last executing test programs: 18m22.203031086s ago: executing program 32 (id=117): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a0080000002000800000000040008800fc5f4e6a846e6f6ec0f662d65ac84f39514a463ec851377d393fcfdc118fc8acabb2ca567a0fda6652aa1c03a66c414ccdaeda53db74f82a7b0a6c497f0b204bfbcfc576072472f68b1cc8673f30fa643d317e2f2022b9b3b84347a6ef9"], 0x20}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 18m16.492884928s ago: executing program 33 (id=125): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r3) 16m27.632021797s ago: executing program 34 (id=271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$midi(0xffffffffffffffff, 0x0, 0x43) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f80, 0x11f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x2, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xcf, 0x9}}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) timer_gettime(r2, &(0x7f0000000300)) set_mempolicy(0x8006, 0x0, 0x5) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x100010, 0xffffffffffffffff, 0xcc70a000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12m6.477038586s ago: executing program 35 (id=650): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x80000000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='hfs\x00', 0x482, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl(r1, 0x8b19, &(0x7f0000000040)) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x2040400) 11m32.300784335s ago: executing program 0 (id=717): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, &(0x7f00000002c0)={[0x1]}, &(0x7f0000000340), 0x8) 11m31.443618487s ago: executing program 0 (id=721): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) lstat(0x0, 0x0) 11m30.375970226s ago: executing program 0 (id=725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000649000/0x4000)=nil}) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000010c0)=0x40) fstat(r4, &(0x7f0000001200)) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 11m27.144842095s ago: executing program 0 (id=731): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000fa8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x11) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 11m26.33664543s ago: executing program 0 (id=734): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 11m25.781158651s ago: executing program 0 (id=736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 11m9.745163844s ago: executing program 36 (id=736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 10m52.884820725s ago: executing program 7 (id=780): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 10m47.933753316s ago: executing program 7 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x80049367, 0x0) 10m46.753052707s ago: executing program 7 (id=793): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060001"], 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m41.785276683s ago: executing program 7 (id=797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000085000000d000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x4000005, 0x3, 0x6b, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45) 10m41.056686982s ago: executing program 7 (id=801): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m39.866540078s ago: executing program 7 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000649000/0x4000)=nil}) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000010c0)=0x40) fstat(r5, &(0x7f0000001200)) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 10m24.448208739s ago: executing program 37 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000649000/0x4000)=nil}) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000010c0)=0x40) fstat(r5, &(0x7f0000001200)) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 10m11.881921901s ago: executing program 9 (id=757): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 9m56.307154015s ago: executing program 38 (id=757): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 4m56.160525373s ago: executing program 3 (id=1654): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82000, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 4m55.543452184s ago: executing program 3 (id=1658): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80003, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000a7c276e8170101"]) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r11, 0x4004700e, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) getsockname$packet(r1, 0x0, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)) 4m54.031576183s ago: executing