd4\xb47$p\n\xe8\xac:\xcfr\xe3\xed0s^\xb0W/z?\xae\x89\"\x8cw\xc4\x85\xfb\xcd\xceq8\n\x9a\xd3z.\xaa\x9ax\x1d\x8flM\xdeg2\x8c\xf6', 0x55, '\xf8\xf6i\xfbhm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec%\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xffffff63) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6(0xa, 0x6, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r7) socket$kcm(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, r2, 0x3, 0x1, 0xfffffffc, 0x800, {0x5, 0x8de4, 0x4, 0x69, 0x200, 0x0, 0x0, 0x5, 0x4cab, 0xe154, 0x1000, 0x8001, 0xe4, 0xf9, "fe1d00003413000000000000000caa00000009000000000000a726b427180010"}}) 2.708175112s ago: executing program 4 (id=2023): socket$inet(0x2, 0x3, 0x6) r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f0000006900)=""/91, 0x5b) 1.752987627s ago: executing program 2 (id=2024): syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3d173085e040f04cee8010203010902fe0101000000020904b5000ee84ffc0009050e03100006e109072501010604000725018015070009050500400005ff0509050900000207dee107250180970900090507100002020ca3072501030bf9ff09050010ff036002030905040c08000c0a0607250102050104090506"], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000e1ffd018009400000000000109022400010000000009040000000300000009210000000122"], 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003"], 0x0) 1.376221031s ago: executing program 7 (id=2025): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, 0x0}, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) close(0x3) 1.272570856s ago: executing program 4 (id=2026): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.224395281s ago: executing program 3 (id=2027): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) 1.217357367s ago: executing program 7 (id=2028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.140801416s ago: executing program 3 (id=2029): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) socket$kcm(0x2, 0xa, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 947.679292ms ago: executing program 4 (id=2030): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r0}, 0x10) fsopen(&(0x7f0000000040)='afs\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$packet(0x11, 0x2, 0x300) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0xfffffffc, 0x0, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 590.790477ms ago: executing program 3 (id=2031): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080004}, 0x20000000) 554.028092ms ago: executing program 4 (id=2032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec970800302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 458.619539ms ago: executing program 7 (id=2033): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000001000"/28], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) 404.127446ms ago: executing program 3 (id=2034): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r7, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 312.14749ms ago: executing program 4 (id=2035): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000054000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) 209.859121ms ago: executing program 7 (id=2036): socket$inet(0x2, 0x3, 0x6) r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f0000006900)=""/91, 0x5b) 67.847747ms ago: executing program 4 (id=2037): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304, 0x38}, "837ad552eed22b08", "e20000000000000010000000002000", '\x00', "d647cb0002ff00"}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 9 (id=2038): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, 0x0}, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) close(0x3) kernel console output (not intermixed with test programs): e: journal: 1/1 [0]=0 [ 289.311102][ T8808] data_usage: user: 1/1 [0]=16 [ 289.311102][ T8808] dev_usage: dev=0 [ 289.311102][ T8808] free: buckets=83 sectors=0 fragmented=0 [ 289.311102][ T8808] sb: buckets=25 sectors=6152 fragmented=248 [ 289.311102][ T8808] journal: buckets=8 sectors=2048 fragmented=0 [ 289.311102][ T8808] btree: buckets=11 sectors=2816 fragmented=0 [ 289.311102][ T8808] user: buckets=1 sectors=16 fragmented=240 [ 289.311102][ T8808] cached: buckets=0 sectors=0 fragmented=0 [ 289.311102][ T8808] parity: buckets=458752 sectors=0 fragmented=0 [ 289.311102][ T8808] stripe: buckets=0 sectors=0 fragmented=0 [ 289.311102][ T8808] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 289.311102][ T8808] need_discard: buckets=0 sectors=0 fragmented=0 [ 289.311102][ T8808] clock: read=0 [ 289.311102][ T8808] clock: write=1280 [ 289.311102][ T8808] blacklist: seq=0 [ 289.311102][ T8808] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MA [ 289.311277][ T8808] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 291.409546][ T8844] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.872498][ T5846] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 292.278949][ T8844] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.865300][ T5144] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 292.882919][ T5144] Bluetooth: hci1: command 0x206a tx timeout [ 294.173152][ T5144] Bluetooth: hci2: command tx timeout [ 294.332976][ T8844] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.348068][ T974] hid-generic 0001:0000:0000.000E: unknown main item tag 0x0 [ 294.369434][ T974] hid-generic 0001:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 294.526965][ T8887] tipc: Enabling of bearer rejected, failed to enable media [ 294.912907][ T8844] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.094082][ T8844] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.111716][ T8844] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.126396][ T8844] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.144052][ T8844] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.932591][ T8907] loop1: detected capacity change from 0 to 32768 [ 296.217893][ T8907] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 296.217893][ T8907] clean (size 2912): [ 296.217893][ T8907] flags: 0 [ 296.217893][ T8907] journal_seq: 10 [ 296.217893][ T8907] usage: type=inodes v=8 [ 296.217893][ T8907] usage: type=key_version v=0 [ 296.217893][ T8907] usage: type=reserved v=0 [ 296.217893][ T8907] usage: type=reserved v=0 [ 296.217893][ T8907] usage: type=reserved v=0 [ 296.217893][ T8907] usage: type=reserved v=0 [ 296.217893][ T8907] data_usage: btree: 1/1 [0]=2816 [ 296.217893][ T8907] data_usage: journal: 1/1 [0]=0 [ 296.217893][ T8907] data_usage: user: 1/1 [0]=16 [ 296.217893][ T8907] dev_usage: dev=0 [ 296.217893][ T8907] free: buckets=83 sectors=0 fragmented=0 [ 296.217893][ T8907] sb: buckets=25 sectors=6152 fragmented=248 [ 296.217893][ T8907] journal: buckets=8 sectors=2048 fragmented=0 [ 296.217893][ T8907] btree: buckets=11 sectors=2816 fragmented=0 [ 296.217893][ T8907] user: buckets=1 sectors=16 fragmented=240 [ 296.217893][ T8907] cached: buckets=0 sectors=0 fragmented=0 [ 296.217893][ T8907] parity: buckets=458752 sectors=0 fragmented=0 [ 296.217893][ T8907] stripe: buckets=0 sectors=0 fragmented=0 [ 296.217893][ T8907] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 296.217893][ T8907] need_discard: buckets=0 sectors=0 fragmented=0 [ 296.217893][ T8907] clock: read=0 [ 296.217893][ T8907] clock: write=1280 [ 296.217893][ T8907] blacklist: seq=0 [ 296.217893][ T8907] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MA [ 296.218078][ T8907] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 296.525436][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 297.949492][ T5912] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 298.153891][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 298.182144][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.194151][ T5846] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 298.214445][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.237201][ T5912] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 298.257712][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.275277][ T5912] usb 2-1: config 0 descriptor?? [ 298.952475][ T5144] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 299.211868][ T5144] Bluetooth: hci1: command 0x206a tx timeout [ 299.229427][ T5912] semitek 0003:1EA7:0907.000F: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.1-1/input0 [ 299.449265][ T5912] usb 2-1: USB disconnect, device number 4 [ 300.435617][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 302.899706][ T9033] net_ratelimit: 22 callbacks suppressed [ 302.899759][ T9033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.402653][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 303.731037][ T5912] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 304.280677][ T9058] capability: warning: `syz.4.742' uses 32-bit capabilities (legacy support in use) [ 305.395048][ T5912] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.409025][ T5912] usb 2-1: config 0 has no interface number 0 [ 305.535635][ T5912] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 305.545407][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.553899][ T5912] usb 2-1: Product: syz [ 305.558368][ T5912] usb 2-1: Manufacturer: syz [ 305.563538][ T5912] usb 2-1: SerialNumber: syz [ 305.610435][ T9076] netlink: 40 bytes leftover after parsing attributes in process `syz.7.745'. [ 305.960490][ T5912] usb 2-1: config 0 descriptor?? [ 307.256755][ T5912] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 307.530962][ T9098] binder: 9097:9098 ioctl 4018620d 0 returned -22 [ 308.913936][ T5913] usb 2-1: USB disconnect, device number 5 [ 309.488085][ T5847] Bluetooth: hci0: command 0x206a tx timeout [ 310.072246][ T9113] loop7: detected capacity change from 0 to 32768 [ 310.926373][ T9113] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 310.926373][ T9113] clean (size 2912): [ 310.926373][ T9113] flags: 0 [ 310.926373][ T9113] journal_seq: 10 [ 310.926373][ T9113] usage: type=inodes v=8 [ 310.926373][ T9113] usage: type=key_version v=0 [ 310.926373][ T9113] usage: type=reserved v=0 [ 310.926373][ T9113] usage: type=reserved v=0 [ 310.926373][ T9113] usage: type=reserved v=0 [ 310.926373][ T9113] usage: type=reserved v=0 [ 310.926373][ T9113] data_usage: btree: 1/1 [0]=2816 [ 310.926373][ T9113] data_usage: journal: 1/1 [0]=0 [ 310.926373][ T9113] data_usage: user: 1/1 [0]=16 [ 310.926373][ T9113] dev_usage: dev=0 [ 310.926373][ T9113] free: buckets=83 sectors=0 fragmented=0 [ 310.926373][ T9113] sb: buckets=25 sectors=6152 fragmented=248 [ 310.926373][ T9113] journal: buckets=8 sectors=2048 fragmented=0 [ 310.926373][ T9113] btree: buckets=11 sectors=2816 fragmented=0 [ 310.926373][ T9113] user: buckets=1 sectors=16 fragmented=240 [ 310.926373][ T9113] cached: buckets=0 sectors=0 fragmented=0 [ 310.926373][ T9113] parity: buckets=458752 sectors=0 fragmented=0 [ 310.926373][ T9113] stripe: buckets=0 sectors=0 fragmented=0 [ 310.926373][ T9113] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 310.926373][ T9113] need_discard: buckets=0 sectors=0 fragmented=0 [ 310.926373][ T9113] clock: read=0 [ 310.926373][ T9113] clock: write=1280 [ 310.926373][ T9113] blacklist: seq=0 [ 310.926373][ T9113] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MA [ 310.926555][ T9113] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 312.283472][ T9163] binder: 9161:9163 ioctl 4018620d 0 returned -22 [ 314.091872][ T5144] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 314.099467][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 316.848832][ T9238] xt_nat: multiple ranges no longer supported [ 316.888344][ T9212] loop7: detected capacity change from 0 to 32768 [ 316.926075][ T9212] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 316.926075][ T9212] clean (size 2912): [ 316.926075][ T9212] flags: 0 [ 316.926075][ T9212] journal_seq: 10 [ 316.926075][ T9212] usage: type=inodes v=8 [ 316.926075][ T9212] usage: type=key_version v=0 [ 316.926075][ T9212] usage: type=reserved v=0 [ 316.926075][ T9212] usage: type=reserved v=0 [ 316.926075][ T9212] usage: type=reserved v=0 [ 316.926075][ T9212] usage: type=reserved v=0 [ 316.926075][ T9212] data_usage: btree: 1/1 [0]=2816 [ 316.926075][ T9212] data_usage: journal: 1/1 [0]=0 [ 316.926075][ T9212] data_usage: user: 1/1 [0]=16 [ 316.926075][ T9212] dev_usage: dev=0 [ 316.926075][ T9212] free: buckets=83 sectors=0 fragmented=0 [ 316.926075][ T9212] sb: buckets=25 sectors=6152 fragmented=248 [ 316.926075][ T9212] journal: buckets=8 sectors=2048 fragmented=0 [ 316.926075][ T9212] btree: buckets=11 sectors=2816 fragmented=0 [ 316.926075][ T9212] user: buckets=1 sectors=16 fragmented=240 [ 316.926075][ T9212] cached: buckets=0 sectors=0 fragmented=0 [ 316.926075][ T9212] parity: buckets=458752 sectors=0 fragmented=0 [ 316.926075][ T9212] stripe: buckets=0 sectors=0 fragmented=0 [ 316.926075][ T9212] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 316.926075][ T9212] need_discard: buckets=0 sectors=0 fragmented=0 [ 316.926075][ T9212] clock: read=0 [ 316.926075][ T9212] clock: write=1280 [ 316.926075][ T9212] blacklist: seq=0 [ 316.926075][ T9212] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MA [ 316.926259][ T9212] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 318.852739][ T9262] [U] [ 318.897885][ T9262] [U] [ 318.928008][ T9262] [U] ŒB˜-LRJ[ÉÍĆÈÍÑœ6Š}Ä%Ü4̾ ­¦H‚ÐÛ@K„Ì-Y•LE‹÷U¾Ÿ¡–ÏÚÁ@‡ŸF´¡§%PEZE,™ÍŽ9FË*À [ 319.229943][ T9262] [U] CW¯™ÇÇ* Þ9JÁQØ#EØËSWÐÁÔC±ÏV·1žÂÛÏ!