last executing test programs: 14.33958069s ago: executing program 4 (id=12): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') getsockopt$netlink(r0, 0x10e, 0x1, 0x0, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fsi_master_aspeed_opb_read\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="0000050000000500a8c662ac4f5710c947b90d5c7cb9b2bccf120b27218643fe7a02bd50addc51"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xf0, @lang_id={0x0, 0x3, 0x44c}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 12.85936236s ago: executing program 0 (id=17): r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001e00)=""/4100, 0x1004}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 10.126560792s ago: executing program 3 (id=23): pipe(&(0x7f00000001c0)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc) socket$inet6(0xa, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x12c) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 10.044628091s ago: executing program 1 (id=24): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r3, 0x0) mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) mlock2(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000c00)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d85f194712c626172726965722c63726561746f723d25b5e9122c6e6f6465636f6d706f73652c6e6f626172726965722c666f7263652c7569643d", @ANYRESHEX, @ANYBLOB="2c6372626172726965722c6e6f621a32b86172726965722c646f6e745f6d65617375757365723d3b5e283a232c0000000000000000"], 0x1, 0x6da, &(0x7f0000000300)="$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") setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) write(r2, &(0x7f0000000040)="09000000010000", 0x7) 9.017262681s ago: executing program 0 (id=25): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x14f13b79faf8e7df) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x46, 0x40000000000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/144) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ee8b4c7b167c8f3cc84c01669fcfc1994e794690f88f5c98f17ad5f231"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 8.998272624s ago: executing program 3 (id=26): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x20043, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x5, 0xc8, {0x1, 0x7, 0x5, 0x400, 0x8d29}}}}, 0x17) connect(0xffffffffffffffff, &(0x7f0000000680)=@ax25={{0x3, @bcast, 0x2}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @bcast, @default]}, 0x80) keyctl$search(0xa, 0x0, &(0x7f0000001780)='asymmetric\x00', &(0x7f00000017c0)={'syz', 0x1}, 0x0) syz_emit_vhci(&(0x7f0000001800)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x9}}}, 0x7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0bc5310, &(0x7f0000000100)={{}, 'port0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/dev\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1004}], 0x1, 0x239, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x1, 0x1ca, &(0x7f00000002c0)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001100)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x6d}, @val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vcan0\x00'}]}, 0x4c}}, 0x0) 8.924533594s ago: executing program 1 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_emit_vhci(&(0x7f0000005200)=ANY=[@ANYBLOB='\x00\x00'], 0x9) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x18, 0x0, 0x0, &(0x7f0000000380)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYBLOB="020000000a000200aaaaaaaaaabb00000c000e8005000100ee000000"], 0x34}}, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0xfffffffe, "6e306b3925024a000000004118f25b2040a2f0ffffff00000000000300"}) 8.668318124s ago: executing program 4 (id=28): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23b3b8}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3b03}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180887}) r7 = dup3(r0, r5, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa194f}) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f00000003c0)={0x18, r9}) 8.389702961s ago: executing program 2 (id=29): openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) unshare(0x22000600) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$packet(r0, 0x0, &(0x7f0000000040)) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000080)={'full', 0x25}, 0x2f) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000e3b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fe1000/0x4000)=nil) 7.032367143s ago: executing program 3 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000480)) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x9) writev(r4, &(0x7f0000002480)=[{&(0x7f0000000140)="e7", 0x1}], 0x1) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @private, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x200000007f, &(0x7f0000000300)=0xa) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf04000000000000000002000d0008000300", @ANYRES32, @ANYBLOB="0c0043000d4c0000000000000a0006000802110000010000"], 0x34}}, 0x0) 6.920161492s ago: executing program 1 (id=31): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) write$eventfd(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)) 6.758219777s ago: executing program 0 (id=32): bpf$PROG_LOAD(0x5, 0x0, 0x3b) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000200)={[{@errors_remount}, {@noquota}, {@debug}, {@auto_da_alloc_val}, {@data_err_ignore}, {@nolazytime}, {@data_journal}, {@delalloc}, {@usrquota}]}, 0x10, 0x4bf, &(0x7f0000000a00)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) io_submit(0x0, 0x0, &(0x7f0000000340)) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") rename(&(0x7f0000000780)='./file0\x00', &(0x7f0000000600)='./bus\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000140)="d510c490f913672b5ae413000500", 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000280)={0x0, 0x0, 0xf463, 0x0, 0xff, "83843c556dec3a9a90800124b904cfc27929a3"}) 6.721776385s ago: executing program 2 (id=33): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000aa877e10702750909711000000010902120001000000000904"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="1a", 0x1}, {&(0x7f0000000140)="fa791027e01b4d51411c754af98e6e4427d85564937fa989c20892b2cac8664dd5bc099f9664a3", 0x27}], 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b80000090581"], 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 6.455096346s ago: executing program 4 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f00000003c0)={r4, &(0x7f0000000300), 0x20000000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, 0x0) 5.54727232s ago: executing program 1 (id=35): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000140)={[{@numtail}, {@fat=@showexec}, {@fat=@nocase}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@fat=@quiet}, {@rodir}, {@rodir}, {@nonumtail}]}, 0x1, 0x21d, &(0x7f0000000240)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0), 0x1c) 3.686107652s ago: executing program 1 (id=36): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x1025000, &(0x7f0000000340), 0x0, &(0x7f0000000080), 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 3.608450306s ago: executing program 4 (id=37): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="50000000ffffffffffff08"], 0x2e) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000380)={@dev={0xac, 0x14, 0x14, 0x38}, @loopback}, 0xc) 3.532231389s ago: executing program 3 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d0f, &(0x7f0000000040)) 3.509342107s ago: executing program 0 (id=39): syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0xfffe, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0x12, "000000000000000000000009dd67e256"}, {0x0, 0x4, "0404"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@broadcast, @broadcast, @loopback, @multicast2]}]}}}}}}}, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x840000088}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0xc02c5341, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0xc08c5335, &(0x7f0000000180)) tkill(r0, 0x7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4010) 2.494172996s ago: executing program 0 (id=40): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, 0x0, 0x4) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a80488c6f94f90324fc600400037a0a070200050682c137153e370e0c1180fc1110000300", 0x33fe0}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000680)={0xfb}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='*\x00', 0x2}, {&(0x7f0000000180)="730128ca92d0", 0x6}], 0x2, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr, @dev}}}], 0x20}, 0x0) 2.493614705s ago: executing program 3 (id=41): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x0, 0x6}) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r3) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r4, r5}, &(0x7f00000002c0)=""/250, 0xfa, &(0x7f0000000440)={&(0x7f00000003c0)={'sha224-ssse3\x00'}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)) 2.436152827s ago: executing program 1 (id=42): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x40100) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0xd) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000700)={{0xffffff1f, 0x1, 0x18}, './file0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 2.379853384s ago: executing program 2 (id=43): socket$kcm(0x10, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x1, r4}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r5, &(0x7f0000000240), 0x0}, 0x20) 2.379102418s ago: executing program 4 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r5, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x1fc0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.324523566s ago: executing program 2 (id=45): openat$hwrng(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x40, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xd0}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0) 1.147115651s ago: executing program 4 (id=46): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x440000, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="a425e2f1a54d24f15247474260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa1810000000319"}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000680)={0x0, @reserved}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r3, 0x89e7, &(0x7f0000000000)="e8") r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18018, &(0x7f0000000000), 0x80, 0x63d, &(0x7f0000001280)="$eJzs3c1rHG8dAPDvzCb5NW00qYjYohjw0IJ0m9Ri1VNbD/ZQsGAPIh4a2qTGbl9oUmhroSl4UFAQ9SrSi/+AeJUcvIg3EbQ3z0IVqXpQycrMzjbbzU67TfZN5/OB3Xnmmdl9nu/OPnmemdnJBFBZi9lTGnEsIq4lEfMdy+aitXCxWO/V355czx5JNJtf/WsSSZHXXn+nmB7JnpLWa353MeIjtb3lbjx6fGul0Wx5GnF68/a90xuPHp9av71yc/Xm6p3lM58/e27pC8u/GUycR4rppctf+cQPvvPNz639vnEqifNxdfrbe+IYlMXWpxtZiJ35UxFxLkv0+FxglGrF93E6Ij4W81HL51rmY/37Y60cMFTNWqt/as40gcpJYtw1AMajPQ5o79sPYz94kr28kD0/7BH/VLH3fijfNzr8KunYM8pyIxYGUP5WRPznyfGfZo8oOQ4xNYBySst/FhEf77X9kzz+hTzSLP400o7XZeml4thGVr8vHaAOSUe6v+/f0wOU9qb3ib9zO2Txny+mWf7Fkvd/1yGexa75ovxBfLUAoNT2haIjzwYisdv/ZSPD9vgnusc/zV/m54a6+679KOn/ip51+PLx31Sv/r/d3x/K+/C0axyWxNY/rvR+y+nujD9979KPyspf7Bj/ZY+s/Gz6rf6qf+Ch4ctnEce74v9u/tEn8etinaTH+Ddb5VqfZXz5D3+5VLasLP4DBfUems8jTvTc/9kdlWaprvOTSbTPT55dPr223lhdaj33LONXv/3Gz8vKH3f82fY/XBJ/u/332v5Z3r2yN0123pj9xZXnt1upD/asOvfO+NM/zyRX89RM/rzbvGaSy8UqrcnDlc3N+2feHm97nXy63Ir/5Kd7t/+S+POdj9n2n8w+3PvarVdlyw64/Xeafa5YJov/xj63/w/7LOOfX3/wybJle+PfPSYxu9+gAAAAAAAAoKLS/BxsktZfp9O0Xpx4+2gcTht3NzY/s3b3wZ0bESfzHyZOp+0z3fOt+SSbXy5+tNieP9M1/9mIOBoRP6nN5vP163cbN8YdPAAAAAAAAAAAAAAAAAAAAEyII8X1/zvF/cD+XkvTen3ctQJGZpg3mAMmm/YP1ZW3/9Hcbw2YMPp/qK6e7d8fBagETR2qS/uH6tL+obq0f6gu7R+qq7z971nybNh1AQAAAAAG5uintl9MRcTWF2fzR2amWDY91poBw6aNQ3XVxl0BYGxen+B/j8v/f7wwpMoAI9XX+P9fxT8HHH51gDFIemXmg4Pm2xv/ds9XAgAAAAAAAAAAAABDcOLY9ovE9f9QSe76C9W1v+v/a/t/KTAxev3rf7cDgWqwjw8V18dBgENlC1z/DwAAAAAAAAAAAAAjM5c/krRe/Ax4LtK0Xo/4UEQsxHSytt5YXYqID0fEH2vTH2Tzy+0Xu3gYAAAAAAAAAAAAAAAAAAAABmLj0eNbK43G6v3OxL/35Px/J9p3PJ2U+nQmIhl6EWl05cxGxCTEPpzEVEdOErGVbflBvHNy8O9PTMLnUyTyFuHmfgAAAAAAAAAAAAAAAAAAMEId1x73dvxnI64RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIze7v3/h5cYd4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+m/wYAAP//JXM+Kg==") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x8def36fc170e0c44, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='q', 