program 3 (id=1663): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x44000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r1, 0x1) 4m53.400419136s ago: executing program 3 (id=1666): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x2000, @loopback}, 0x6d) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@caif=@rfm, 0x80, 0x0, 0x0, &(0x7f0000000380)=""/239, 0xef}, 0x4}], 0x1, 0x45833af92e4b39ff, 0x0) 4m46.659186392s ago: executing program 3 (id=1681): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/1, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}], 0x1, 0x40000) 4m45.072750389s ago: executing program 3 (id=1687): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000c40)={0x20, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 4m29.263292737s ago: executing program 39 (id=1687): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000c40)={0x20, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 2m36.58337549s ago: executing program 8 (id=2003): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xcdf) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0300", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f53010203010902240001"], 0x0) shutdown(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0xffff}}}}}}}, 0x0) 2m34.343885147s ago: executing program 8 (id=2012): io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0xb69d, 0x400, 0x8000002, 0x3d7}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x19}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2m32.502912608s ago: executing program 8 (id=2018): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000340)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@utf8}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@numtail}]}, 0x1, 0x36a, &(0x7f0000001840)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x208400, 0x108) 2m30.564093327s ago: executing program 8 (id=2024): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) 2m30.14802648s ago: executing program 8 (id=2025): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4180}], 0x1, 0x0, 0x0, 0x0) unshare(0x20000400) signalfd4(r0, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) 2m28.882055238s ago: executing program 8 (id=2031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000034c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f000001b000)=ANY=[@ANYRES64=r0, @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,errors=continue,iocharset=cp861,uid=', @ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT, @ANYBLOB="2c646973636e80696e756b0d995ad593a4f73b8adfa2ca018caa652c6572726ff2733da0b20baf06f56a", @ANYRES8, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="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", @ANYBLOB="a880643446b31b6a354a1ce925f41cb03cd82d0a2df0cc3407a514f07f667e7f7655f3f551b16cbc8502e52a9c5fb5482449da06953dd084329807295a2e4b63581015f806476097a0fda8b84451b9d54101a1428eec2f0e35be3c6e0b162dc4e380f442a9866f93cd6e500c820d28b8125c0a6d8697cba490cdc0d3d692ad67c8aeb55eeabe704b0028315681766a451f3e7757e8e16d"], 0x1, 0x152d, &(0x7f0000001f80)="$eJzs3AuYTtUaOPD3XWvtMSS+JrkMa6138yWXZZIklyS5JEklSXJLSJrkSEJiCEkakpBchiSGkFwmJo37/X5JSJImSXLLLVn/Z8Lf6dT5dy79j/OceX/Psx/rtfZa+93f+13W3jPzfddlSK3Gtas3JCL4t+CFf5IAIBYABgBAXgAIAKB8XPm4rP6cEpP+vYOwP9dDqVc6A3Ylcf2zN65/9sb1z964/tkb1z974/pnb1z/7I3rz1h2tnFqoWt4y74b3//Pzvjz/39IZpkxX60uc11XgJh/dAjXP3vj+v/PCv6Rnbj+2RvXP7uKvdIJsP8C/PrPDnL83R6uf/bG9WcsO7vS95+v9AaR/7LH4HDOC4X5T50/Y4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDH2H3DaX6YA4FL7SufFGGOMMcYYY4yxP4/PcaUzYIwxxhhjjDHG2P9/CAIkKAggBnJALOSEXCAA4GrIA3khAtdAHFwL+eA6yA8FoCAUgngoDEVAgwELBCEUhWIQheuhONwAJaAklILS4KAMJMCNUBZugnJwM5SHW6AC3AoVoRJUhipwG1SF26Ea3AHV4U6oATWhFtSGu6AO3A114R6oB/dCfbgP7ocHoAE8CA3hIWgED0NjeASawKPQFJpBc2gBLf+l8S9AD3gRekIvSILe0Adegr7QD/rDyzAAXoGB8CoMgtcgGQbDEHgdhsIbMAzehOEwAkbCWzAK3obRMAbGwjhIgfEwAd6BifAuTIL3YDJMgVSYCtPgfZgOM2AmfACz4EOYDXNgLsyDNPgI5sMCSIePYSF8AhmwCBbDElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDt8CjvgM9gJu2A3fA574It/cvypvxnfFQEBBQpUqDAGYzAWYzEX5sLcmBvzYB6MYATjMA7zYT7Mj/mxIBbEeIzHIlgEDRokJCyKRTGKUSyOxbEElsBSWAodOkzABCyLN2E5LIflsTxWwApYESthJayCVbAqVsVqWA2rY3WsgTWwFtbCu/Au7I11sS7Ww3pYH+tfuj2FDbEhNsJG2BgbYxNsgk2xKTbH5tgSW2IrbIWtsTW2xbbYDtthe2yPiZiIHbADdsSO2Ak7YWfsjF2wC3bFbtgt84UcgC/ii9gLa4je2Af7YF9MztEfX8aX8RUciK/iq/gaJuNgHIKv4+v4Bg7DkzgcR+BIHIlVxds4GscgiXGYgik4ASfgRJyIWYm+h1MwFafiNJyG03EGzsAPcBZ+iB/iHJyD8zAN03A+LsB0TMeFeAozcBEuxiW4FJfhUlyBK3EFrsY1uBrX4TrcgBtwE27CLbgFt+E2/BQVAH6Gu3AXJuMe3IN7cS/uw324H/djJmbiATyAB/EgHsJDeBgP4xE8isfwKJ7AE3gST+FpPI1n8Syew+fiv2n0aclVySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBP5RD6RX+QXBUVBES/iRRFRRBhhBIkwBgBEVERFcVFclBAlRClRSjjhRIJIEGVFWVFOlBPlxS2igrhVVBSVRBtXRVQRVUVbV03cIaqL6qKGqClqidqitqgj6oi6oq6oJ+qJ+qK+uF88IBqI3tgfHxJZlWksBmMTMQSbimZCXnwHayWGYWvRRrQVT4gROBzbi1YuUTwtOojR2FH8RYzBZ0VnMQ67iOdFV9FNdBcviB6itespeolJ2Fv0EVOwr+gn+ouXxXSsKT7AWTlriddEshgshojXxTx8QwwTb4rhYoQYKd4So8TbYrQYI8aKcSJFjBcTxDtionhXTBLvicliikgVU8U08b6YLmaImeIDMUt8KGaLOWKumCfSxEdivlgg0sXHYqH4RGSIRWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is4iFrWKb2C4+FTvEZ2Kn2CV2i8/FHvGF2Cu+FPvEV2K/+Fpkim/EAfGtOCi+E4fE9+Kw+EEcEUfFMXFcnBA/ipPilDgtzoiz4idxTvwszgsvQKIUUkolAxkjc8hYmVPmklfJ3DK4+OheI+PktTKfvE7mlwVkQVlIxsvCsojU0kgrSYayqCwmo/J6WVzeIEvIkrKULC2dLCMT5I2yrLxJlpM3y/LyFllB3iorykqysqwib5NV5e0SIheOUUPWlLVkbXmXTIK7ZV15j6wn75X15X3yfvmAbCAflA3lQ7KRfFg2lo/IJvJR2VQ2k81lC9lSPiZbycdla9lGtpVPyHbySdlePiUT5dOyg/QXnyLPys7yOdlFPi+7ym6yu/xZnpde9pS9JPQG2Ue+JPvKfrJ/LADIV+RA+aocJF+TyXKwHCJfl0PlG3KYfFMOlyPkSPmWHCXflqPlGDlWjpMpcrycIN+RE+W7cpJ8T06WU2SqnCr7ywG/zDRTyj8c/87vjB/0y9E3yI1yk9wst8itcpvcLj+VO+QOuVPulLvlbrlH7pF75V65T+6T++V+mSkz5QF5QB6UB+UheUgeloflEXlUnpHH5Qn5ozwpT8lT8ow8K8/KcxcfA1CohJJKqUDFqBwqVuVUudRVKre6WuVReVVEXaPi1LUqn7pO5VcFVEFVSMWrwqqI0sooq0iFqqgqpqLqerz4hFGlVGnlVBmVoG78Z8ar4uoGVUKV/NX4S/kl/Z38WqqWqpVqpVqr1qqtaqvaqXaqvWqvElWi6qA6qI6qo+qkOqnOqrPqorqorqqr6q66qx6qh+qpeqoklaT6qJdUX9VP9VcvqwHqFTVQDVSD1CCVrJLVEDVEDVVD1TA1TA1Xw9VINVKNUqPUaDVajVVjVYpKURPUBDVRTVST1CQ1WU1WqSpVTVPT1HQ1Xc1UM9UsNUvNVrPVXDVXpak0NV/NV+kqXS1UC1WGWqQWqSVqiVqmlqkVaoVapVapNWqNWqfWqQy1UW1Um9VmtVVtVdvVdrVD7VA7xU61W+1We9QetVftVfvUPrVf7VeZKlMdUAfUQXVQHVKH1GF1WB1RR9QxdUydUCfUSXVSnVan1Vl1Vp1T59R5dT5r2ReIQAQqUEFMEBPEBrFBriBXkDvIHeQJ8gSRIBLEBXFBvuC6IH9QICgYFArig8JBkUAHJrCBuFj0aHB9UDy4ISgRlAxKBaUDF5QJEoIbg7LBTUG54OagfHBLUCG4NagYVAoqB1WC24Kqwe1BteCOoHpwZ1AjqBnUCmoHdwV1gruDusE9Qb3g3qB+cF9wf/BA0CB4MGgYPBQ0Ch4OGgePBE2CR4OmQbOgedAiaPmnzu/9yQKPu566l07SvXUf/ZLuq/vp/vplPUC/ogfqV/Ug/ZpO1oP1EP26Hqrf0MP0m3q4HqFH6rf0KP22Hq3H6LF6nE7R4/UE/Y6eqN/Vk/R7erKeolP1VD1Nv6+n6xl6pv5Az9If6tl6jp6r5+k0/ZGerxfodP2xXqg/0Rl6kV6sl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q4/1Tv0Z3qn3qV368/1Hv2F3qu/1Pv0V3q//lpn6m/0Af2tPqi/04f09/qw/kEf0Uf1MX1cn9A/6pP6lD6tz+iz+id9Tv+sz2uftbjP+ng3yigTY2JMrIk1uUwuk9vkNnlMHhMxERNn4kw+k8/kN/lNQVPQxJt4U8QUMVnIkClqipqoiZriprgpYUqYUqaUccaZBJNgypqyppwpZ8qb8qaCqWAqmoqmsqlsbjO3mdvN7eYOc4e509xpapqaprapbeqYOqauqWvqmXqmvqlv7jf3mwamgWloGppGppFpbBqbJqaJaWqamuamuWlpWppWppVpbVqbtqataWfamfamvUk0iaaD6WA6mo6mk+lkOpvOpovpYrqarqa76W56mB6mp+lpkkyS6WP6mL6mr+lv+psBZoAZaAaaQWaQSTbJZogZYoaaoWaYGWaGmxFmZNZC1bxtRpsxZqwZZ1JMiplgJpiJZqKZZCaZyWaySTWpZpqZZqab6WammWlmmVlmtplt5pq5Js2kmflmvkk36WahWWgyTIZZbBabpWapWW6Wm5VmpVltVpu1sNasN+vNRrPRbDabzVaz1Ww3280Os8PsNDvNbrPb7DF7zF6z1+wz+8x+s99kmkxzwBwwB81Bc8gcMofNYXPEHDHHzDFzwpwwJ81Jc9qcNmdNgYufl97E2pw2l73K5rZX2zw2r/3buKAtZONtYVvEapvfFvhVbKy1JWxJW8qWts6WsQn2xt/EFW0lW9lWsbfZqvZ2W+03cR17t61r77H17L22tr3rV3F9e5/NWp00QASwzWwj28I2to/YJvZR29Q2s81tC9vOPmnb26dson3adrDP/CaebxfYlXaVXW3X2J12lz1tz9iD9jt71v5ke9pedoB9xQ60r9pB9jWbbAf/Jh5p37Kj7Nt2tB1jx9pxv4kn2yk21U610+z7drqd8Zs4zX5kZ9l0O9vOsXPtvF/irJzS7cd2of3EZtgAFtsldqldZpfbFZdy9XntOrvebrA77Gd2s91it9ptdvulhbDdZXfbz+0e+4U9YL+1++xXdr89ZDPtN7/EWed3yH5vD9sf7BF71B6zx+0J+6O6NDrr3I/bn+156y0QEpAkRQHFUA6KpZyUi66i3HQ15aG8FKFrKI6upXx0HeWnAlSQClE8FaYipMmQJaKQilIxitL1dCm9UlSaHJWhBLqRytJNVI5upvJ0C1WgW6kiVaLKVIVuo6p0O1WjO6g63Uk1qCbVotp0F9Whu6ku3UP16F6qT/fR/fQANaAHqSE9RI3oYWpMj1ATepSaUjNqTi2oJT1Grehxak1tqC09Qe3oSWpPT1EiPU0d6BnqSH+hTvQsdabnqAs9T12pG3WnF6gHvUg9qRclUW/qQy9RX+pH/ellGkCv0EB6lQbRa5RMg2kIvU5D6Q0aRm/ScBpBI+ktGkVv02gaQ2NpHKXQeJpA79BEepcm0Xs0maZQKk2lafQ+TacZNJM+oFn0Ic2mOTSX5lEafUTzaQGl08e0kD6hDFpEi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6lHfQZ7aRdtJs+pz30BSF9SfvoK9pPX1MmfUMH6Fs6SN/RIfre96If6AgdpWN0nE7Qj3SSTtFpOkNn6Sc6Rz/TefIEIYYilKEKgzAmzBHGhjnDXOFVYe7w6jBPmDeMhNeEceG1Yb7wujB/WCAsGBYK48PCYZFQhya0IYVhWDQsFkbD68Pi4Q1hibBkWCosHbqwTJgQ3hiWDW8Ky4U3h+XDW8IK4a1hxbBS+Mi9VcLbwqrh7WG18I6wenhnWCOsGdYKa4d3hXXCu8O64T1hvfDesFx4X3h/+EDYIHwwbBg+FDYKHw4bh4+ETcJHw6Zhs7B52CJsGT4WtgofD1uHbcK24RNhu/DJsH34VJgYPh12CJ/5pf++BX+/PynsHfYJXwpfCr2/R86NzoumRT+Kzo8uiKZHP44ujH4SzYguii6OLokujS6LLo+uiK6Mroqujq6Jro2ui66Pboh6XzsHOHTCSadc4GJcDhfrcrpc7iqX213t8ri8LuKucXHuWpfPXefyuwKuoCvk4l1hV8RpZ5x15EJX1BVzUXe9K+5ucCVcSVfKlXbOlXEJroVr6Vq6Vu5x19q1cW3dE+4J96R70j3lnnJPuw7uGdfR/cV1cs+6zu4595x73nV13Vx394Lr4cbnufCaTHJ9XB/X1/V1/V1/N8ANcAPdQDfIDXLJLtkNcUPcUDfUDXPD3HA33I10I90oN8qNdqPdWDfWpbgUN8FNcBPdRDfJTXKT3WSX6lLdNDfNTXfTXdUZF44y2812c91cl+bS3HyXtWZMdwvdQpfhMtxit9gtdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9xOn/fCpG6P2+v2un1un9vvvnaZ7ht3wH3rDrrv3CH3vTvsfnBH3FF3zB13J9yP7qQ75U67M+6s+8mdcz+78867lMj4yITIO5GJkXcjkyLvRSZHpkRSI1Mj0yLvR6ZHZkRmRj6IzIp8GJkdmROZG5kXSYt8FJkfWRBJj3wcWRj5JJIRWRRZHFkSWRpZFvG+8ObQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+qa+mW/uW/iW/jHfyj/uW/s2vq1/wrfzT/r2/imf6J/2HfwzvqP/i+/kn/Wd/XO+i3/ed/XdfHf/gu/hX/Q9fS+f5Hv7Pv4l39f38/39y36Af8UP9K/6Qf41n+wH+yH+dT/Uv+GH+Tf9cD/Cj4x5y4+6dIkM43yKH+8n+Hf8RP+un+Tf85P9FJ/qp/pp/n0/3c/wM/0Hfpb/0M/2c/xcP8+n+Y/8fL/Ap/uP/UL/ic/wiy7dVPbL/Qq/0q/yq/0av9av8+v9Br/Rb/Kb/Ra/1W/z2/2nfof/zO/0u/xu/7nf47/we/2Xfp//yu/3X/tM/40/4L/1B/13/pD/3h/2P/gj/qg/5o/7E/5Hf9Kf8qf9GX/W/+TP+Z/9ef6bNcYYY4yxf8j4y03x654Lt/N7/84Y8Vc79wGAq7cUyvzr/qwV5dr8F9r9RHy7CAA83avLQ5e2GjWSkpIu7pshISg2B+DST4KyxMDleBG0hSchEdpA2d/Nv5/odpb+YP7oLQC5/mpMLFyOL8//JQAm/c78jz0xcn6F8HTc/2P+OQAlil0ekxMux4ug7S/3V9pAub+Tf4FWf5B/zq9SAFr/1ZjccDm+nH8CPA7PQOKv9mSMMcYYY4wxxi7oJyp3unT9eek3Pn/v+jxeXR6TAy7Hf3R9zhhjjDHGGGOMsSvv2W7dn3osMbFNp3++Ue2P91H/2sy/NJrAv5oYN/6lhvcA/7dwAPBvTgiQ1ZD/ybPY9B85VvLFl87fdi094wP47yjln9G4wm9MjDHGGGOMsT/d5UX/r/9fXamEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxbOjf/Y43+Ae+pe9KnyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2pf2fAAAA//+Bqfni") sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x0, 0x4000}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) 2m13.523740149s ago: executing program 40 (id=2031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000034c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f000001b000)=ANY=[@ANYRES64=r0, @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,errors=continue,iocharset=cp861,uid=', @ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT, @ANYBLOB="2c646973636e80696e756b0d995ad593a4f73b8adfa2ca018caa652c6572726ff2733da0b20baf06f56a", @ANYRES8, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="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", @ANYBLOB="a880643446b31b6a354a1ce925f41cb03cd82d0a2df0cc3407a514f07f667e7f7655f3f551b16cbc8502e52a9c5fb5482449da06953dd084329807295a2e4b63581015f806476097a0fda8b84451b9d54101a1428eec2f0e35be3c6e0b162dc4e380f442a9866f93cd6e500c820d28b8125c0a6d8697cba490cdc0d3d692ad67c8aeb55eeabe704b0028315681766a451f3e7757e8e16d"], 0x1, 0x152d, &(0x7f0000001f80)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x0, 0x4000}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) 39.894880301s ago: executing program 6 (id=2273): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141b42, 0xb) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 38.668254462s ago: executing program 6 (id=2277): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = inotify_init() r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r4, 0x0, 0xc6) write$binfmt_elf32(r5, 0x0, 0x69) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0xc, 0x258bd5, 0x2e7883}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0xc, 0xc2f, 0x19a8fe}) 36.13965528s ago: executing program 6 (id=2282): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYBLOB="00000000252d0100140012800b00010062726964676500000400028008000300", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) 32.254931229s ago: executing program 6 (id=2287): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141b42, 0xb) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 29.61727503s ago: executing program 6 (id=2294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) write$P9_RGETLOCK(r4, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x12, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r5}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 26.442062661s ago: executing program 6 (id=2296): fsopen(0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) mknod$loop(0x0, 0x8, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8]) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0142, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xffffffffffffffd2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) r2 = dup(0xffffffffffffffff) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) 11.816868464s ago: executing program 4 (id=2330): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @sliced={0x3ff, [0x7, 0xa, 0x1, 0xa90, 0x0, 0x9, 0x6, 0x7, 0x3, 0x81, 0x4, 0x0, 0x0, 0x82, 0x101, 0xe, 0x9, 0xc3c3, 0x7, 0x0, 0x5, 0xb, 0x42b7, 0x0, 0x4, 0x2, 0xa, 0x0, 0x4, 0x200, 0x0, 0x7, 0x80, 0x3, 0xf, 0x1000, 0x5, 0xb6e, 0x7, 0xfa, 0xf, 0x4, 0xf801, 0x40, 0x8, 0x4, 0x2, 0x5], 0x7ff}}) 11.73945351s ago: executing program 1 (id=2331): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=cp737,umask=0\x00\x00\x00\x00\x00\x00\x00@0800d=', @ANYRESHEX=0x0, @ANYBLOB=',integrity,errors=continue,discard,noquota\x00iocharset=cp850,grpquota,usrquota,uid=', @ANYRESHEX=0x0, @ANYBLOB=',quota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,usrquota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,subj_type=+-]{.