È žGPœX [ 319.296365][ T9262] [U] N%Ì9ÙÞÖC…_¹ÁNÊ…ÇBC‰…$ÞÔ4Þ(²ž [ 319.329366][ T5144] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 319.468742][ T9262] [U] Hª QÄØ›Tµ¦OÂR‚I#ıËTNBS_RЬ‰¡¾Æ«°:‰Ø€–ɦT‘ȯ ËÙ0¿™’ÚÃËŒÃWÚ™_[HN% [ 319.531305][ T9262] [U] Ï £ÜÙÛ4‡RЛŸÛŠ<)Ü6JG؃¬ÍKÉ^R\ [ 319.748333][ T5847] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 320.085673][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 320.551115][ T9262] [U] 7¼R:€J37Ø [ 320.555546][ T9262] [U] YÛPÜ<ÅÔ…ÚU’“H¦3 Æ°-Î̤„Ø\PQBXÕ!Q6ÃÜÆSO'}­Ï[ÉÛÀP5OÉ>€DÊÅÖŽYÞJ>|H0=ÖÔ·TžXÈÒZÔY֦ʢÄš4ª‡IÇ¢À5AZËÑ~ZAÂ~ÝKÝ^TGžSÍJ‹I:Á¶¬Ž¥OD!M2KÃW§¬R>ƈΗKC?X…8 ¥HÇÒ*©@QEÛ»ÚU ½À.J9È“~´{—Á`²ÍÃ'R)Ó-ÀǬŸÎ=5­ÝÖJLY ÉCÄBˆØ;+LP°,FØN‡‚ÁÁYÎ%¿3†P¨ÈÕ&Ç)­Ó][œÈ‹4ÃL»Ã¶£„!’J> ÔÎ [ 320.814698][ T9262] [U] Ø.”CšÖ¯·ÏEJÓJÛ@œK’JÁ605RXUÑTTµO‹&XÐOºÖ•§\®‹&…¬°¡ÙN%Y‹‘ÁÐ17¿6`¬ÌI‚W [ 320.847054][ T9262] [U] ÏØÇM<@NºÙKJ(ÝÂ6)Ô)ÎVÌÕLR¢ [ 321.866710][ T9305] Bluetooth: MGMT ver 1.23 [ 323.806872][ T5847] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 323.815521][ T5847] Bluetooth: hci1: Injecting HCI hardware error event [ 323.825148][ T5847] Bluetooth: hci1: hardware error 0x00 [ 323.984022][ T9331] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.029395][ T9326] loop3: detected capacity change from 0 to 16 [ 324.049897][ T9334] binder: BINDER_SET_CONTEXT_MGR already set [ 324.100738][ T9326] erofs (device loop3): mounted with root inode @ nid 36. [ 324.116098][ T9334] binder: 9333:9334 ioctl 4018620d 20004a80 returned -16 [ 324.251758][ T9337] netlink: 'syz.1.799': attribute type 10 has an invalid length. [ 324.750593][ T9337] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 324.776040][ T9328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.958999][ T9349] loop4: detected capacity change from 0 to 1024 [ 325.996041][ T7560] hfsplus: b-tree write err: -5, ino 8 [ 326.169274][ T5847] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 327.479889][ T9395] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 327.720632][ T9402] binder: BINDER_SET_CONTEXT_MGR already set [ 328.032760][ T9402] binder: 9401:9402 ioctl 4018620d 20004a80 returned -16 [ 329.205732][ T9422] loop7: detected capacity change from 0 to 1024 [ 330.122603][ T6421] hfsplus: b-tree write err: -5, ino 8 [ 330.386154][ T5847] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 334.629255][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.635821][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.709774][ T5847] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 334.718675][ T5847] Bluetooth: hci2: Injecting HCI hardware error event [ 334.728054][ T5144] Bluetooth: hci2: hardware error 0x00 [ 335.729050][ T9507] loop5: detected capacity change from 0 to 64 [ 336.592128][ T9517] xt_nat: multiple ranges no longer supported [ 337.723835][ T5144] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 341.027011][ T9571] loop3: detected capacity change from 0 to 64 [ 347.009784][ T9639] loop3: detected capacity change from 0 to 64 [ 347.081228][ T5847] Bluetooth: hci0: command 0x206a tx timeout [ 347.087414][ T5144] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 350.149176][ T118] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 350.427120][ T118] usb 2-1: Using ep0 maxpacket: 32 [ 350.434671][ T118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.445979][ T118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.455883][ T118] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 350.506827][ T118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.531214][ T118] usb 2-1: config 0 descriptor?? [ 350.552971][ T118] hub 2-1:0.0: USB hub found [ 350.689119][ T9680] kvm: user requested TSC rate below hardware speed [ 350.780296][ T118] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 351.215423][ T118] hid-generic 0003:046D:C31C.0010: unknown main item tag 0x4 [ 351.316716][ T118] hid-generic 0003:046D:C31C.0010: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 351.352931][ T9695] loop4: detected capacity change from 0 to 64 [ 351.475632][ T118] usb 2-1: USB disconnect, device number 6 [ 352.925602][ T9714] tipc: Enabling of bearer rejected, failed to enable media [ 354.677278][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.7.882'. [ 357.311941][ T5913] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 358.319552][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 358.806708][ T5913] usb 5-1: device descriptor read/all, error -71 [ 359.099521][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 360.167047][ T9802] 9pnet_fd: p9_fd_create_unix (9802): problem connecting socket: ./cgroup: -111 [ 360.702499][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 360.959113][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.013176][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 361.042344][ T9823] xt_nat: multiple ranges no longer supported [ 361.051380][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.072665][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.082853][ T8] usb 4-1: Product: syz [ 361.095998][ T8] usb 4-1: Manufacturer: syz [ 361.104814][ T8] usb 4-1: SerialNumber: syz [ 361.354262][ T9802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 361.552301][ T9836] Invalid source name [ 362.031929][ T9802] netlink: 44 bytes leftover after parsing attributes in process `syz.3.898'. [ 362.368909][ T9802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 362.595943][ T8] cdc_mbim 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 362.602536][ T8] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 362.684064][ T8] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 363.251096][ T8] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 363.263481][ T9862] loop5: detected capacity change from 0 to 1024 [ 363.286077][ T8] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 363.315437][ T8] wwan wwan0: port wwan0mbim0 attached [ 363.480563][ T8] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:42:42:42:42:42 [ 363.919616][ T9866] hfsplus: xattr search failed [ 364.316316][ T8] usb 4-1: USB disconnect, device number 7 [ 364.323379][ T8] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 364.445160][ T9880] netlink: 'syz.4.911': attribute type 10 has an invalid length. [ 365.033170][ T9871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.309024][ T8] wwan wwan0: port wwan0mbim0 disconnected [ 366.817917][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 367.339677][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 367.355906][ T8] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 367.382790][ T8] usb 4-1: config 0 has no interface number 0 [ 367.417152][ T8] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 367.440701][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.482716][ T8] usb 4-1: Product: syz [ 367.486935][ T8] usb 4-1: Manufacturer: syz [ 367.524219][ T8] usb 4-1: SerialNumber: syz [ 367.544560][ T8] usb 4-1: config 0 descriptor?? [ 367.576666][ T8] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 367.781104][ T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 367.829529][ T9923] loop7: detected capacity change from 0 to 1024 [ 367.843942][ T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 368.087329][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101 [ 368.305692][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 368.316287][ T5912] usb 4-1: USB disconnect, device number 8 [ 368.331257][ T5912] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 369.350559][ T5912] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 370.239244][ T5912] quatech2 4-1:0.51: device disconnected [ 370.433131][ T2978] hfsplus: b-tree write err: -5, ino 8 [ 370.566191][ T9944] tipc: Enabling of bearer rejected, failed to enable media [ 370.600684][ T5885] hid-generic 0001:0000:0000.0011: unknown main item tag 0x0 [ 370.859507][ T5885] hid-generic 0001:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 373.753616][ T9978] loop1: detected capacity change from 0 to 64 [ 374.287306][ T9982] nfs: Unknown parameter 'a' [ 374.917859][ T9987] process 'syz.1.934' launched './file1' with NULL argv: empty string added [ 374.932791][ T9985] loop4: detected capacity change from 0 to 1024 [ 376.807255][T10045] loop1: detected capacity change from 0 to 64 [ 376.890831][T10047] netlink: 76 bytes leftover after parsing attributes in process `syz.3.946'. [ 377.188648][T10051] nfs: Unknown parameter 'a' [ 377.673870][T10053] xt_nat: multiple ranges no longer supported [ 379.329722][ T8] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 380.046512][ T8] usb 2-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 380.068877][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 380.090645][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26159, setting to 64 [ 380.103276][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.129131][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 380.138692][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 380.147440][ T8] usb 2-1: Manufacturer: syz [ 380.192560][ T8] usb 2-1: config 0 descriptor?? [ 380.198438][T10060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 380.199467][ T6442] hfsplus: b-tree write err: -5, ino 8 [ 380.265109][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 380.571253][ T8] usb 2-1: USB disconnect, device number 7 [ 380.660964][T10095] xt_nat: multiple ranges no longer supported [ 381.196313][T10105] netlink: 76 bytes leftover after parsing attributes in process `syz.5.957'. [ 383.420246][T10131] xt_nat: multiple ranges no longer supported [ 383.745186][T10136] loop7: detected capacity change from 0 to 1024 [ 384.021846][T10145] binder: 10143:10145 ioctl 4018620d 0 returned -22 [ 384.826881][ T6442] hfsplus: b-tree write err: -5, ino 8 [ 386.453298][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.972'. [ 386.531299][T10183] xt_nat: multiple ranges no longer supported [ 387.083089][T10192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.025681][T10198] binder: 10196:10198 ioctl 4018620d 0 returned -22 [ 388.318286][T10212] loop1: detected capacity change from 0 to 1024 [ 389.774275][T10228] hfsplus: xattr search failed [ 390.468325][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 391.178641][T10251] xt_nat: multiple ranges no longer supported [ 392.625572][T10270] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.091312][T10270] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.943519][T10270] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.554723][T10270] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.081300][T10270] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.203012][T10270] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.314682][T10270] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.460016][T10319] tipc: Enabling of bearer rejected, failed to enable media [ 396.570105][T10313] Invalid source name [ 396.771608][T10270] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.533343][T10347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.554133][T10324] loop5: detected capacity change from 0 to 32768 [ 397.575686][T10324] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 397.575686][T10324] clean (size 2912): [ 397.575686][T10324] flags: 0 [ 397.575686][T10324] journal_seq: 10 [ 397.575686][T10324] usage: type=inodes v=8 [ 397.575686][T10324] usage: type=key_version v=0 [ 397.575686][T10324] usage: type=reserved v=0 [ 397.575686][T10324] usage: type=reserved v=0 [ 397.575686][T10324] usage: type=reserved v=0 [ 397.575686][T10324] usage: type=reserved v=0 [ 397.575686][T10324] data_usage: btree: 1/1 [0]=2816 [ 397.575686][T10324] data_usage: journal: 1/1 [0]=0 [ 397.575686][T10324] data_usage: user: 1/1 [0]=16 [ 397.575686][T10324] dev_usage: dev=0 [ 397.575686][T10324] free: buckets=83 sectors=0 fragmented=0 [ 397.575686][T10324] sb: buckets=25 sectors=6152 fragmented=248 [ 397.575686][T10324] journal: buckets=8 sectors=2048 fragmented=0 [ 397.575686][T10324] btree: buckets=11 sectors=2816 fragmented=0 [ 397.575686][T10324] user: buckets=1 sectors=16 fragmented=240 [ 397.575686][T10324] cached: buckets=0 sectors=0 fragmented=0 [ 397.575686][T10324] parity: buckets=458752 sectors=0 fragmented=0 [ 397.575686][T10324] stripe: buckets=0 sectors=0 fragmented=0 [ 397.575686][T10324] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 397.575686][T10324] need_discard: buckets=0 sectors=0 fragmented=0 [ 397.575686][T10324] clock: read=0 [ 397.575686][T10324] clock: write=1280 [ 397.575686][T10324] blacklist: seq=0 [ 397.575686][T10324] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MA [ 397.575969][T10324] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 397.809479][T10351] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1010'. [ 400.309849][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.316197][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.439606][T10372] tipc: Enabling of bearer rejected, failed to enable media [ 400.501795][ T974] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 401.084354][ T974] hid-generic 0001:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 402.298155][ T5144] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 402.351517][ T5144] Bluetooth: hci0: command 0x206a tx timeout [ 406.097091][T10418] tipc: Enabling of bearer rejected, failed to enable media [ 406.156911][ T974] hid-generic 0001:0000:0000.0013: unknown main item tag 0x0 [ 406.751903][ T974] hid-generic 0001:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 407.212647][T10421] bond0: entered promiscuous mode [ 407.218575][T10421] bond_slave_0: entered promiscuous mode [ 407.224306][T10421] bond_slave_1: entered promiscuous mode [ 408.890721][T10443] xt_nat: multiple ranges no longer supported [ 408.920350][T10446] loop1: detected capacity change from 0 to 512 [ 408.979236][ T974] IPVS: starting estimator thread 0... [ 408.991278][T10446] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.1040: corrupted xattr block 95: invalid header [ 409.026907][T10446] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1040: bg 0: block 7: invalid block bitmap [ 409.039832][T10446] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 409.095795][T10446] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.1040: corrupted xattr block 95: invalid header [ 409.158224][T10446] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 409.178302][T10446] EXT4-fs (loop1): 1 orphan inode deleted [ 409.184340][T10445] IPVS: using max 23 ests per chain, 55200 per kthread [ 409.220328][T10446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000004 r/w without journal. Quota mode: none. [ 410.809299][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000004. [ 412.828754][T10520] Invalid source name [ 413.467025][T10531] tipc: Enabling of bearer rejected, failed to enable media [ 413.493279][ T5885] hid-generic 0001:0000:0000.0014: unknown main item tag 0x0 [ 413.572376][ T5885] hid-generic 0001:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 414.360569][T10538] xt_nat: multiple ranges no longer supported [ 414.587252][T10542] loop7: detected capacity change from 0 to 512 [ 414.639160][T10542] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.7.1056: corrupted xattr block 95: invalid header [ 415.667616][T10542] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1056: bg 0: block 7: invalid block bitmap [ 415.770712][T10542] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 415.801531][T10542] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2977: inode #11: comm syz.7.1056: corrupted xattr block 95: invalid header [ 415.813294][T10556] loop1: detected capacity change from 0 to 1024 [ 415.839585][T10542] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -117) [ 415.867920][T10542] EXT4-fs (loop7): 1 orphan inode deleted [ 415.886140][T10542] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000004 r/w without journal. Quota mode: none. [ 416.736263][T10563] hfsplus: xattr search failed [ 417.020210][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 417.189955][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 417.326975][ T8] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 417.382353][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.390420][ T8] usb 4-1: Product: syz [ 417.434184][ T8440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000004. [ 417.494997][ T8] usb 4-1: Manufacturer: syz [ 417.499686][ T8] usb 4-1: SerialNumber: syz [ 417.638539][ T8] usb 4-1: config 0 descriptor?? [ 418.342038][ T8] airspy 4-1:0.0: Board ID: 00 [ 418.347157][ T8] airspy 4-1:0.0: Firmware version: [ 419.928202][ T8] airspy 4-1:0.0: usb_control_msg() failed -71 request 10 [ 420.159687][ T8] airspy 4-1:0.0: Registered as swradio24 [ 420.193497][ T8] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 420.210761][ T8] usb 4-1: USB disconnect, device number 9 [ 422.781924][ T5144] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 423.652835][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 423.875225][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 423.884829][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.906297][ T9] usb 2-1: Product: syz [ 423.910524][ T9] usb 2-1: Manufacturer: syz [ 423.935737][ T9] usb 2-1: SerialNumber: syz [ 423.971106][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 424.048031][ T118] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 424.485582][ T5885] usb 2-1: USB disconnect, device number 8 [ 425.203607][ T118] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 425.225735][ T118] ath9k_htc: Failed to initialize the device [ 425.304340][T10532] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 425.316234][ T5885] usb 2-1: ath9k_htc: USB layer deinitialized [ 425.464701][T10532] usb 5-1: device descriptor read/64, error -71 [ 425.849620][T10532] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 426.635329][T10532] usb 5-1: device descriptor read/64, error -71 [ 427.642113][T10532] usb usb5-port1: attempt power cycle [ 428.786672][T10532] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 429.039881][T10532] usb 5-1: device not accepting address 6, error -71 [ 430.679653][T10724] xt_nat: multiple ranges no longer supported [ 432.311106][ T5144] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 432.324355][ T5144] Bluetooth: hci0: command 0x206a tx timeout [ 436.219333][ T5847] Bluetooth: hci0: command 0x206a tx timeout [ 436.225435][ T5144] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 440.044643][T10791] loop7: detected capacity change from 0 to 32768 [ 440.093659][T10791] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 440.093659][T10791] clean (size 2912): [ 440.093659][T10791] flags: 0 [ 440.093659][T10791] journal_seq: 10 [ 440.093659][T10791] usage: type=inodes v=8 [ 440.093659][T10791] usage: type=key_version v=0 [ 440.093659][T10791] usage: type=reserved v=0 [ 440.093659][T10791] usage: type=reserved v=0 [ 440.093659][T10791] usage: type=reserved v=0 [ 440.093659][T10791] usage: type=reserved v=0 [ 440.093659][T10791] data_usage: btree: 1/1 [0]=2816 [ 440.093659][T10791] data_usage: journal: 1/1 [0]=0 [ 440.093659][T10791] data_usage: user: 1/1 [0]=16 [ 440.093659][T10791] dev_usage: dev=0 [ 440.093659][T10791] free: buckets=83 sectors=0 fragmented=0 [ 440.093659][T10791] sb: buckets=25 sectors=6152 fragmented=248 [ 440.093659][T10791] journal: buckets=8 sectors=2048 fragmented=0 [ 440.093659][T10791] btree: buckets=11 sectors=2816 fragmented=0 [ 440.093659][T10791] user: buckets=1 sectors=16 fragmented=240 [ 440.093659][T10791] cached: buckets=0 sectors=0 fragmented=0 [ 440.093659][T10791] parity: buckets=458752 sectors=0 fragmented=0 [ 440.093659][T10791] stripe: buckets=0 sectors=0 fragmented=0 [ 440.093659][T10791] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 440.093659][T10791] need_discard: buckets=0 sectors=0 fragmented=0 [ 440.093659][T10791] clock: read=0 [ 440.093659][T10791] clock: write=1280 [ 440.093659][T10791] blacklist: seq=0 [ 440.093659][T10791] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MA [ 440.093774][T10791] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 442.537488][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 442.751242][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 442.770091][ T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 442.964369][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.120804][ T9] usb 6-1: Product: syz [ 443.196463][ T9] usb 6-1: Manufacturer: syz [ 443.265784][ T9] usb 6-1: SerialNumber: syz [ 443.501662][ T9] usb 6-1: config 0 descriptor?? [ 443.988779][ T9] airspy 6-1:0.0: Board ID: 00 [ 444.055549][ T9] airspy 6-1:0.0: Firmware version: [ 444.929142][ T9] airspy 6-1:0.0: usb_control_msg() failed -71 request 0f [ 444.976837][ T9] airspy 6-1:0.0: Registered as swradio24 [ 444.983208][ T9] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 445.116729][ T9] usb 6-1: USB disconnect, device number 2 [ 445.312172][T10861] syz.1.1146 uses obsolete (PF_INET,SOCK_PACKET) [ 446.165043][T10871] xt_nat: multiple ranges no longer supported [ 446.991595][T10879] sp0: Synchronizing with TNC [ 450.157674][T10909] loop7: detected capacity change from 0 to 1024 [ 451.062403][T10916] hfsplus: xattr search failed [ 451.685606][T10929] xt_nat: multiple ranges no longer supported [ 452.604540][ T5144] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 452.625100][T10931] xt_nat: multiple ranges no longer supported [ 452.663521][ T5847] Bluetooth: hci0: command 0x206a tx timeout [ 455.243094][T10962] loop3: detected capacity change from 0 to 1024 [ 455.415475][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 456.170921][T10965] hfsplus: xattr search failed [ 456.463478][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 456.528948][T10971] netlink: 'syz.4.1176': attribute type 10 has an invalid length. [ 457.185650][T10967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.328648][ T9] usb 8-1: config 63 has too many interfaces: 254, using maximum allowed: 32 [ 457.344410][ T9] usb 8-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 457.361072][ T9] usb 8-1: config 63 has 1 interface, different from the descriptor's value: 254 [ 457.370996][ T9] usb 8-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 457.380898][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.398714][ T9] usb 8-1: probing VID:PID(2201:012C) [ 457.414027][ T9] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 457.475292][ T9] vub300 8-1:63.0: probe with driver vub300 failed with error -22 [ 458.259830][ T5884] usb 8-1: USB disconnect, device number 2 [ 462.032014][T11009] loop7: detected capacity change from 0 to 1024 [ 463.619299][ T7560] hfsplus: b-tree write err: -5, ino 8 [ 463.974079][ T5144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 463.989771][ T5144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 463.998463][ T5144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 464.007437][ T5144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 464.015636][ T5144] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 464.023223][ T5144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 464.208176][T11026] chnl_net:caif_netlink_parms(): no params data found [ 464.718343][T11026] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.725856][T11026] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.733933][T11026] bridge_slave_0: entered allmulticast mode [ 464.741065][T11026] bridge_slave_0: entered promiscuous mode [ 464.765754][T11026] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.792575][T11026] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.810832][T11026] bridge_slave_1: entered allmulticast mode [ 464.873177][T11026] bridge_slave_1: entered promiscuous mode [ 464.942053][T11026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.965024][T11026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.009214][ T5912] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 465.047811][T11026] team0: Port device team_slave_0 added [ 465.075228][T11026] team0: Port device team_slave_1 added [ 465.137831][T11026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.169540][ T5912] usb 8-1: Using ep0 maxpacket: 8 [ 465.188935][T11026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.227175][ T5912] usb 8-1: config 0 has an invalid interface number: 176 but max is 0 [ 465.235831][ T5912] usb 8-1: config 0 has no interface number 0 [ 465.241921][ T5912] usb 8-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 465.256554][T11026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.268086][ T5912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.279405][T11026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.286402][T11026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.313828][T11026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.344670][ T5912] usb 8-1: config 0 descriptor?? [ 465.494884][T11026] hsr_slave_0: entered promiscuous mode [ 466.278676][ T5144] Bluetooth: hci5: command tx timeout [ 466.278774][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 466.290685][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 466.474240][T11026] hsr_slave_1: entered promiscuous mode [ 466.565255][T11065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.574555][T11065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.198139][T11026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.211468][T11026] Cannot create hsr debugfs directory [ 468.483592][ T5144] Bluetooth: hci5: command tx timeout [ 468.860538][T11026] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 468.935915][T11026] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 468.969244][T11026] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 469.010382][T11026] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 469.188155][T11026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.650359][T11026] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.803993][ T1800] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.811232][ T1800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.829393][ T1800] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.836682][ T1800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.985604][ T5144] Bluetooth: hci5: command tx timeout [ 471.081768][ T5885] usb 8-1: USB disconnect, device number 3 [ 471.200814][T11026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.211320][T11026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.433679][T11105] Invalid source name [ 472.561146][T11026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.694725][T11120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1213'. [ 472.703930][T11120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1213'. [ 473.550979][ T5144] Bluetooth: hci5: command tx timeout [ 473.589551][ T6431] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.730451][ T6431] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.741552][T11122] xt_CT: No such helper "snmp" [ 473.873765][ T6431] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.968741][T11026] veth0_vlan: entered promiscuous mode [ 474.011429][T11026] veth1_vlan: entered promiscuous mode [ 474.050595][ T6431] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.128905][T11026] veth0_macvtap: entered promiscuous mode [ 474.216180][T11026] veth1_macvtap: entered promiscuous mode [ 474.282775][ T6431] bridge_slave_1: left allmulticast mode [ 474.297148][ T6431] bridge_slave_1: left promiscuous mode [ 474.309061][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.319525][ T6431] bridge_slave_0: left allmulticast mode [ 474.326312][ T6431] bridge_slave_0: left promiscuous mode [ 474.333129][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.111632][T11155] Invalid source name [ 476.734440][ T6431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.761257][ T6431] bond_slave_0: left promiscuous mode [ 476.771450][ T6431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.803882][ T6431] bond_slave_1: left promiscuous mode [ 476.810349][ T6431] bond0 (unregistering): Released all slaves [ 476.849183][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.927814][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.948238][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.976322][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.990923][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.033226][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.043421][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.067550][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.078618][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.090773][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.179824][T11026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.290988][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.312457][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.323025][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.334175][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.335317][ T5885] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 477.344112][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.362277][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.372357][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.382901][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.392791][T11026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.403325][T11026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.414908][T11026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.572638][ T5885] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 477.583798][ T5885] usb 4-1: can't read configurations, error -61 [ 477.604936][T11026] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.614463][T11026] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.623229][T11026] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.673323][T11026] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.784669][ T5885] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 477.952061][ T6410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.981646][ T6410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.025510][ T5885] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 478.034861][ T5885] usb 4-1: can't read configurations, error -61 [ 478.042065][ T5885] usb usb4-port1: attempt power cycle [ 478.160690][ T8309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.189337][ T8309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.099304][ T5885] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 479.275296][ T5885] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 479.296588][ T6431] hsr_slave_0: left promiscuous mode [ 479.312739][ T6431] hsr_slave_1: left promiscuous mode [ 479.323929][ T5885] usb 4-1: can't read configurations, error -61 [ 479.334081][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.348406][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.452099][ T73] hid-generic 0001:0000:0000.0015: unknown main item tag 0x0 [ 479.482714][ T73] hid-generic 0001:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 479.546095][ T5885] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 479.701628][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.736000][ T5885] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 479.852049][ T5885] usb 4-1: can't read configurations, error -61 [ 479.879819][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.895118][ T5885] usb usb4-port1: unable to enumerate USB device [ 480.124059][ T6431] veth1_macvtap: left promiscuous mode [ 480.176262][ T6431] veth0_macvtap: left promiscuous mode [ 480.244302][ T6431] veth1_vlan: left promiscuous mode [ 480.249583][ T6431] veth0_vlan: left promiscuous mode [ 481.687742][T11200] loop3: detected capacity change from 0 to 32768 [ 481.696953][T11200] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 481.696953][T11200] clean (size 2912): [ 481.696953][T11200] flags: 0 [ 481.696953][T11200] journal_seq: 10 [ 481.696953][T11200] usage: type=inodes v=8 [ 481.696953][T11200] usage: type=key_version v=0 [ 481.696953][T11200] usage: type=reserved v=0 [ 481.696953][T11200] usage: type=reserved v=0 [ 481.696953][T11200] usage: type=reserved v=0 [ 481.696953][T11200] usage: type=reserved v=0 [ 481.696953][T11200] data_usage: btree: 1/1 [0]=2816 [ 481.696953][T11200] data_usage: journal: 1/1 [0]=0 [ 481.696953][T11200] data_usage: user: 1/1 [0]=16 [ 481.696953][T11200] dev_usage: dev=0 [ 481.696953][T11200] free: buckets=83 sectors=0 fragmented=0 [ 481.696953][T11200] sb: buckets=25 sectors=6152 fragmented=248 [ 481.696953][T11200] journal: buckets=8 sectors=2048 fragmented=0 [ 481.696953][T11200] btree: buckets=11 sectors=2816 fragmented=0 [ 481.696953][T11200] user: buckets=1 sectors=16 fragmented=240 [ 481.696953][T11200] cached: buckets=0 sectors=0 fragmented=0 [ 481.696953][T11200] parity: buckets=458752 sectors=0 fragmented=0 [ 481.696953][T11200] stripe: buckets=0 sectors=0 fragmented=0 [ 481.696953][T11200] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 481.696953][T11200] need_discard: buckets=0 sectors=0 fragmented=0 [ 481.696953][T11200] clock: read=0 [ 481.696953][T11200] clock: write=1280 [ 481.696953][T11200] blacklist: seq=0 [ 481.696953][T11200] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MA [ 481.699520][T11200] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 481.846764][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.910114][ T6431] team0 (unregistering): Port device team_slave_1 removed [ 483.028525][ T6431] team0 (unregistering): Port device team_slave_0 removed [ 483.965393][T11185] tipc: Enabling of bearer