0x1, r4) r7 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x0) read$FUSE(r7, &(0x7f0000000900)={0x2020}, 0x2020) 1.082319483s ago: executing program 3 (id=47): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800090, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f00000021c0)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet6(0xa, 0x80002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 991.206758ms ago: executing program 0 (id=48): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000880), 0xfd, 0x444, &(0x7f0000001400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) r3 = io_uring_setup(0x660f, &(0x7f0000000880)={0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) 968.241791ms ago: executing program 2 (id=49): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0x40044102, 0x0) 0s ago: executing program 2 (id=50): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x4, r6, r5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 52.442598][ T5213] cgroup: Unknown subsys name 'net' [ 52.610301][ T5213] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.887917][ T5213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.947581][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.955508][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.956302][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.973434][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.974516][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.984303][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.990052][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.002436][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.010892][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.018917][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.022048][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.026731][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.034654][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.040762][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.049760][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.054340][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.061774][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.069807][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.075134][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.082199][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.091187][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.100188][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.104407][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.110127][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.117238][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.132259][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.135497][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.149310][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.157743][ T4620] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.170422][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.584630][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 56.608485][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 56.673591][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 56.699441][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 56.709483][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 56.792649][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.799932][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.809413][ T5229] bridge_slave_0: entered allmulticast mode [ 56.816742][ T5229] bridge_slave_0: entered promiscuous mode [ 56.861334][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.868958][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.876378][ T5226] bridge_slave_0: entered allmulticast mode [ 56.882883][ T5226] bridge_slave_0: entered promiscuous mode [ 56.890322][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.897638][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.904890][ T5229] bridge_slave_1: entered allmulticast mode [ 56.911404][ T5229] bridge_slave_1: entered promiscuous mode [ 56.950499][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.957697][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.965141][ T5226] bridge_slave_1: entered allmulticast mode [ 56.971678][ T5226] bridge_slave_1: entered promiscuous mode [ 56.998116][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.012798][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.022197][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.029410][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.037291][ T5223] bridge_slave_0: entered allmulticast mode [ 57.043804][ T5223] bridge_slave_0: entered promiscuous mode [ 57.051518][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.058781][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.066376][ T5223] bridge_slave_1: entered allmulticast mode [ 57.072979][ T5223] bridge_slave_1: entered promiscuous mode [ 57.092949][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.136346][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.160658][ T5229] team0: Port device team_slave_0 added [ 57.193152][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.200453][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.208067][ T5225] bridge_slave_0: entered allmulticast mode [ 57.215192][ T5225] bridge_slave_0: entered promiscuous mode [ 57.226313][ T5229] team0: Port device team_slave_1 added [ 57.233220][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.246323][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.255670][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.262758][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.270311][ T5224] bridge_slave_0: entered allmulticast mode [ 57.276973][ T5224] bridge_slave_0: entered promiscuous mode [ 57.286849][ T5226] team0: Port device team_slave_0 added [ 57.293066][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.300377][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.307590][ T5225] bridge_slave_1: entered allmulticast mode [ 57.314344][ T5225] bridge_slave_1: entered promiscuous mode [ 57.343064][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.350647][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.358113][ T5224] bridge_slave_1: entered allmulticast mode [ 57.365032][ T5224] bridge_slave_1: entered promiscuous mode [ 57.372634][ T5226] team0: Port device team_slave_1 added [ 57.405063][ T5223] team0: Port device team_slave_0 added [ 57.427277][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.434357][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.461276][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.481032][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.488072][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.514407][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.527712][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.534912][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.561432][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.573836][ T5223] team0: Port device team_slave_1 added [ 57.588006][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.595040][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.621164][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.634365][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.662791][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.675627][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.698306][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.718466][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.725525][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.752536][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.780033][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.787113][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.813090][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.846484][ T5224] team0: Port device team_slave_0 added [ 57.871114][ T5229] hsr_slave_0: entered promiscuous mode [ 57.877815][ T5229] hsr_slave_1: entered promiscuous mode [ 57.888839][ T5224] team0: Port device team_slave_1 added [ 57.905253][ T5225] team0: Port device team_slave_0 added [ 57.921305][ T5226] hsr_slave_0: entered promiscuous mode [ 57.928164][ T5226] hsr_slave_1: entered promiscuous mode [ 57.935385][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.943143][ T5226] Cannot create hsr debugfs directory [ 57.957207][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.964556][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.990497][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.005891][ T5225] team0: Port device team_slave_1 added [ 58.037310][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.044388][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.070793][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.099319][ T5223] hsr_slave_0: entered promiscuous mode [ 58.105700][ T5223] hsr_slave_1: entered promiscuous mode [ 58.111619][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.119868][ T5223] Cannot create hsr debugfs directory [ 58.156044][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.163010][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.189511][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.224647][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.225584][ T5230] Bluetooth: hci2: command tx timeout [ 58.231604][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.237934][ T5230] Bluetooth: hci0: command tx timeout [ 58.263250][ T5240] Bluetooth: hci1: command tx timeout [ 58.268935][ T5230] Bluetooth: hci3: command tx timeout [ 58.274531][ T5240] Bluetooth: hci4: command tx timeout [ 58.286295][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.327400][ T5224] hsr_slave_0: entered promiscuous mode [ 58.333777][ T5224] hsr_slave_1: entered promiscuous mode [ 58.340381][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.348101][ T5224] Cannot create hsr debugfs directory [ 58.453138][ T5225] hsr_slave_0: entered promiscuous mode [ 58.459640][ T5225] hsr_slave_1: entered promiscuous mode [ 58.466103][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.473652][ T5225] Cannot create hsr debugfs directory [ 58.669217][ T5229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.679445][ T5229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.689627][ T5229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.698608][ T5229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.743597][ T5226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.754146][ T5226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.766887][ T5226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.799382][ T5226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.854572][ T5224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.866064][ T5224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.890084][ T5224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.899982][ T5224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.962557][ T5223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.971976][ T5223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.981120][ T5223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.011576][ T5223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.047344][ T5225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.063173][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.077420][ T5225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.087784][ T5225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.118020][ T5225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.166079][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.190016][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.197410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.217885][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.245284][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.252354][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.301834][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.323009][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.352382][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.359586][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.380931][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.410284][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.419756][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.426903][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.459631][ T960] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.466873][ T960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.476999][ T960] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.484129][ T960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.542127][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.578545][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.585703][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.630946][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.638109][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.671149][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.722384][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.737676][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.808583][ T2583] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.815754][ T2583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.841399][ T2583] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.848590][ T2583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.873804][ T5223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.001010][ T5229] veth0_vlan: entered promiscuous mode [ 60.060487][ T5229] veth1_vlan: entered promiscuous mode [ 60.076121][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.088523][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.160837][ T5229] veth0_macvtap: entered promiscuous mode [ 60.196398][ T5229] veth1_macvtap: entered promiscuous mode [ 60.240248][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.263636][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.280971][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.306315][ T5240] Bluetooth: hci4: command tx timeout [ 60.306332][ T5236] Bluetooth: hci3: command tx timeout [ 60.306364][ T5236] Bluetooth: hci1: command tx timeout [ 60.311726][ T5240] Bluetooth: hci0: command tx timeout [ 60.318849][ T5230] Bluetooth: hci2: command tx timeout [ 60.343165][ T5226] veth0_vlan: entered promiscuous mode [ 60.363674][ T5229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.372999][ T5229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.390669][ T5229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.399954][ T5229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.435438][ T5226] veth1_vlan: entered promiscuous mode [ 60.462418][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.527328][ T5223] veth0_vlan: entered promiscuous mode [ 60.585734][ T5223] veth1_vlan: entered promiscuous mode [ 60.603365][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.612809][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.616886][ T5226] veth0_macvtap: entered promiscuous mode [ 60.647519][ T5226] veth1_macvtap: entered promiscuous mode [ 60.663505][ T5225] veth0_vlan: entered promiscuous mode [ 60.683162][ T5225] veth1_vlan: entered promiscuous mode [ 60.700417][ T5293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.703664][ T5224] veth0_vlan: entered promiscuous mode [ 60.714572][ T5293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.760504][ T5223] veth0_macvtap: entered promiscuous mode [ 60.789217][ T5224] veth1_vlan: entered promiscuous mode [ 60.810871][ T5223] veth1_macvtap: entered promiscuous mode [ 60.856321][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.873504][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.886768][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.913349][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.924097][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.935701][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.957750][ T5225] veth0_macvtap: entered promiscuous mode [ 60.969620][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.980161][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.990405][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.000906][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.012432][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.022183][ T5226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.031350][ T5226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.040916][ T5226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.049913][ T5226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.073384][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.083997][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.093917][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.105607][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.116905][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.131435][ T5225] veth1_macvtap: entered promiscuous mode [ 61.143724][ T5223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.152526][ T5223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.161565][ T5223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.170309][ T5223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.197573][ T5224] veth0_macvtap: entered promiscuous mode [ 61.225022][ T5278] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.233476][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.244487][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.256289][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.267390][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.277686][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.288349][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.300034][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.321791][ T5224] veth1_macvtap: entered promiscuous mode [ 61.341960][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.353712][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.364504][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.375222][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.385166][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.396010][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.410209][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.432718][ T5225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.441847][ T5278] usb 3-1: Using ep0 maxpacket: 32 [ 61.444091][ T5225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.451797][ T5278] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 61.460484][ T5225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.465574][ T5278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.472795][ T5225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.483453][ T5278] usb 3-1: config 0 has no interface number 0 [ 61.498977][ T5278] usb 3-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.521995][ T5278] usb 3-1: Dual-Role OTG device on HNP port [ 61.529679][ T5278] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4c.b4 [ 61.541150][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.559746][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.572521][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.583072][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.587335][ T5278] usb 3-1: config 0 descriptor?? [ 61.594673][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.608652][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.619432][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.633031][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.643738][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.655217][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.695936][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.706798][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.716961][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.727471][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.737754][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.748708][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.760699][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.771740][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.783361][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.816406][ T5293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.821264][ T5224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.824347][ T5293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.851042][ T5224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.859877][ T5224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.868888][ T5224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.886044][ T960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.914054][ T960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.925751][ T5311] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.991444][ T5293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.010027][ T5293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.042043][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.071559][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.130555][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.139019][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.242735][ T5293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.263548][ T5293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.285782][ T5278] usb 3-1: string descriptor 0 read error: -71 [ 62.301738][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.318601][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.333397][ T5278] usb_ehset_test 3-1:0.224: probe with driver usb_ehset_test failed with error -32 [ 62.376295][ T5278] usb 3-1: USB disconnect, device number 2 [ 62.384613][ T5236] Bluetooth: hci0: command tx timeout [ 62.390558][ T5230] Bluetooth: hci4: command tx timeout [ 62.396527][ T53] Bluetooth: hci3: command tx timeout [ 62.396553][ T5240] Bluetooth: hci1: command tx timeout [ 62.402413][ T5236] Bluetooth: hci2: command tx timeout [ 62.483912][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.517163][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.536086][ T5316] loop1: detected capacity change from 0 to 2048 [ 62.717093][ T5316] Alternate GPT is invalid, using primary GPT. [ 62.730356][ T5316] loop1: p2 p3 p7 [ 62.983941][ T5309] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.204147][ T5309] usb 1-1: Using ep0 maxpacket: 8 [ 63.318388][ T5309] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 63.581765][ T5309] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 63.677204][ T5309] usb 1-1: Product: syz [ 63.681409][ T5309] usb 1-1: Manufacturer: syz [ 63.700434][ T5309] usb 1-1: SerialNumber: syz [ 63.725373][ T5327] loop3: detected capacity change from 0 to 1024 [ 63.797949][ T5309] usb 1-1: config 0 descriptor?? [ 63.860549][ T5327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.892501][ T5309] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 64.384531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.903351][ T5309] gspca_zc3xx: reg_w_i err -110 [ 64.908395][ T5309] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 64.972784][ T5236] Bluetooth: hci1: command tx timeout [ 65.040821][ T5230] Bluetooth: hci2: command tx timeout [ 65.046516][ T5230] Bluetooth: hci0: command tx timeout [ 65.052014][ T5230] Bluetooth: hci4: command tx timeout [ 65.058346][ T5230] Bluetooth: hci3: command tx timeout [ 66.891197][ T5355] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.984011][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.040529][ T25] usb 1-1: USB disconnect, device number 2 [ 67.145499][ T5359] loop1: detected capacity change from 0 to 4096 [ 67.289905][ T5359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.916072][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.927255][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.937191][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 68.540260][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.652038][ T9] usb 5-1: config 0 descriptor?? [ 68.772769][ T5223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.081804][ T5383] Non-string source [ 69.908470][ T9] hid (null): bogus close delimiter [ 69.921650][ T9] usb 5-1: string descriptor 0 read error: -22 [ 69.950651][ T9] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 70.195361][ T5395] loop1: detected capacity change from 0 to 1024 [ 70.206855][ T9] usb 5-1: USB disconnect, device number 2 [ 71.066350][ T5395] Bluetooth: MGMT ver 1.23 [ 71.147662][ T5352] hfsplus: b-tree write err: -5, ino 4 [ 71.370070][ T5403] loop3: detected capacity change from 0 to 8 [ 71.611606][ T5410] loop0: detected capacity change from 0 to 128 [ 71.680907][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.294554][ T5412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27'. [ 72.633034][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.946015][ T5403] SQUASHFS error: zlib decompression failed, data probably corrupt [ 72.954387][ T5403] SQUASHFS error: Failed to read block 0x9b: -5 [ 72.960684][ T5403] SQUASHFS error: Unable to read metadata cache entry [99] [ 72.968061][ T5403] SQUASHFS error: Unable to read inode 0x127 [ 73.077358][ T5407] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 73.086571][ T5407] FAT-fs (loop0): Filesystem has been set read-only [ 74.284051][ T5432] capability: warning: `syz.0.32' uses deprecated v2 capabilities in a way that may be insecure [ 74.481282][ T5434] loop0: detected capacity change from 0 to 512 [ 74.555096][ T5434] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.769675][ T5438] Error parsing options; rc = [-22] [ 75.089813][ T5440] loop1: detected capacity change from 0 to 256 [ 75.100987][ T5440] vfat: Unknown parameter 'nnonumtail' [ 75.554464][ T5277] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.429452][ T5434] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 76.462987][ T5432] loop0: detected capacity change from 0 to 512 [ 76.502137][ T5444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.634055][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 76.648738][ T5277] usb 3-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 76.694692][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.774477][ T943] cfg80211: failed to load regulatory.db [ 76.797143][ T5277] usb 3-1: config 0 descriptor?? [ 76.821945][ T5277] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 77.409120][ T5277] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 77.456568][ T5277] sq905c 3-1:0.0: Get version command failed [ 77.462651][ T5277] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 77.512504][ T5277] usb 3-1: USB disconnect, device number 3 [ 77.635179][ T5462] netlink: 'syz.0.40': attribute type 11 has an invalid length. [ 77.643174][ T5462] netlink: 211132 bytes leftover after parsing attributes in process `syz.0.40'. [ 77.678941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.693978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 77.702656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.986458][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 79.024198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.041006][ T5483] loop3: detected capacity change from 0 to 256 [ 79.148274][ T5485] loop0: detected capacity change from 0 to 512 [ 79.160230][ T5482] loop4: detected capacity change from 0 to 1024 [ 79.194262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 79.541665][ T5482] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.916619][ T5485] EXT4-fs (loop0): 1 truncate cleaned up [ 79.922946][ T5482] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 79.925082][ T5489] autofs4:pid:5489:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 79.935515][ T5482] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.946217][ T5485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.969905][ T5482] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.46: Freeing blocks not in datazone - block = 0, count = 4096 [ 79.979721][ T29] audit: type=1800 audit(1724354889.236:2): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.47" name="bus" dev="loop3" ino=1048606 res=0 errno=0 [ 79.986712][ T5482] EXT4-fs (loop4): 1 orphan inode deleted [ 80.046396][ T4681] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 80.059019][ T4681] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 80.067423][ T4681] CPU: 1 UID: 0 PID: 4681 Comm: udevd Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 80.077136][ T4681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 80.087264][ T4681] RIP: 0010:__rb_erase_color+0x2d7/0xa30 [ 80.092978][ T4681] Code: 73 02 00 00 49 8d 5c 24 10 48 89 dd 48 c1 ed 03 42 80 7c 35 00 00 74 08 48 89 df e8 43 dc 44 f6 4c 8b 2b 4d 89 ef 49 c1 ef 03 <43> 80 3c 37 00 74 08 4c 89 ef e8 2a dc 44 f6 41 f6 45 00 01 48 89 [ 80.112667][ T4681] RSP: 0018:ffffc9000344f400 EFLAGS: 00010046 [ 80.118767][ T4681] RAX: 000000000016e360 RBX: ffff888029ee5aa0 RCX: dffffc0000000000 [ 80.126913][ T4681] RDX: ffffffff81681190 RSI: ffff888064279848 RDI: ffff888029ee5a90 [ 80.134967][ T4681] RBP: 1ffff110053dcb54 R08: ffffffff901c12ef R09: 1ffffffff203825d [ 80.143206][ T4681] R10: dffffc0000000000 R11: ffffffff81671e10 R12: ffff888029ee5a90 [ 80.151178][ T4681] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 80.159241][ T4681] FS: 00007fb8f9d14c80(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 