&Q.,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',measure,\x00'], 0x5, 0x615b, &(0x7f0000008b40)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10.97788453s ago: executing program 41 (id=2296): fsopen(0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) mknod$loop(0x0, 0x8, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8]) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0142, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xffffffffffffffd2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) r2 = dup(0xffffffffffffffff) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) 9.915485701s ago: executing program 4 (id=2333): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f0000000000)) 9.90556222s ago: executing program 2 (id=2334): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001800)=0x4101, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 8.680453413s ago: executing program 5 (id=2336): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x4000ffff, 0xdff, 'syz1\x00', 0x2}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)) 8.244040193s ago: executing program 2 (id=2337): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d4000000190019a9000000000000000002200000ff02ff000000000008000100ac14141218009400111a8200040090f7c10f4b31901b77481e35fd008a"], 0x1}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@gettaction={0x84, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x84}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140), 0x4240a2ca) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 8.104560968s ago: executing program 4 (id=2338): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/1, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmmsg$sock(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}], 0x1, 0x40000) 7.882695337s ago: executing program 5 (id=2339): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000"]) 7.096058424s ago: executing program 1 (id=2340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0x10, 0xffff}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 6.79869387s ago: executing program 2 (id=2341): syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x10000001c) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7d) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000003c0)=0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) openat(r6, &(0x7f0000000140)='./file0\x00', 0x80, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x260}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.507850068s ago: executing program 5 (id=2342): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) 5.984503539s ago: executing program 4 (id=2343): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffd, 0x10100, 0x0, 0x351}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x468b, 0xfb96, 0x0, 0x0, 0x0) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) close(r0) 5.455529262s ago: executing program 1 (id=2344): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x400) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$dsp(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r1, 0x10, 0x2, 0x8000) 5.334641093s ago: executing program 2 (id=2345): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000252d0100140012800b00010062726964676500000400028008000300", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) 3.801379225s ago: executing program 5 (id=2346): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100050c100000000000224e0000", 0x58}], 0x1) 3.41400615s ago: executing program 2 (id=2347): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f0000000000)) 2.035412792s ago: executing program 1 (id=2348): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x4000ffff, 0xdff, 'syz1\x00', 0x2}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)) 1.734427109s ago: executing program 4 (id=2349): socket$can_bcm(0x1d, 0x2, 0x2) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) 1.456242274s ago: executing program 5 (id=2350): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 1.434350493s ago: executing program 1 (id=2351): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000"]) 873.408944ms ago: executing program 5 (id=2352): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/1, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmmsg$sock(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}], 0x1, 0x40000) 481.014326ms ago: executing program 2 (id=2353): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$eJzs3c9qE1EUx/HfnaRttKVO/4ggrqoFV9LWjbgpSN/AjStRmwjFUEErqKvqWnwA976CD+DSlbgW3LnyAbKL3DM3ZpJmMnFoOkn6/UBC0rln5tzMnd57ppQIwLl1b+/X59u//cNJFVUk3ZUiSTWpKumyrtReHR4dHDUb9WE7qliEfzglke5Em/3DxqBQH2cRQezfVbWU/hnGo/ZTx2XngPLZ1T9AJC2Eq9O21848s/E474PetdTSay2XnQcAoFxh/o/CPL8U1u9RJG2Gab93/p/yCbRVdgJj9jVne2r+tyqr7fz5vWSbuvWelXB+e9SpEovkMq9kZPUsMF1eVWm5RBeeHjQbt/afN+uR3ms3mOs2W7fnejJ0O9LZvju5640BtekQxfu+aH2Y833YSeefarJ2ukfM57657+6hi/VJ9X/rv2rb+dNkZyruO1NJ/lvZe7RezstaZfRyxQ5yNRwhGNrLijIqEnVG1Ip6bxDEeXla1GpfVNK77ZyotYFROzlR6/1R3dGcHTlu7qN74Db0R1+0l1r/R/7T3tQoV6ZvYy3DyBjan6q1jG0+CVfd8bWBLaOiPUIBH/REd7T88s3bZ4+bzcaLmX3hr8QJSGOiXnQGwaTkM7Mv/IdcytE7807x/ZT2mwlnqHvS/zOQv83MCr/uckn9l6pXtmyx5p/i3nX6Qjq2nbfz1B63M2qDVXu+mF3B9XB262Exu4Ibtea6flO6McoRE3HIc/LsFglye/qhR9z/BwAAAAAAAAAAAAAAAAAAmDan9y8HNWVtKruPAAAAAAAAAAAAAAAAAAAAAABMu4n7/t/7St7x/b/A2P0NAAD//1Bodro=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 335.230167ms ago: executing program 1 (id=2354): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8927, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000100)={[{@nodiscard}, {@test_dummy_encryption}, {@inlinecrypt}, {@delalloc}, {@data_err_abort}, {@errors_remount}, {@grpid}, {@quota}]}, 0xa, 0xbc2, &(0x7f0000002a40)="$eJzs3M9rXNUeAPDvvZlM0zbvTfp4PF7f5kVEWhCnSSXFFsFWKm5cCLoVGtJJCZn+IInUpAEn+g+IuhbcCGpRXNh1N4pu3Wi7VVwIRWKjIKKROz+S2GTS1M70punnA2fuOffM3PP9zmXmngNzJ4AH1mD2kEbsj4hTSUSpuT+NiGK91hdRazxvaXF+7JfF+bEklpdf+DGJJCJuLs6PtY6VNLd7m42+iPjq6ST+9fr6cadn5yZHq9XKVLN9aObshUPTs3OPTZwdPVM5Uzk3fOSJkcMjR4aOjnQs11+/PX7l54ee/b722we/X/7prfeSOB79zb61eXTKYAyuvCcNr9YfCxEx2unBctLTzGdtnknhNi9KuxwUAABtpWvmcP+JUvTE6uStFJ99nWtwAAAAQEcs90QsAwAAADtcYv0PAAAAO1zrdwA3F+fHWiXfXyTcWzdORMRAI/+lZmn0FKJW3/ZFb0TsuZnE2ttak8bL7tpgRHx3/ejHWYku3Ye8mdpCRPx3o/Of1PMfqN/FvT7/NCKGOjD+4C3t+yn/4x0YP+/8AXgwXT3RuJCtv/6lK/Of2OD6V9jg2vV35H39a83/ltbN/1bz72kz/3t+i2Ncev+di+36svyfvPLMR62SjZ9t7yqpO3BjIeJ/hY3yT1byT9rkf2qLY5T+uFhp15d3/svvRhyIjfNvSTb/f6JD4xPVylDjccMxFr4c+bDd+Hnnn53/PW3yb/3/U7vzf2GLY7x08uQn63ZeX61unn/6QzF5sV4rNve8MjozMzUcUUyeW7//8OaxtJ7TOkaW/8GHN//8b5R/9p1Qa74P2VpgobnN2q/dMuZTly992i6e1vovz/N/us35X5v/F4X15/+NLY7xyOdvHmzXt3b9m5Vs/NZaGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa0ojojyQtr9TTtFyO2BsR/449afX89Myj4+dfPnc664sYiN50fKJaGYqIUqOdZO3hen21ffiW9uMRsS8i3i7trrfLY+erp/NOHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBV7I6I/krQcEWlELJXStFzOOyoAAACg4wbyDgAAAADoOut/AAAA2Pms/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiyff+/ei2JiNqx3fWSKTb7enONDOi2NO8AgNz05B0AkJtC3gEAubnDNb7pAuxAyW36+9r27Op4LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsXwf2X72WRETt2O56yRSbfb25RgZ0W5p3AEBuejbrLNy7OIB7z0ccHlzW+EBym/6+1efU/tqzq2sxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALD99NdLkpYjotjcVy5H/CMiBqI3GZ+oVoYi4p8R8U2pd1fWHs45ZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpvenZucrRarUxllTSalZU993Olr5lipw6YNA5XyzsvlQ5VirEtwtimlTy/lQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyMv07NzkaLVamZrOOxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgb9Ozc5Oj1WplqouVvHMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/fwYAAP//aKcHlA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_io_uring_setup(0x6143, &(0x7f0000000300)={0x0, 0x9de6, 0x40, 0x0, 0x2c1}, &(0x7f0000000000), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000b37000/0x2000)=nil, 0x2000, 0x2000002, 0x188050, r1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = accept4$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14, 0x80000) getsockopt$packet_int(r5, 0x107, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca7193"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) fallocate(r6, 0x20, 0x63, 0x4000000005) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4048001) close(r7) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) accept4$bt_l2cap(r8, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001}, 0x1c, 0x0}}], 0x1, 0x20000801) kernel console output (not intermixed with test programs): 4.338024][ T4969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.470522][T10042] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.480938][T10042] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.488889][T10042] bridge_slave_0: entered allmulticast mode [ 894.498538][T10042] bridge_slave_0: entered promiscuous mode [ 894.727493][ T4969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.814370][T10042] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.821938][T10042] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.829947][T10042] bridge_slave_1: entered allmulticast mode [ 894.841911][T10042] bridge_slave_1: entered