rejected, failed to enable media [ 484.455970][ T5846] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 484.462430][ T5846] Bluetooth: hci4: command 0x206a tx timeout [ 485.798828][T11247] xt_nat: multiple ranges no longer supported [ 489.309128][T11274] tipc: Enabling of bearer rejected, failed to enable media [ 489.336545][ T8] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 489.816005][ T8] hid-generic 0001:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 489.881184][ T6431] IPVS: stop unused estimator thread 0... [ 490.370481][T11294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.032268][T11307] xt_nat: multiple ranges no longer supported [ 492.363129][T11305] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 492.363129][T11305] The task syz.4.1254 (11305) triggered the difference, watch for misbehavior. [ 492.761910][ T5885] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 492.965090][ T5885] usb 8-1: Using ep0 maxpacket: 32 [ 492.976907][ T5885] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 493.039808][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.058744][ T5885] usb 8-1: Product: syz [ 493.072410][ T5885] usb 8-1: Manufacturer: syz [ 493.077065][ T5885] usb 8-1: SerialNumber: syz [ 493.085047][ T5885] usb 8-1: config 0 descriptor?? [ 494.262271][ T5885] airspy 8-1:0.0: Board ID: 00 [ 494.267112][ T5885] airspy 8-1:0.0: Firmware version: [ 494.729912][ T5885] airspy 8-1:0.0: usb_control_msg() failed -71 request 0f [ 494.739812][ T5885] airspy 8-1:0.0: Registered as swradio24 [ 494.745598][ T5885] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 494.791186][ T5885] usb 8-1: USB disconnect, device number 4 [ 495.947640][T11379] xt_nat: multiple ranges no longer supported [ 497.258864][T11393] loop1: detected capacity change from 0 to 1024 [ 498.268517][ T6410] hfsplus: b-tree write err: -5, ino 8 [ 498.922047][T11408] TCP: out of memory -- consider tuning tcp_mem [ 501.275497][ T5885] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 501.908916][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 502.186736][ T5885] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 502.200172][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.209752][ T5885] usb 4-1: Product: syz [ 502.220360][ T5885] usb 4-1: Manufacturer: syz [ 502.231176][ T5885] usb 4-1: SerialNumber: syz [ 502.260628][T11448] loop7: detected capacity change from 0 to 1024 [ 502.267839][ T5885] usb 4-1: config 0 descriptor?? [ 502.668548][T11461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.763282][ T29] audit: type=1326 audit(1734519932.677:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.8.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f585d29 code=0x7ffc0000 [ 503.409714][ T5885] airspy 4-1:0.0: Board ID: 00 [ 503.414512][ T5885] airspy 4-1:0.0: Firmware version: [ 503.503584][ T6423] hfsplus: b-tree write err: -5, ino 8 [ 503.568335][ T29] audit: type=1326 audit(1734519932.677:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.8.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa06f585d29 code=0x7ffc0000 [ 503.591675][ T29] audit: type=1326 audit(1734519932.696:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.8.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f585d29 code=0x7ffc0000 [ 503.614633][ T29] audit: type=1326 audit(1734519932.696:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11462 comm="syz.8.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa06f5b85e5 code=0x7ffc0000 [ 503.637558][ T29] audit: type=1326 audit(1734519932.696:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.8.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fa06f585d29 code=0x7ffc0000 [ 503.659840][ T29] audit: type=1326 audit(1734519933.379:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11462 comm="syz.8.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa06f585d29 code=0x7ffc0000 [ 503.682102][ T29] audit: type=1326 audit(1734519933.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.8.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa06f521f29 code=0x7ffc0000 [ 503.704653][ T29] audit: type=1326 audit(1734519933.510:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.8.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f585d29 code=0x7ffc0000 [ 503.727158][ T29] audit: type=1326 audit(1734519933.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.8.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06f585d29 code=0x7ffc0000 [ 503.749659][ T29] audit: type=1326 audit(1734519933.538:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.8.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fa06f585d29 code=0x7ffc0000 [ 504.100491][ T5144] Bluetooth: hci5: command tx timeout [ 504.852776][ T5885] airspy 4-1:0.0: usb_control_msg() failed -71 request 0f [ 504.862656][ T5885] airspy 4-1:0.0: Registered as swradio24 [ 504.872948][ T5885] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 504.884798][ T5885] usb 4-1: USB disconnect, device number 14 [ 506.822825][T11510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'. [ 506.845243][T11510] netlink: 'syz.4.1292': attribute type 12 has an invalid length. [ 507.692943][ T5144] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 507.985530][ T5885] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 508.317053][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 508.331753][ T5885] usb 5-1: config 63 has too many interfaces: 254, using maximum allowed: 32 [ 508.362336][ T5885] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 508.419274][ T5885] usb 5-1: config 63 has 1 interface, different from the descriptor's value: 254 [ 508.490301][ T5885] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 508.542866][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.548415][T11525] xt_CT: No such helper "snmp" [ 508.680003][ T5885] usb 5-1: probing VID:PID(2201:012C) [ 508.717723][ T5885] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 508.788850][ T5885] vub300 5-1:63.0: probe with driver vub300 failed with error -22 [ 509.100084][T11520] sit0: entered promiscuous mode [ 509.813910][T11520] netlink: 'syz.4.1297': attribute type 1 has an invalid length. [ 509.874303][T11520] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1297'. [ 509.938679][ T5884] usb 5-1: USB disconnect, device number 8 [ 512.836179][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 512.836198][ T29] audit: type=1326 audit(1734519942.172:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404e585d29 code=0x7ffc0000 [ 512.865464][ T29] audit: type=1326 audit(1734519942.172:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404e585d29 code=0x7ffc0000 [ 513.394883][ T29] audit: type=1326 audit(1734519942.228:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f404e585d29 code=0x7ffc0000 [ 513.617152][ T29] audit: type=1326 audit(1734519942.228:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404e585d29 code=0x7ffc0000 [ 513.702654][ T29] audit: type=1326 audit(1734519942.228:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f404e585d29 code=0x7ffc0000 [ 513.794702][ T29] audit: type=1326 audit(1734519942.228:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404e585d29 code=0x7ffc0000 [ 513.879251][ T29] audit: type=1326 audit(1734519942.228:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f404e585d29 code=0x7ffc0000 [ 513.932885][ T29] audit: type=1326 audit(1734519942.228:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404e585d29 code=0x7ffc0000 [ 513.983980][ T29] audit: type=1326 audit(1734519942.228:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f404e585d29 code=0x7ffc0000 [ 514.065710][ T29] audit: type=1326 audit(1734519942.228:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11590 comm="syz.4.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404e585d29 code=0x7ffc0000 [ 514.087993][ C0] vkms_vblank_simulate: vblank timer overrun [ 514.785851][ T5846] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 516.294380][T11649] TCP: out of memory -- consider tuning tcp_mem [ 516.885201][T11653] xt_CT: No such helper "snmp" [ 516.998205][T11665] 9pnet_fd: p9_fd_create_unix (11665): problem connecting socket: ./cgroup: -111 [ 517.619761][ T5912] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 518.081675][ T5912] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.094767][ T5912] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 518.119204][ T5912] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 518.131983][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.140081][ T5912] usb 2-1: Product: syz [ 518.148527][ T5912] usb 2-1: Manufacturer: syz [ 518.167637][ T5912] usb 2-1: SerialNumber: syz [ 518.411583][T11665] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 518.456095][T11696] xt_nat: multiple ranges no longer supported [ 518.836755][ T5144] Bluetooth: hci4: unexpected event for opcode 0x00e0 [ 519.345862][T11665] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 519.780355][ T5912] cdc_mbim 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 519.796388][ T5912] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 519.862923][ T5912] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 519.973109][ T5912] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 519.982840][ T5912] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 519.995015][ T5912] wwan wwan0: port wwan0mbim0 attached [ 520.009733][ T5912] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:42:42:42:42:42 [ 520.275935][ T5912] usb 2-1: USB disconnect, device number 9 [ 520.284968][ T5912] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 520.366557][ T5912] wwan wwan0: port wwan0mbim0 disconnected [ 520.646972][ T5144] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 528.547512][T11785] 9pnet_fd: p9_fd_create_unix (11785): problem connecting socket: ./cgroup: -111 [ 528.838475][T11773] TCP: out of memory -- consider tuning tcp_mem [ 531.669739][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.676370][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.770392][ T5846] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 534.234890][T11847] netlink: 'syz.3.1359': attribute type 12 has an invalid length. [ 535.310672][ T118] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 535.542993][ T118] usb 4-1: Using ep0 maxpacket: 32 [ 535.591829][ T118] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.049726][T11870] 9pnet_fd: p9_fd_create_unix (11870): problem connecting socket: ./cgroup: -111 [ 536.186009][ T118] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.318876][ T118] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 536.358357][ T118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.508209][T10532] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 536.598060][ T118] usb 4-1: Product: syz [ 536.602295][ T118] usb 4-1: Manufacturer: syz [ 536.611552][ T118] usb 4-1: SerialNumber: syz [ 536.637750][ T118] usb 4-1: config 0 descriptor?? [ 536.746479][ T118] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 536.778371][T10532] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.820484][T10532] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 536.854866][T10532] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 536.865703][T10532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.874405][T10532] usb 5-1: Product: syz [ 536.879006][T10532] usb 5-1: Manufacturer: syz [ 536.883815][T10532] usb 5-1: SerialNumber: syz [ 537.329114][T11870] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 537.845983][ T1800] usb 4-1: Failed to submit usb control message: -110 [ 537.854732][ T1800] usb 4-1: unable to send the bmi data to the device: -110 [ 537.919133][ T1800] usb 4-1: unable to get target info from device [ 537.956090][ T1800] usb 4-1: could not get target info (-110) [ 537.993015][ T1800] usb 4-1: could not probe fw (-110) [ 538.270127][T11897] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 539.021555][ T5942] usb 4-1: USB disconnect, device number 15 [ 539.708198][T10532] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 539.714869][T10532] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 539.722866][T10532] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 539.829080][T11912] loop8: detected capacity change from 0 to 512 [ 539.920523][T10532] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 539.946116][T10532] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 540.083074][T10532] wwan wwan0: port wwan0mbim0 attached [ 540.401960][T11916] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.410953][T11916] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.419172][T11916] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.427716][T11916] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.570650][T10532] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42 [ 541.379831][T11912] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.8.1371: corrupted xattr block 95: invalid header [ 541.454668][T10532] usb 5-1: USB disconnect, device number 9 [ 541.461524][T10532] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 541.534086][T11912] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1371: bg 0: block 7: invalid block bitmap [ 541.634297][T11912] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 541.663852][T11912] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2977: inode #11: comm syz.8.1371: corrupted xattr block 95: invalid header [ 542.125848][T11912] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -117) [ 542.160470][T11912] EXT4-fs (loop8): 1 orphan inode deleted [ 542.167210][T11912] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000004 r/w without journal. Quota mode: none. [ 542.182306][T10532] wwan wwan0: port wwan0mbim0 disconnected [ 542.795177][T10532] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 543.009396][T10532] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.052088][T11026] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000004. [ 543.081503][T10532] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 543.165313][T10532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 543.207674][T10532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 543.217614][T10532] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 543.548421][T10532] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 543.562699][T10532] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 543.792121][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 543.854152][T10532] usb 5-1: Manufacturer: syz [ 543.861855][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 543.892587][T10532] usb 5-1: config 0 descriptor?? [ 543.900825][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.088154][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 544.099662][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 544.106961][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 544.213560][T10532] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 544.247820][T10532] usb 5-1: USB disconnect, device number 10 [ 544.973057][T11956] chnl_net:caif_netlink_parms(): no params data found [ 545.899788][T11987] 9pnet_fd: p9_fd_create_unix (11987): problem connecting socket: ./cgroup: -111 [ 546.798473][ T5846] Bluetooth: hci0: command tx timeout [ 547.456165][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 547.922593][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.963305][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 548.008830][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.049197][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.100853][ T9] usb 5-1: Product: syz [ 548.121866][ T9] usb 5-1: Manufacturer: syz [ 548.142152][ T9] usb 5-1: SerialNumber: syz [ 548.472914][T11987] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 548.753759][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'. [ 549.102894][ T5846] Bluetooth: hci0: command tx timeout [ 549.280848][T11987] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1386'. [ 549.362171][T11993] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.408728][T11956] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.417514][T11956] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.435205][T11956] bridge_slave_0: entered allmulticast mode [ 549.469161][T11956] bridge_slave_0: entered promiscuous mode [ 549.591530][T11956] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.599092][T11956] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.636615][ T9] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 549.648351][ T9] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 549.657476][ T9] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 549.801077][T11956] bridge_slave_1: entered allmulticast mode [ 549.977280][T11956] bridge_slave_1: entered promiscuous mode [ 550.184940][ T9] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 550.798622][ T9] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 551.208483][ T9] wwan wwan0: port wwan0mbim0 attached [ 551.279104][ T5846] Bluetooth: hci0: command tx timeout [ 552.754625][T11956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.780355][ T9] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42 [ 552.826446][T12068] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1399'. [ 552.898615][ T9] usb 5-1: USB disconnect, device number 11 [ 552.919026][ T9] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 552.999042][ T6431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.064264][T11956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.055959][ T5846] Bluetooth: hci0: command tx timeout [ 555.442797][ T6431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.524831][T12078] tipc: Enabling of bearer rejected, failed to enable media [ 556.760657][ T6431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.830056][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 556.952131][T11956] team0: Port device team_slave_0 added [ 556.960326][T11956] team0: Port device team_slave_1 added [ 557.028059][T11956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.045422][T11956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.081644][T11956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.123861][T12113] loop4: detected capacity change from 0 to 512 [ 557.143872][ T6431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.212598][T11956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.225709][T11956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.274316][T12113] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.1408: corrupted xattr block 95: invalid header [ 557.293185][T11956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.495167][T12113] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1408: bg 0: block 7: invalid block bitmap [ 558.157947][T12113] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 558.174606][T12113] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.1408: corrupted xattr block 95: invalid header [ 558.203480][T12113] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 558.213139][T12113] EXT4-fs (loop4): 1 orphan inode deleted [ 558.230570][T12113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000004 r/w without journal. Quota mode: none. [ 559.562232][T11956] hsr_slave_0: entered promiscuous mode [ 559.839968][T11956] hsr_slave_1: entered promiscuous mode [ 559.883932][T11956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.987244][T11956] Cannot create hsr debugfs directory [ 559.992771][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000004. [ 560.734902][ T6431] bridge_slave_1: left allmulticast mode [ 560.740964][ T6431] bridge_slave_1: left promiscuous mode [ 560.747181][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.757103][T12147] TCP: out of memory -- consider tuning tcp_mem [ 560.757285][ T6431] bridge_slave_0: left allmulticast mode [ 560.769576][ T6431] bridge_slave_0: left promiscuous mode [ 560.775336][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.885923][ T5884] hid-generic 0001:0000:0000.0017: unknown main item tag 0x0 [ 561.573712][ T5884] hid-generic 0001:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 563.212851][T12176] loop7: detected capacity change from 0 to 16 [ 563.408865][T12176] erofs (device loop7): mounted with root inode @ nid 36. [ 563.813757][ T6431] dvmrp5 (unregistering): left allmulticast mode [ 565.341140][ T6431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.155012][ T6431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.277516][ T6431] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 566.569053][ T6431] bond0 (unregistering): Released all slaves [ 566.656703][T12150] tipc: Enabling of bearer rejected, failed to enable media [ 566.949406][T11956] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 567.104095][T11956] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 567.172674][T11956] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 567.271225][T11956] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 568.328085][T11956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.346279][T11956] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.381794][T11956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 568.392500][T11956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 568.433883][ T1800] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.441093][ T1800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.499468][ T1800] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.506701][ T1800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.778172][ T6431] hsr_slave_0: left promiscuous mode [ 568.803060][ T6431] hsr_slave_1: left promiscuous mode [ 568.812365][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.828182][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.848329][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.866063][ T6431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.912982][ T6431] veth1_macvtap: left promiscuous mode [ 568.934473][ T6431] veth0_macvtap: left promiscuous mode [ 568.948509][ T6431] veth1_vlan: left promiscuous mode [ 569.001261][ T6431] veth0_vlan: left promiscuous mode [ 572.019060][ T73] hid-generic 0001:0000:0000.0018: unknown main item tag 0x0 [ 573.102583][ T73] hid-generic 0001:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 573.166241][T12258] ieee802154 phy0 wpan0: encryption failed: -22 [ 575.719614][ T6431] team0 (unregistering): Port device team_slave_1 removed [ 575.766514][ T6431] team0 (unregistering): Port device team_slave_0 removed [ 576.202344][T12259] tipc: Enabling of bearer rejected, failed to enable media [ 576.463887][T12265] xt_CT: No such helper "snmp" [ 576.505197][T11956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.777887][T11956] veth0_vlan: entered promiscuous mode [ 580.835018][T11956] veth1_vlan: entered promiscuous mode [ 580.924373][T11956] veth0_macvtap: entered promiscuous mode [ 580.949977][T11956] veth1_macvtap: entered promiscuous mode [ 580.981125][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 580.994905][ T6431] IPVS: stop unused estimator thread 0... [ 581.004291][T11956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.020908][T11956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.041971][T11956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.063274][T11956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.084307][T11956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.116278][T11956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.137443][T11956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.151966][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 581.185147][T11956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.198601][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.222890][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 581.233142][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.253874][T11956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.274344][ T9] usb 4-1: Product: syz [ 581.279700][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1445'. [ 581.290119][ T9] usb 4-1: Manufacturer: syz [ 581.295280][ T9] usb 4-1: SerialNumber: syz [ 581.312877][ T9] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 581.320757][ T9] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 581.416739][T11956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.434130][T11956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.444492][T11956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.456011][T11956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.470722][T11956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.481521][T11956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.491588][T11956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.502892][T11956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.525260][T11956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.542800][ T9] usb 4-1: USB disconnect, device number 16 [ 581.585964][T11956] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.654474][T11956] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.669935][T11956] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.678992][T11956] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.874488][ T1800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.914477][ T1800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.009565][ T6435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.060159][ T6435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.558182][ T5846] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 583.415063][T12353] tipc: Enabling of bearer rejected, failed to enable media [ 584.048381][ T5884] hid-generic 0001:0000:0000.0019: unknown main item tag 0x0 [ 584.131561][ T5884] hid-generic 0001:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 584.415308][T12363] ieee802154 phy0 wpan0: encryption failed: -22 [ 584.433559][T12363] loop8: detected capacity change from 0 to 16 [ 584.517489][T12363] erofs (device loop8): mounted with root inode @ nid 36. [ 585.029804][ T5144] Bluetooth: hci4: command 0x206a tx timeout [ 587.619793][ T5846] Bluetooth: hci4: command 0x206a tx timeout [ 588.619457][ T5942] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 588.847326][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.950437][ T5942] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 589.041723][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 589.059596][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 589.069607][ T5942] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 589.334571][ T5942] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 589.344092][ T5942] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 589.450212][T12416] tipc: Enabling of bearer rejected, failed to enable media [ 589.479427][T10532] hid-generic 0001:0000:0000.001A: unknown main item tag 0x0 [ 589.590892][ T5942] usb 4-1: Manufacturer: syz [ 589.652612][T10532] hid-generic 0001:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 590.081556][ T5942] usb 4-1: config 0 descriptor?? [ 590.093964][ T5942] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 590.318113][T10532] usb 4-1: USB disconnect, device number 17 [ 590.425331][T12425] ieee802154 phy0 wpan0: encryption failed: -22 [ 590.443518][T12425] loop8: detected capacity change from 0 to 16 [ 590.514000][T12425] erofs (device loop8): mounted with root inode @ nid 36. [ 591.183510][ T5144] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 593.616411][ T5144] Bluetooth: hci0: command tx timeout [ 593.718340][T12445] xt_CT: No such helper "snmp" [ 595.675814][T12490] netlink: 'syz.4.1476': attribute type 29 has an invalid length. [ 595.721066][T12490] netlink: 'syz.4.1476': attribute type 29 has an invalid length. [ 595.765738][T12490] netlink: 'syz.4.1476': attribute type 29 has an invalid length. [ 595.843563][T12490] netlink: 'syz.4.1476': attribute type 29 has an invalid length. [ 595.857149][T12490] netlink: 'syz.4.1476': attribute type 29 has an invalid length. [ 596.056838][T12496] tipc: Enabling of bearer rejected, failed to enable media [ 596.071995][T12490] netlink: 'syz.4.1476': attribute type 29 has an invalid length. [ 596.104155][ T5884] hid-generic 0001:0000:0000.001B: unknown main item tag 0x0 [ 596.858668][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 596.911019][ T5884] hid-generic 0001:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 597.637585][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 597.643948][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.759903][ T5144] Bluetooth: hci5: command 0x0406 tx timeout [ 601.048716][ T5144] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 602.757563][ T118] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 602.972350][T12573] tipc: Enabling of bearer rejected, failed to enable media [ 603.003370][T10532] hid-generic 0001:0000:0000.001C: unknown main item tag 0x0 [ 603.034015][T10532] hid-generic 0001:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 603.249578][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 604.265162][ T118] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.279132][ T118] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 604.294444][ T118] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 604.432572][ T118] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 604.445473][ T118] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 604.455815][ T118] usb 4-1: Manufacturer: syz [ 604.480202][ T118] usb 4-1: config 0 descriptor?? [ 604.498651][ T118] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 604.749826][ T118] usb 4-1: USB disconnect, device number 18 [ 604.810315][T12603] 9pnet_fd: p9_fd_create_unix (12603): problem connecting socket: ./cgroup: -111 [ 605.088431][ T5942] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 605.260891][ T5942] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.279283][ T5942] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 605.322230][ T5942] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.348624][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.374287][ T5942] usb 5-1: Product: syz [ 605.403736][ T5942] usb 5-1: Manufacturer: syz [ 605.429812][ T5942] usb 5-1: SerialNumber: syz [ 605.473299][ T5144] Bluetooth: hci3: command 0x0406 tx timeout [ 605.668919][T12603] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 606.189030][T12603] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1498'. [ 606.208269][ T5942] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 606.214821][ T5942] cdc_mbim 5-1:1.0: bind() failure [ 606.225014][ T5942] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 606.232474][ T5942] cdc_ncm 5-1:1.1: bind() failure [ 608.082386][T12661] tipc: Enabling of bearer rejected, failed to enable media [ 608.599438][ T5942] hid-generic 0001:0000:0000.001D: unknown main item tag 0x0 [ 608.728975][ T5885] usb 5-1: USB disconnect, device number 12 [ 608.750214][ T5942] hid-generic 0001:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 609.258395][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.270139][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.308087][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.361661][T12686] sp0: Synchronizing with TNC [ 