80.168179][ T4681] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.174743][ T4681] CR2: 00007fc6df3f82d4 CR3: 000000006636c000 CR4: 00000000003506f0 [ 80.182694][ T4681] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.190645][ T4681] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.198619][ T4681] Call Trace: [ 80.201888][ T4681] [ 80.204833][ T4681] ? __die_body+0x5f/0xb0 [ 80.209189][ T4681] ? die_addr+0xb0/0xe0 [ 80.213331][ T4681] ? exc_general_protection+0x3dd/0x5d0 [ 80.218867][ T4681] ? asm_exc_general_protection+0x26/0x30 [ 80.224567][ T4681] ? __pfx_set_next_task_fair+0x10/0x10 [ 80.230234][ T4681] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 80.236116][ T4681] ? __rb_erase_color+0x2d7/0xa30 [ 80.241120][ T4681] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 80.247162][ T4681] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 80.253034][ T4681] __dequeue_entity+0x953/0xd30 [ 80.257865][ T4681] ? update_load_avg+0x10e1/0x1a00 [ 80.262959][ T4681] set_next_entity+0xfe/0x4c0 [ 80.267618][ T4681] set_next_task_fair+0x1dd/0x540 [ 80.272626][ T4681] ? put_prev_entity+0x6f/0x200 [ 80.277454][ T4681] __schedule+0x250c/0x4b30 [ 80.281948][ T4681] ? __pfx___schedule+0x10/0x10 [ 80.286777][ T4681] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 80.292739][ T4681] ? preempt_schedule_irq+0xf0/0x1c0 [ 80.298001][ T4681] preempt_schedule_irq+0xfb/0x1c0 [ 80.303089][ T4681] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 80.308788][ T4681] irqentry_exit+0x5e/0x90 [ 80.313183][ T4681] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 80.318623][ T4681] RIP: 0010:arch_stack_walk+0x142/0x150 [ 80.324147][ T4681] Code: 94 8d 09 00 83 bd 70 ff ff ff 00 75 d0 65 48 8b 04 25 28 00 00 00 48 3b 45 d0 75 13 48 83 c4 68 5b 41 5c 41 5d 41 5e 41 5f 5d cc cc cc cc e8 44 a6 87 0a 0f 1f 40 00 90 90 90 90 90 90 90 90 [ 80.343730][ T4681] RSP: 0018:ffffc9000344f938 EFLAGS: 00000282 [ 80.349865][ T4681] RAX: 49ebc948fb6cb000 RBX: ffffc9000344f990 RCX: ffffffff917a1000 [ 80.357814][ T4681] RDX: ffffffff91940d00 RSI: ffffffff8c0adfc0 RDI: ffffffff8c609f20 [ 80.365854][ T4681] RBP: ffffc9000344fa20 R08: ffffffff901c12ef R09: 1ffffffff203825d [ 80.373808][ T4681] R10: dffffc0000000000 R11: fffffbfff203825e R12: ffffc9000344fa30 [ 80.381777][ T4681] R13: dffffc0000000000 R14: ffffc9000344f980 R15: 1ffff92000689f2c [ 80.389747][ T4681] ? __init_begin+0x41000/0x41000 [ 80.394762][ T4681] ? use_tsc_delay+0x10/0x30 [ 80.399339][ T4681] stack_trace_save+0x118/0x1d0 [ 80.404171][ T4681] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 80.410302][ T4681] ? __pfx_stack_trace_save+0x10/0x10 [ 80.415657][ T4681] kasan_save_track+0x3f/0x80 [ 80.420313][ T4681] ? kasan_save_track+0x3f/0x80 [ 80.425140][ T4681] ? __kasan_slab_alloc+0x66/0x80 [ 80.430140][ T4681] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 80.435773][ T4681] ? getname_flags+0xb7/0x540 [ 80.440431][ T4681] ? vfs_fstatat+0x12c/0x190 [ 80.444999][ T4681] ? __x64_sys_newfstatat+0x11d/0x1a0 [ 80.450348][ T4681] ? do_syscall_64+0xf3/0x230 [ 80.455000][ T4681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.461054][ T4681] __kasan_slab_alloc+0x66/0x80 [ 80.465883][ T4681] ? getname_flags+0xb7/0x540 [ 80.470539][ T4681] kmem_cache_alloc_noprof+0x135/0x2a0 [ 80.476001][ T4681] getname_flags+0xb7/0x540 [ 80.480532][ T4681] vfs_fstatat+0x12c/0x190 [ 80.484940][ T4681] __x64_sys_newfstatat+0x11d/0x1a0 [ 80.490123][ T4681] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 80.495823][ T4681] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.502131][ T4681] ? do_syscall_64+0x100/0x230 [ 80.506877][ T4681] ? do_syscall_64+0xb6/0x230 [ 80.511533][ T4681] do_syscall_64+0xf3/0x230 [ 80.516037][ T4681] ? clear_bhb_loop+0x35/0x90 [ 80.520716][ T4681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.526787][ T4681] RIP: 0033:0x7fb8f99165f4 [ 80.531285][ T4681] Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8 [ 80.550886][ T4681] RSP: 002b:00007ffc5cfd00b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 80.559405][ T4681] RAX: ffffffffffffffda RBX: 00007ffc5cfd1a58 RCX: 00007fb8f99165f4 [ 80.567444][ T4681] RDX: 00007ffc5cfd00c8 RSI: 00007ffc5cfd0558 RDI: 00000000ffffff9c [ 80.575420][ T4681] RBP: 00007ffc5cfd0158 R08: 0000000000000000 R09: 0000000000000000 [ 80.583374][ T4681] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc5cfd0558 [ 80.591323][ T4681] R13: 00007ffc5cfd00c8 R14: 0000562694175910 R15: 0000000000000000 [ 80.599299][ T4681] [ 80.602298][ T4681] Modules linked in: [ 80.606176][ T4681] ---[ end trace 0000000000000000 ]--- [ 80.611608][ T4681] RIP: 0010:__rb_erase_color+0x2d7/0xa30 [ 80.617248][ T4681] Code: 73 02 00 00 49 8d 5c 24 10 48 89 dd 48 c1 ed 03 42 80 7c 35 00 00 74 08 48 89 df e8 43 dc 44 f6 4c 8b 2b 4d 89 ef 49 c1 ef 03 <43> 80 3c 37 00 74 08 4c 89 ef e8 2a dc 44 f6 41 f6 45 00 01 48 89 [ 80.636921][ T4681] RSP: 0018:ffffc9000344f400 EFLAGS: 00010046 [ 80.642971][ T4681] RAX: 000000000016e360 RBX: ffff888029ee5aa0 RCX: dffffc0000000000 [ 80.650924][ T4681] RDX: ffffffff81681190 RSI: ffff888064279848 RDI: ffff888029ee5a90 [ 80.658874][ T4681] RBP: 1ffff110053dcb54 R08: ffffffff901c12ef R09: 1ffffffff203825d [ 80.667016][ T4681] R10: dffffc0000000000 R11: ffffffff81671e10 R12: ffff888029ee5a90 [ 80.674981][ T4681] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 80.683026][ T4681] FS: 00007fb8f9d14c80(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 80.692067][ T4681] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.698638][ T4681] CR2: 00007fc6df3f82d4 CR3: 000000006636c000 CR4: 00000000003506f0 [ 80.706595][ T4681] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.714671][ T4681] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.722638][ T4681] Kernel panic - not syncing: Fatal exception [ 81.793547][ T4681] Shutting down cpus with NMI [ 81.798448][ T4681] Kernel Offset: disabled [ 81.802783][ T4681] Rebooting in 86400 seconds..