609.375984][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.836638][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 609.872729][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 611.618137][T12724] tipc: Enabling of bearer rejected, failed to enable media [ 612.314671][T10532] hid-generic 0001:0000:0000.001E: unknown main item tag 0x0 [ 612.334296][ T5846] Bluetooth: hci1: command tx timeout [ 612.463536][T10532] hid-generic 0001:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 612.675723][T12681] chnl_net:caif_netlink_parms(): no params data found [ 612.872243][T12738] loop7: detected capacity change from 0 to 512 [ 612.929522][T12738] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.7.1527: corrupted xattr block 95: invalid header [ 612.957022][T12738] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1527: bg 0: block 7: invalid block bitmap [ 612.987107][T12738] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 612.996999][T12738] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2977: inode #11: comm syz.7.1527: corrupted xattr block 95: invalid header [ 613.012504][T12681] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.019733][T12738] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -117) [ 613.029695][T12738] EXT4-fs (loop7): 1 orphan inode deleted [ 613.038064][T12681] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.045813][T12738] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000004 r/w without journal. Quota mode: none. [ 613.063762][T12681] bridge_slave_0: entered allmulticast mode [ 613.086330][T12681] bridge_slave_0: entered promiscuous mode [ 613.114173][T12681] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.135756][T12681] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.153664][T12681] bridge_slave_1: entered allmulticast mode [ 613.176580][T12681] bridge_slave_1: entered promiscuous mode [ 613.740797][T12681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.768326][T12681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.191415][T12681] team0: Port device team_slave_0 added [ 614.221595][T12681] team0: Port device team_slave_1 added [ 614.538604][ T5846] Bluetooth: hci1: command tx timeout [ 614.599965][T12681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.612018][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.682791][ T8440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000004. [ 615.080695][T12681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.534653][T12681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.541735][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.366381][T12681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.458900][T12820] tipc: Enabling of bearer rejected, failed to enable media [ 616.523801][T12825] Invalid source name [ 616.603937][T12681] hsr_slave_0: entered promiscuous mode [ 616.703975][T12828] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 617.050867][ T5846] Bluetooth: hci1: command tx timeout [ 617.057450][T12681] hsr_slave_1: entered promiscuous mode [ 617.064078][T12681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.071685][T12681] Cannot create hsr debugfs directory [ 619.338395][ T5846] Bluetooth: hci1: command tx timeout [ 621.574511][T12681] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 621.627747][T12681] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 621.690114][T12681] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 621.739025][T12681] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 621.961739][T12681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.984856][T12681] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.999563][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.006769][ T6452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.042846][T12681] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 622.059212][T12681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.087541][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.094663][ T6452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.395023][T12681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.714201][T10532] hid-generic 0001:0000:0000.001F: unknown main item tag 0x0 [ 622.899838][T12940] tipc: Enabling of bearer rejected, failed to enable media [ 623.418061][T10532] hid-generic 0001:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 623.857201][T12681] veth0_vlan: entered promiscuous mode [ 624.234382][T12681] veth1_vlan: entered promiscuous mode [ 624.920532][T12681] veth0_macvtap: entered promiscuous mode [ 625.003720][T12681] veth1_macvtap: entered promiscuous mode [ 625.178620][T12992] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 625.208521][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.219536][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.229718][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.233402][T12997] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 625.240318][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.240344][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.268854][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.278877][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.289530][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.299733][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.310743][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.322104][T12681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.343508][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.354156][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.364188][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.374834][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.385085][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.395961][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.406380][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.417282][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.427673][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.439551][T12992] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 625.441599][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.463064][T12681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.473708][T12681] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.482670][T12681] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.491691][T12681] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.500587][T12681] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.618676][T13003] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 626.273333][T12992] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 626.334335][ T6419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.375986][ T6419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.445606][T12872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.508275][T12872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.599922][T13015] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 627.850611][T13022] Invalid source name [ 627.942651][T13039] loop7: detected capacity change from 0 to 512 [ 628.045977][T13039] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.7.1560: corrupted xattr block 95: invalid header [ 628.093006][T13039] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1560: bg 0: block 7: invalid block bitmap [ 628.118979][T13039] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 628.131393][T13039] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2977: inode #11: comm syz.7.1560: corrupted xattr block 95: invalid header [ 628.137363][T10532] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 628.155604][T13039] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -117) [ 628.415494][T13039] EXT4-fs (loop7): 1 orphan inode deleted [ 628.429344][T13039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000004 r/w without journal. Quota mode: none. [ 628.441665][T10532] usb 3-1: Using ep0 maxpacket: 32 [ 628.464883][T10532] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 628.487379][T10532] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 628.534439][T10532] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 628.722464][T10532] usb 3-1: config 1 has no interface number 0 [ 628.949291][T10532] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 628.960339][T10532] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 628.973371][T10532] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 628.982456][T10532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.822548][T10532] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 629.863240][T13075] 9pnet_fd: p9_fd_create_unix (13075): problem connecting socket: ./cgroup: -111 [ 630.291154][T10532] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 630.346734][ T8440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000004. [ 630.738387][ T118] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 630.751934][ T9] usb 3-1: USB disconnect, device number 6 [ 630.760421][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 631.817874][ T118] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.829199][ T118] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 631.841737][ T118] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.851215][ T118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.859316][ T118] usb 4-1: Product: syz [ 631.863689][ T118] usb 4-1: Manufacturer: syz [ 631.868495][ T118] usb 4-1: SerialNumber: syz [ 632.182072][T13132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 632.206287][T13132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 632.227023][T13132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 632.227633][T13075] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 632.236242][T13132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 632.801072][T13075] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1564'. [ 632.917744][ T118] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 632.925188][ T118] cdc_mbim 4-1:1.0: bind() failure [ 632.934142][T13132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 632.957037][ T118] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 633.012293][ T118] cdc_ncm 4-1:1.1: bind() failure [ 633.117552][T13140] netlink: 'syz.7.1574': attribute type 29 has an invalid length. [ 633.132681][T13140] netlink: 'syz.7.1574': attribute type 29 has an invalid length. [ 633.148741][T13140] netlink: 'syz.7.1574': attribute type 29 has an invalid length. [ 633.160318][T13140] netlink: 'syz.7.1574': attribute type 29 has an invalid length. [ 633.238605][T13145] Invalid source name [ 633.503442][T13148] netlink: 'syz.7.1574': attribute type 29 has an invalid length. [ 633.719395][T13140] netlink: 'syz.7.1574': attribute type 29 has an invalid length. [ 634.186198][T13154] loop7: detected capacity change from 0 to 512 [ 635.003368][T13154] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.7.1575: corrupted xattr block 95: invalid header [ 635.143208][T13154] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1575: bg 0: block 7: invalid block bitmap [ 635.578379][ T118] usb 4-1: USB disconnect, device number 19 [ 635.891639][T13154] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 635.905329][T13154] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2977: inode #11: comm syz.7.1575: corrupted xattr block 95: invalid header [ 635.946211][T13154] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -117) [ 635.974393][T13154] EXT4-fs (loop7): 1 orphan inode deleted [ 635.981066][T13154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000004 r/w without journal. Quota mode: none. [ 637.241287][ T8440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000004. [ 637.726754][ T118] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 638.013823][ T118] usb 4-1: Using ep0 maxpacket: 32 [ 638.350026][ T5846] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 638.539106][ T118] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 638.554639][ T118] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 638.563565][ T118] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 638.573039][ T118] usb 4-1: config 1 has no interface number 0 [ 638.579175][ T118] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 638.590715][ T118] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 638.604100][ T118] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 638.614352][ T118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.665839][ T118] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 638.706065][T13247] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 638.784763][T13247] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 639.187838][T13247] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 639.234250][T13247] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 639.266127][T13247] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 639.278370][ T118] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 639.576321][ T5884] usb 4-1: USB disconnect, device number 20 [ 639.583144][ T5884] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 640.538677][ T5847] Bluetooth: hci1: command tx timeout [ 642.987520][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 645.422439][T13376] loop2: detected capacity change from 0 to 512 [ 645.492055][T13376] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.1609: corrupted xattr block 95: invalid header [ 645.649462][T13376] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1609: bg 0: block 7: invalid block bitmap [ 645.884402][T13376] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 646.137630][T13376] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.1609: corrupted xattr block 95: invalid header [ 646.302080][T13376] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 646.322199][T13376] EXT4-fs (loop2): 1 orphan inode deleted [ 646.331945][T13376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000004 r/w without journal. Quota mode: none. [ 647.467682][T12681] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000004. [ 648.466251][T13459] netlink: 'syz.9.1620': attribute type 10 has an invalid length. [ 648.599055][T13459] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1620'. [ 648.610800][T13459] bridge0: port 3(bond0) entered blocking state [ 648.617165][T13459] bridge0: port 3(bond0) entered disabled state [ 648.631440][T13459] bond0: entered allmulticast mode [ 648.636624][T13459] bond_slave_0: entered allmulticast mode [ 648.655384][T13459] bond_slave_1: entered allmulticast mode [ 648.682857][T13459] bond0: entered promiscuous mode [ 648.709612][T13459] bond_slave_0: entered promiscuous mode [ 648.731363][T13459] bond_slave_1: entered promiscuous mode [ 648.742822][T13459] bridge0: port 3(bond0) entered blocking state [ 648.749751][T13459] bridge0: port 3(bond0) entered forwarding state [ 648.942014][T13475] loop7: detected capacity change from 0 to 512 [ 648.990435][T13475] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.7.1624: corrupted xattr block 95: invalid header [ 649.019501][T13475] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1624: bg 0: block 7: invalid block bitmap [ 649.032794][T13475] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 649.094134][T13475] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2977: inode #11: comm syz.7.1624: corrupted xattr block 95: invalid header [ 649.108485][T13475] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -117) [ 649.124191][T13475] EXT4-fs (loop7): 1 orphan inode deleted [ 649.130863][T13475] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000004 r/w without journal. Quota mode: none. [ 650.222717][ T8440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000004. [ 652.636618][T13557] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1636'. [ 653.982552][T13579] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 654.939321][T13594] xt_nat: multiple ranges no longer supported [ 654.955167][ T73] IPVS: starting estimator thread 0... [ 655.056226][T13601] IPVS: using max 25 ests per chain, 60000 per kthread [ 657.151403][ T5913] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 657.322517][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 657.330914][ T5913] usb 4-1: config 0 has no interfaces? [ 657.342546][ T5913] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 657.359346][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.377678][ T5913] usb 4-1: Product: syz [ 657.389818][ T5913] usb 4-1: Manufacturer: syz [ 657.395686][ T5913] usb 4-1: SerialNumber: syz [ 657.412102][ T5913] usb 4-1: config 0 descriptor?? [ 657.744696][ T5913] usb 4-1: USB disconnect, device number 21 [ 662.918932][T13762] IPv6: Can't replace route, no match found [ 663.033681][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 663.040261][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 663.515370][ T73] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 663.865300][ T73] usb 5-1: Using ep0 maxpacket: 32 [ 663.951886][ T73] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 664.156297][ T73] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 664.165223][ T73] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 664.174250][ T73] usb 5-1: config 1 has no interface number 0 [ 664.180494][ T73] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 664.191799][ T73] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 664.205009][ T73] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 664.214366][ T73] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.311311][ T73] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 664.847461][T13791] netlink: 'syz.7.1685': attribute type 10 has an invalid length. [ 665.119269][T13778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.658413][T13791] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 665.901169][ T73] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 666.423606][ T5885] usb 5-1: USB disconnect, device number 13 [ 666.430578][ T5885] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 666.899214][T13819] IPv6: Can't replace route, no match found [ 669.588718][T13862] IPv6: Can't replace route, no match found [ 669.961816][T13866] netlink: 'syz.4.1701': attribute type 10 has an invalid length. [ 670.350306][T13853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.611336][ T5912] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 672.802558][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 672.886545][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.915702][ T5912] usb 5-1: config 0 has no interfaces? [ 673.133849][ T5912] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 673.146907][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.165310][ T5912] usb 5-1: Product: syz [ 673.172136][ T5912] usb 5-1: Manufacturer: syz [ 673.186128][ T5912] usb 5-1: SerialNumber: syz [ 673.346139][ T5912] usb 5-1: config 0 descriptor?? [ 675.535487][ T5912] usb 5-1: USB disconnect, device number 14 [ 676.930094][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 677.292959][ T5912] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 677.651380][ T5912] usb 8-1: Using ep0 maxpacket: 8 [ 677.862629][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.880712][ T5912] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 677.911663][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.211864][ T5912] usb 8-1: Product: syz [ 678.216184][ T5912] usb 8-1: Manufacturer: syz [ 678.220810][ T5912] usb 8-1: SerialNumber: syz [ 678.245747][ T5912] usb 8-1: config 0 descriptor?? [ 678.292026][ T5912] streamzap 8-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 678.309138][ T118] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 678.616756][ T5912] usb 8-1: USB disconnect, device number 5 [ 678.705270][ T118] usb 5-1: Using ep0 maxpacket: 8 [ 678.815511][ T118] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.849377][ T118] usb 5-1: config 0 has no interfaces? [ 678.946460][ T118] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 678.961307][ T118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.970091][ T118] usb 5-1: Product: syz [ 678.982759][ T118] usb 5-1: Manufacturer: syz [ 679.002949][ T118] usb 5-1: SerialNumber: syz [ 679.014624][ T118] usb 5-1: config 0 descriptor?? [ 679.609099][T14040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1750'. [ 679.845017][T14054] bridge0: entered promiscuous mode [ 679.874236][T14054] bridge0: port 3(macsec1) entered blocking state [ 679.903988][T14054] bridge0: port 3(macsec1) entered disabled state [ 679.944271][T14054] macsec1: entered allmulticast mode [ 679.954688][T14054] bridge0: entered allmulticast mode [ 679.976529][T14054] macsec1: left allmulticast mode [ 679.982021][T14054] bridge0: left allmulticast mode [ 680.001449][T14054] bridge0: left promiscuous mode [ 681.536329][ T5942] usb 5-1: USB disconnect, device number 15 [ 682.170539][T14090] Bluetooth: MGMT ver 1.23 [ 684.402421][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 684.498086][ T5846] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 684.733239][ T118] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 684.962370][ T118] usb 10-1: Using ep0 maxpacket: 8 [ 684.999154][ T118] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.068009][ T118] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 685.422281][ T118] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 685.547092][ T118] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.584553][ T118] usb 10-1: Product: syz [ 685.602802][ T118] usb 10-1: Manufacturer: syz [ 685.614556][ T118] usb 10-1: SerialNumber: syz [ 685.639325][ T118] usb 10-1: config 0 descriptor?? [ 686.721607][ T5846] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 686.721728][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 688.053857][ T118] usb 10-1: USB disconnect, device number 2 [ 690.156043][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 690.299913][ T5847] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 691.098841][ T5847] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 692.042565][T14274] xt_nat: multiple ranges no longer supported [ 692.804685][ T5885] IPVS: starting estimator thread 0... [ 692.922374][T14278] IPVS: using max 28 ests per chain, 67200 per kthread [ 693.317839][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 693.392489][ T5846] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 693.398682][T14284] Bluetooth: hci0: command 0x0406 tx timeout [ 695.534390][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 695.648436][ T5912] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 696.446131][ T5912] usb 8-1: Using ep0 maxpacket: 8 [ 696.488979][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.529707][ T5912] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.552840][ T5912] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 696.566447][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.587999][ T5912] usb 8-1: Product: syz [ 696.595324][ T5912] usb 8-1: Manufacturer: syz [ 696.607170][ T5912] usb 8-1: SerialNumber: syz [ 696.645545][ T5912] usb 8-1: config 0 descriptor?? [ 696.845939][ T5912] streamzap 8-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 697.675471][ T5884] usb 8-1: USB disconnect, device number 6 [ 698.903081][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 699.333723][ T5847] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 701.801243][T14404] overlayfs: overlapping lowerdir path [ 703.521038][ T5847] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 703.530950][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 704.757554][T14437] syzkaller1: entered promiscuous mode [ 704.763169][T14437] syzkaller1: entered allmulticast mode [ 705.084529][ T5846] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 707.814833][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 709.514022][ T5884] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 709.696697][ T5884] usb 8-1: Using ep0 maxpacket: 8 [ 709.712149][ T5884] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 709.753838][ T5884] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 709.776954][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.832059][ T5884] usb 8-1: Product: syz [ 709.863303][ T5884] usb 8-1: Manufacturer: syz [ 709.885694][ T5884] usb 8-1: SerialNumber: syz [ 709.928654][ T5884] usb 8-1: config 0 descriptor?? [ 710.070331][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 710.540953][T14528] netlink: 'syz.4.1853': attribute type 10 has an invalid length. [ 711.102438][T14514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.536055][T14548] tipc: Enabling of bearer rejected, failed to enable media [ 711.566523][ T5942] hid-generic 0001:0000:0000.0020: unknown main item tag 0x0 [ 712.206161][ T5942] hid-generic 0001:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz0 [ 715.019730][ T9] usb 8-1: USB disconnect, device number 7 [ 715.509831][T14599] netlink: 'syz.3.1870': attribute type 10 has an invalid length. [ 716.048607][T14591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.080742][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1875'. [ 720.354425][T14631] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 720.387167][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 720.393632][ T5846] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 720.525320][T14631] usb 5-1: Using ep0 maxpacket: 8 [ 720.615539][T14631] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 721.020240][T14631] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 721.029564][T14631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.037594][T14631] usb 5-1: Product: syz [ 721.049170][T14631] usb 5-1: Manufacturer: syz [ 721.054105][T14631] usb 5-1: SerialNumber: syz [ 721.062396][T14631] usb 5-1: config 0 descriptor?? [ 721.160743][T14648] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1884'. [ 721.990591][T14665] netlink: 'syz.7.1888': attribute type 10 has an invalid length. [ 722.319950][T14657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.591278][ T118] usb 5-1: USB disconnect, device number 16 [ 725.275552][T14696] IPv6: Can't replace route, no match found [ 726.120138][T14710] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1899'. [ 726.677333][T14721] netlink: 'syz.2.1901': attribute type 10 has an invalid length. [ 727.207571][T14712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.333030][T14721] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 728.892826][T14750] xt_nat: multiple ranges no longer supported [ 729.462970][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 729.469330][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 729.947221][T14734] loop9: detected capacity change from 0 to 32768 [ 730.083369][T14734] bcachefs (/dev/loop9): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 730.083369][T14734] clean (size 2912): [ 730.083369][T14734] flags: 0 [ 730.083369][T14734] journal_seq: 10 [ 730.083369][T14734] usage: type=inodes v=8 [ 730.083369][T14734] usage: type=key_version v=0 [ 730.083369][T14734] usage: type=reserved v=0 [ 730.083369][T14734] usage: type=reserved v=0 [ 730.083369][T14734] usage: type=reserved v=0 [ 730.083369][T14734] usage: type=reserved v=0 [ 730.083369][T14734] data_usage: btree: 1/1 [0]=2816 [ 730.083369][T14734] data_usage: journal: 1/1 [0]=0 [ 730.083369][T14734] data_usage: user: 1/1 [0]=16 [ 730.083369][T14734] dev_usage: dev=0 [ 730.083369][T14734] free: buckets=83 sectors=0 fragmented=0 [ 730.083369][T14734] sb: buckets=25 sectors=6152 fragmented=248 [ 730.083369][T14734] journal: buckets=8 sectors=2048 fragmented=0 [ 730.083369][T14734] btree: buckets=11 sectors=2816 fragmented=0 [ 730.083369][T14734] user: buckets=1 sectors=16 fragmented=240 [ 730.083369][T14734] cached: buckets=0 sectors=0 fragmented=0 [ 730.083369][T14734] parity: buckets=458752 sectors=0 fragmented=0 [ 730.083369][T14734] stripe: buckets=0 sectors=0 fragmented=0 [ 730.083369][T14734] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 730.083369][T14734] need_discard: buckets=0 sectors=0 fragmented=0 [ 730.083369][T14734] clock: read=0 [ 730.083369][T14734] clock: write=1280 [ 730.083369][T14734] blacklist: seq=0 [ 730.083369][T14734] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MA [ 730.083555][T14734] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 732.352434][T14770] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1915'. [ 732.554600][ T5912] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 733.182060][ T5912] usb 5-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 733.193785][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 733.204622][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26159, setting to 64 [ 733.365038][ T5912] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 733.374165][ T5912] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 733.382953][ T5912] usb 5-1: Manufacturer: syz [ 733.395930][T14786] bond0: option arp_validate: invalid value (1985966185) [ 733.466060][ T5912] usb 5-1: config 0 descriptor?? [ 733.472464][T14767] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 733.719529][ T5912] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 733.738542][ T5912] usb 5-1: USB disconnect, device number 17 [ 733.873887][T14797] xt_nat: multiple ranges no longer supported [ 734.462834][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 734.469373][ T5846] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 738.218253][ T5942] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 738.570216][ T5942] usb 3-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 738.637377][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 738.803226][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26159, setting to 64 [ 739.028687][ T5942] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 739.223204][ T5942] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 739.231287][ T5942] usb 3-1: Manufacturer: syz [ 739.352393][ T5942] usb 3-1: config 0 descriptor?? [ 739.358340][T14829] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 739.368716][ T5942] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 739.599126][ T5942] usb 3-1: USB disconnect, device number 7 [ 743.552964][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1965'. [ 743.615262][ T5942] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 743.792806][ T5942] usb 10-1: Using ep0 maxpacket: 8 [ 743.811430][ T5942] usb 10-1: config 0 has an invalid interface number: 176 but max is 0 [ 743.819766][ T5942] usb 10-1: config 0 has no interface number 0 [ 743.841630][ T5942] usb 10-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 743.850919][ T5942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.128604][ T5942] usb 10-1: config 0 descriptor?? [ 744.663401][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1973'. [ 744.739798][T14947] bridge_slave_1: left allmulticast mode [ 744.746087][T14947] bridge_slave_1: left promiscuous mode [ 744.765051][T14947] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.795620][T14947] bridge_slave_0: left allmulticast mode [ 744.815270][T14947] bridge_slave_0: left promiscuous mode [ 744.828867][T14947] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.840137][T14948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.876943][T14948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.901005][ T5912] usb 10-1: USB disconnect, device number 3 [ 747.352431][T14982] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.474111][T14982] loop7: detected capacity change from 0 to 16 [ 747.858625][T14982] erofs (device loop7): mounted with root inode @ nid 36. [ 750.136987][ T5912] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 750.188421][T15016] tipc: Enabling of bearer rejected, failed to enable media [ 750.199447][ T5942] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 750.209367][ T5942] hid-generic 0001:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz0 [ 751.549249][T15039] tipc: Can't bind to reserved service type 0 [ 752.465609][ T5912] usb 3-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 752.479526][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 752.494688][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26159, setting to 64 [ 753.165996][ T5912] usb 3-1: string descriptor 0 read error: -71 [ 753.172263][ T5912] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 753.289019][ T5912] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 753.500480][ T5912] usb 3-1: config 0 descriptor?? [ 753.506874][ T5912] usb 3-1: can't set config #0, error -71 [ 753.514745][ T5912] usb 3-1: USB disconnect, device number 8 [ 753.566120][T15070] tipc: Enabling of bearer rejected, failed to enable media [ 753.579506][ T5942] hid-generic 0001:0000:0000.0022: unknown main item tag 0x0 [ 753.600911][ T5942] hid-generic 0001:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 753.759183][T15080] SET target dimension over the limit! [ 755.505110][ T5912] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 755.669734][ T5912] usb 3-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 755.711547][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26159, setting to 64 [ 755.753450][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.779291][ T5912] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 755.838884][ T5912] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 755.883923][ T5912] usb 3-1: Manufacturer: syz [ 755.939667][ T5912] usb 3-1: config 0 descriptor?? [ 755.972392][T15096] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 756.017051][ T5912] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 756.241579][ T8] usb 3-1: USB disconnect, device number 9 [ 756.557436][T15125] tipc: Enabling of bearer rejected, failed to enable media [ 756.608115][ T5942] hid-generic 0001:0000:0000.0023: unknown main item tag 0x0 [ 756.629573][ T5942] hid-generic 0001:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 756.779005][ T30] INFO: task syz.8.1467:12452 blocked for more than 143 seconds. [ 756.790370][ T30] Not tainted 6.13.0-rc3-next-20241218-syzkaller #0 [ 756.797640][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.827714][ T30] task:syz.8.1467 state:D stack:22040 pid:12452 tgid:12444 ppid:11026 flags:0x00004006 [ 756.885171][ T30] Call Trace: [ 756.957906][ T30] [ 756.963313][ T30] __schedule+0x189f/0x4c80 [ 757.001977][ T30] ? __pfx___schedule+0x10/0x10 [ 757.008979][ T30] ? __pfx_lock_release+0x10/0x10 [ 757.028241][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 757.049528][ T30] ? schedule+0x90/0x320 [ 757.059087][ T30] schedule+0x14b/0x320 [ 757.063908][ T30] bit_wait+0x12/0xd0 [ 757.074125][ T30] __wait_on_bit+0xb0/0x2f0 [ 757.082540][ T30] ? __pfx_bit_wait+0x10/0x10 [ 757.088368][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 757.095142][ T30] ? __pfx_bit_wait+0x10/0x10 [ 757.104865][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 757.148270][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 757.193920][ T30] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 757.226408][ T30] netfs_unbuffered_read_iter_locked+0xd83/0x1540 [ 757.254538][ T30] netfs_unbuffered_read_iter+0xbf/0xe0 [ 757.260611][ T30] __kernel_read+0x52e/0xa00 [ 757.265474][ T30] ? do_sys_openat2+0x13e/0x1d0 [ 757.270869][ T30] ? __pfx___kernel_read+0x10/0x10 [ 757.276282][ T30] integrity_kernel_read+0xb0/0x100 [ 757.282069][ T30] ? __pfx_integrity_kernel_read+0x10/0x10 [ 757.288098][ T30] ? __kmalloc_cache_noprof+0x243/0x390 [ 757.294226][ T30] ? ima_calc_file_hash+0xaae/0x1b30 [ 757.299771][ T30] ima_calc_file_hash+0xae6/0x1b30 [ 757.305100][ T30] ? p9_client_stat+0x1be/0x280 [ 757.309962][ T30] ? v9fs_vfs_getattr+0x1c0/0x370 [ 757.319180][ T30] ? ima_collect_measurement+0x2b1/0xb10 [ 757.325021][ T30] ? process_measurement+0x1351/0x1fb0 [ 757.330513][ T30] ? ima_file_check+0xd9/0x120 [ 757.339323][ T30] ? security_file_post_open+0xb9/0x280 [ 757.344981][ T30] ? path_openat+0x2cbd/0x3580 [ 757.350508][ T30] ? do_filp_open+0x27f/0x4e0 [ 757.355398][ T30] ? __x64_sys_openat+0x247/0x2a0 [ 757.360460][ T30] ? do_syscall_64+0xf3/0x230 [ 757.368276][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.374415][ T30] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 757.382461][ T30] ? p9_client_stat+0x1be/0x280 [ 757.387426][ T30] ? kfree+0x196/0x430 [ 757.391523][ T30] ? __kmalloc_cache_noprof+0x243/0x390 [ 757.397182][ T30] ? p9_client_stat+0x1be/0x280 [ 757.402105][ T30] ? p9_client_stat+0x1be/0x280 [ 757.406993][ T30] ? __pfx_p9_client_stat+0x10/0x10 [ 757.412310][ T30] ? v9fs_fid_lookup+0x1b2/0xf30 [ 757.417278][ T30] ? v9fs_vfs_getattr+0x2eb/0x370 [ 757.422454][ T30] ima_collect_measurement+0x520/0xb10 [ 757.427950][ T30] ? __pfx_ima_collect_measurement+0x10/0x10 [ 757.434028][ T30] ? rcu_is_watching+0x15/0xb0 [ 757.438814][ T30] ? trace_contention_end+0x3c/0x120 [ 757.444194][ T30] ? __asan_memset+0x23/0x50 [ 757.448817][ T30] ? ima_get_hash_algo+0x156/0x4d0 [ 757.454040][ T30] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 757.460056][ T30] process_measurement+0x1351/0x1fb0 [ 757.465591][ T30] ? __pfx_process_measurement+0x10/0x10 [ 757.471620][ T30] ? __pfx_lock_release+0x10/0x10 [ 757.477001][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 757.482108][ T30] ? mnt_get_write_access+0x68/0x2b0 [ 757.488148][ T30] ? file_set_fsnotify_mode+0x12a/0x510 [ 757.494855][ T30] ? inode_to_bdi+0x69/0xf0 [ 757.499402][ T30] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 757.506646][ T30] ima_file_check+0xd9/0x120 [ 757.511295][ T30] ? __pfx_ima_file_check+0x10/0x10 [ 757.516581][ T30] security_file_post_open+0xb9/0x280 [ 757.522002][ T30] path_openat+0x2cbd/0x3580 [ 757.526726][ T30] ? __pfx_path_openat+0x10/0x10 [ 757.531730][ T30] do_filp_open+0x27f/0x4e0 [ 757.536359][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 757.541415][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 757.546487][ T30] do_sys_openat2+0x13e/0x1d0 [ 757.551252][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 757.556468][ T30] ? __se_sys_mount+0x379/0x3c0 [ 757.561434][ T30] __x64_sys_openat+0x247/0x2a0 [ 757.566318][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 757.572463][ T30] ? do_syscall_64+0x100/0x230 [ 757.577265][ T30] ? do_syscall_64+0xb6/0x230 [ 757.582059][ T30] do_syscall_64+0xf3/0x230 [ 757.586592][ T30] ? clear_bhb_loop+0x35/0x90 [ 757.591463][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.597386][ T30] RIP: 0033:0x7fa06f585d29 [ 757.601911][ T30] RSP: 002b:00007fa070384038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 757.610391][ T30] RAX: ffffffffffffffda RBX: 00007fa06f776160 RCX: 00007fa06f585d29 [ 757.618768][ T30] RDX: 0000000000020842 RSI: 000000002000c380 RDI: ffffffffffffff9c [ 757.626899][ T30] RBP: 00007fa06f601a20 R08: 0000000000000000 R09: 0000000000000000 [ 757.635060][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.643161][ T30] R13: 0000000000000000 R14: 00007fa06f776160 R15: 00007ffc1a0ea178 [ 757.651277][ T30] [ 757.654534][ T30] [ 757.654534][ T30] Showing all locks held in the system: [ 757.663187][ T30] 1 lock held by khungtaskd/30: [ 757.668249][ T30] #0: ffffffff8e937d20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 757.678938][ T30] 2 locks held by getty/5585: [ 757.683643][ T30] #0: ffff88803507a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 757.707508][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 757.737153][ T30] 2 locks held by syz.8.1467/12452: [ 757.748658][ T30] #0: ffff8880329736c8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7a6/0x1fb0 [ 757.773858][ T30] #1: ffff88805ab707b8 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: netfs_start_io_direct+0x1d4/0x210 [ 757.785668][ T30] [ 757.788841][ T30] ============================================= [ 757.788841][ T30] [ 757.801726][ T30] NMI backtrace for cpu 0 [ 757.801746][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-next-20241218-syzkaller #0 [ 757.801767][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 757.801777][ T30] Call Trace: [ 757.801784][ T30] [ 757.801791][ T30] dump_stack_lvl+0x241/0x360 [ 757.801817][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 757.801834][ T30] ? __pfx__printk+0x10/0x10 [ 757.801860][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 757.801875][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 757.801886][ T30] ? _printk+0xd5/0x120 [ 757.801899][ T30] ? __pfx__printk+0x10/0x10 [ 757.801913][ T30] ? __wake_up_klogd+0xcc/0x110 [ 757.801925][ T30] ? __pfx__printk+0x10/0x10 [ 757.801939][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 757.801953][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 757.801965][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 757.801979][ T30] watchdog+0xff6/0x1040 [ 757.801993][ T30] ? watchdog+0x1ea/0x1040 [ 757.802008][ T30] ? __pfx_watchdog+0x10/0x10 [ 757.802020][ T30] kthread+0x7a9/0x920 [ 757.802032][ T30] ? __pfx_kthread+0x10/0x10 [ 757.802045][ T30] ? __pfx_watchdog+0x10/0x10 [ 757.802057][ T30] ? __pfx_kthread+0x10/0x10 [ 757.802068][ T30] ? __pfx_kthread+0x10/0x10 [ 757.802083][ T30] ? __pfx_kthread+0x10/0x10 [ 757.802094][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 757.802107][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 757.802121][ T30] ? __pfx_kthread+0x10/0x10 [ 757.802141][ T30] ret_from_fork+0x4b/0x80 [ 757.802153][ T30] ? __pfx_kthread+0x10/0x10 [ 757.802165][ T30] ret_from_fork_asm+0x1a/0x30 [ 757.802183][ T30] [ 757.802187][ T30] Sending NMI from CPU 0 to CPUs 1: [ 757.975673][ C1] NMI backtrace for cpu 1 [ 757.975687][ C1] CPU: 1 UID: 0 PID: 7549 Comm: kworker/u8:23 Not tainted 6.13.0-rc3-next-20241218-syzkaller #0 [ 757.975706][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 757.975717][ C1] Workqueue: events_unbound flush_memcg_stats_dwork [ 757.975739][ C1] RIP: 0010:mem_cgroup_css_rstat_flush+0x75e/0x920 [ 757.975762][ C1] Code: 00 00 48 89 f8 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 80 3c 38 00 74 05 e8 ed a1 f7 ff 4d 01 f4 4d 01 b4 1d 00 01 00 00 <4d> 85 e4 0f 84 cf fe ff ff 49 8d 7c 1d 00 48 89 f8 48 c1 e8 03 42 [ 757.975775][ C1] RSP: 0018:ffffc90003acf838 EFLAGS: 00000013 [ 757.975788][ C1] RAX: 1ffff110037dd030 RBX: 0000000000000080 RCX: 0000000000000000 [ 757.975799][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801bee8180 [ 757.975809][ C1] RBP: 1ffff110170c8c30 R08: ffffffff81b7eac3 R09: 1ffffffff285a308 [ 757.975821][ C1] R10: dffffc0000000000 R11: ffffffff822dfc10 R12: 00000000000004c9 [ 757.975833][ C1] R13: ffff88801bee8000 R14: ffffffffffffffff R15: dffffc0000000000 [ 757.975844][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 757.975858][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.975869][ C1] CR2: 0000564ddb029000 CR3: 000000003303c000 CR4: 00000000003526f0 [ 757.975883][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 757.975893][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 757.975903][ C1] Call Trace: [ 757.975909][ C1] [ 757.975919][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 757.975937][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 757.975957][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 757.975974][ C1] ? nmi_handle+0x2a/0x5a0 [ 757.976001][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 757.976018][ C1] ? nmi_handle+0x14f/0x5a0 [ 757.976037][ C1] ? nmi_handle+0x2a/0x5a0 [ 757.976057][ C1] ? mem_cgroup_css_rstat_flush+0x75e/0x920 [ 757.976076][ C1] ? default_do_nmi+0x63/0x160 [ 757.976093][ C1] ? exc_nmi+0x123/0x1f0 [ 757.976109][ C1] ? end_repeat_nmi+0xf/0x53 [ 757.976129][ C1] ? __pfx_mem_cgroup_css_rstat_flush+0x10/0x10 [ 757.976148][ C1] ? cgroup_rstat_flush_locked+0x1873/0x2100 [ 757.976171][ C1] ? mem_cgroup_css_rstat_flush+0x75e/0x920 [ 757.976191][ C1] ? mem_cgroup_css_rstat_flush+0x75e/0x920 [ 757.976211][ C1] ? mem_cgroup_css_rstat_flush+0x75e/0x920 [ 757.976230][ C1] [ 757.976235][ C1] [ 757.976247][ C1] cgroup_rstat_flush_locked+0x1970/0x2100 [ 757.976268][ C1] ? cgroup_rstat_flush_locked+0x183e/0x2100 [ 757.976302][ C1] ? __pfx_cgroup_rstat_flush_locked+0x10/0x10 [ 757.976323][ C1] ? __pfx___cgroup_rstat_lock+0x10/0x10 [ 757.976345][ C1] ? rcu_is_watching+0x15/0xb0 [ 757.976365][ C1] ? __mem_cgroup_flush_stats+0x10c/0x290 [ 757.976381][ C1] ? process_scheduled_works+0x976/0x1840 [ 757.976397][ C1] cgroup_rstat_flush+0x38/0x50 [ 757.976417][ C1] flush_memcg_stats_dwork+0x15/0x60 [ 757.976432][ C1] process_scheduled_works+0xa66/0x1840 [ 757.976459][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 757.976479][ C1] ? assign_work+0x364/0x3d0 [ 757.976497][ C1] worker_thread+0x870/0xd30 [ 757.976520][ C1] ? __kthread_parkme+0x169/0x1d0 [ 757.976539][ C1] ? __pfx_worker_thread+0x10/0x10 [ 757.976555][ C1] kthread+0x7a9/0x920 [ 757.976572][ C1] ? __pfx_kthread+0x10/0x10 [ 757.976590][ C1] ? __pfx_worker_thread+0x10/0x10 [ 757.976607][ C1] ? __pfx_kthread+0x10/0x10 [ 757.976623][ C1] ? __pfx_kthread+0x10/0x10 [ 757.976642][ C1] ? __pfx_kthread+0x10/0x10 [ 757.976659][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 757.976677][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 757.976696][ C1] ? __pfx_kthread+0x10/0x10 [ 757.976714][ C1] ret_from_fork+0x4b/0x80 [ 757.976730][ C1] ? __pfx_kthread+0x10/0x10 [ 757.976748][ C1] ret_from_fork_asm+0x1a/0x30 [ 757.976771][ C1] [ 757.983024][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 758.367259][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-next-20241218-syzkaller #0 [ 758.377232][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 758.387279][ T30] Call Trace: [ 758.390551][ T30] [ 758.393479][ T30] dump_stack_lvl+0x241/0x360 [ 758.398164][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.403360][ T30] ? __pfx__printk+0x10/0x10 [ 758.407949][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 758.413929][ T30] ? vscnprintf+0x5d/0x90 [ 758.418260][ T30] panic+0x349/0x880 [ 758.422770][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 758.428918][ T30] ? __pfx_panic+0x10/0x10 [ 758.433346][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 758.438729][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 758.444888][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 758.451053][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 758.457210][ T30] watchdog+0x1035/0x1040 [ 758.461541][ T30] ? watchdog+0x1ea/0x1040 [ 758.465959][ T30] ? __pfx_watchdog+0x10/0x10 [ 758.470641][ T30] kthread+0x7a9/0x920 [ 758.474709][ T30] ? __pfx_kthread+0x10/0x10 [ 758.479322][ T30] ? __pfx_watchdog+0x10/0x10 [ 758.484024][ T30] ? __pfx_kthread+0x10/0x10 [ 758.488625][ T30] ? __pfx_kthread+0x10/0x10 [ 758.493220][ T30] ? __pfx_kthread+0x10/0x10 [ 758.498097][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 758.503309][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 758.508507][ T30] ? __pfx_kthread+0x10/0x10 [ 758.513097][ T30] ret_from_fork+0x4b/0x80 [ 758.517511][ T30] ? __pfx_kthread+0x10/0x10 [ 758.522128][ T30] ret_from_fork_asm+0x1a/0x30 [ 758.526924][ T30] [ 758.530214][ T30] Kernel Offset: disabled [ 758.534539][ T30] Rebooting in 86400 seconds..