promiscuous mode [ 894.873515][ T5800] Bluetooth: hci0: command tx timeout [ 895.161931][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 895.168852][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 895.408039][T10042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.500220][T10042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.544579][ T4969] bridge_slave_1: left allmulticast mode [ 895.551088][ T4969] bridge_slave_1: left promiscuous mode [ 895.557842][ T4969] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.739593][ T4969] bridge_slave_0: left allmulticast mode [ 895.747089][ T4969] bridge_slave_0: left promiscuous mode [ 895.755021][ T4969] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.795100][ T4969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.837001][ T4969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.879545][ T4969] bond0 (unregistering): Released all slaves [ 896.960110][ T5800] Bluetooth: hci0: command tx timeout [ 897.061499][T10042] team0: Port device team_slave_0 added [ 897.106561][ T4969] hsr_slave_0: left promiscuous mode [ 897.125390][ T4969] hsr_slave_1: left promiscuous mode [ 897.134042][ T4969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 897.141893][ T4969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.184033][ T4969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 897.192190][ T4969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.314046][ T4969] veth1_macvtap: left promiscuous mode [ 897.319947][ T4969] veth0_macvtap: left promiscuous mode [ 897.326236][ T4969] veth1_vlan: left promiscuous mode [ 897.331814][ T4969] veth0_vlan: left promiscuous mode [ 898.355377][T10133] fuse: Bad value for 'fd' [ 898.399289][ T4969] team0 (unregistering): Port device team_slave_1 removed [ 898.476263][ T4969] team0 (unregistering): Port device team_slave_0 removed [ 899.000006][T10042] team0: Port device team_slave_1 added [ 899.033562][ T5800] Bluetooth: hci0: command tx timeout [ 899.405021][T10042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.412207][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.441560][T10042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.602823][T10042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.611181][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.640596][T10042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.295633][T10042] hsr_slave_0: entered promiscuous mode [ 900.305465][T10042] hsr_slave_1: entered promiscuous mode [ 901.019482][ T4022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.027773][ T4022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.389867][ T4022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.398509][ T4022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.291656][T10186] fuse: Unknown parameter '0x0000000000000003' [ 902.527654][T10189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 903.128683][T10042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 903.228744][T10042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 903.332749][T10042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 903.565242][T10042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 903.600394][T10201] kvm: pic: non byte read [ 903.638869][T10201] kvm: pic: level sensitive irq not supported [ 903.639158][T10201] kvm: pic: non byte read [ 903.711165][T10201] kvm: pic: level sensitive irq not supported [ 903.714650][T10201] kvm: pic: non byte read [ 903.865924][T10201] kvm: pic: level sensitive irq not supported [ 903.866215][T10201] kvm: pic: non byte read [ 903.887924][T10201] kvm: pic: level sensitive irq not supported [ 903.888210][T10201] kvm: pic: non byte read [ 903.907043][T10201] kvm: pic: level sensitive irq not supported [ 903.907515][T10201] kvm: pic: non byte read [ 904.008703][T10201] kvm: pic: level sensitive irq not supported [ 904.009066][T10201] kvm: pic: non byte read [ 904.054693][T10201] kvm: pic: level sensitive irq not supported [ 904.055076][T10201] kvm: pic: non byte read [ 905.222801][T10042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.294476][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 905.433712][T10220] netlink: 56 bytes leftover after parsing attributes in process `syz.2.983'. [ 905.469780][T10042] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.531415][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.542416][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 905.553549][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 905.566757][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.649828][ T4969] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.657463][ T4969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.814366][ T4969] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.822026][ T4969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.889495][ T9] usb 4-1: config 0 descriptor?? [ 905.933013][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 905.940210][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 906.032266][T10224] fuse: Unknown parameter '0x0000000000000003' [ 906.040078][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 906.065716][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 906.073722][ T9] usb 4-1: media controller created [ 906.104833][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.136283][T10213] dibusb: i2c wr: len=61 is too big! [ 906.136283][T10213] [ 906.230953][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 906.237702][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 906.306288][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 906.404074][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 906.411406][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 906.542939][ T9] usb 4-1: USB disconnect, device number 4 [ 906.774148][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 906.839131][T10231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 908.221573][T10042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.294317][T10252] netlink: 'syz.8.993': attribute type 4 has an invalid length. [ 910.979456][T10271] fuse: Unknown parameter 'fd0x0000000000000003' [ 911.367832][T10042] veth0_vlan: entered promiscuous mode [ 911.479754][T10042] veth1_vlan: entered promiscuous mode [ 911.897470][T10042] veth0_macvtap: entered promiscuous mode [ 911.995643][T10042] veth1_macvtap: entered promiscuous mode [ 912.247447][T10042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.260549][T10042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.271456][T10042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.282423][T10042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.292643][T10042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.303483][T10042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.313741][T10042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.325537][T10042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.340902][T10042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.912510][T10042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.923565][T10042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.934675][T10042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.946414][T10042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.957413][T10042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.969586][T10042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.980147][T10042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.990812][T10042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.004376][T10042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.376969][T10042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.390014][T10042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.399486][T10042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.408590][T10042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.636655][T10277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 917.113770][ T30] audit: type=1326 audit(2000000604.790:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.8.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ad98e969 code=0x7ffc0000 [ 917.138955][ T30] audit: type=1326 audit(2000000604.790:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.8.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ad98e969 code=0x7ffc0000 [ 917.162515][ T30] audit: type=1326 audit(2000000604.800:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.8.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8ad98e969 code=0x7ffc0000 [ 917.185520][ T30] audit: type=1326 audit(2000000604.800:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.8.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ad98e969 code=0x7ffc0000 [ 917.208289][ T30] audit: type=1326 audit(2000000604.800:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.8.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa8ad98e969 code=0x7ffc0000 [ 917.614174][ T30] audit: type=1326 audit(2000000605.210:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.8.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ad98e969 code=0x7ffc0000 [ 917.637074][ T30] audit: type=1326 audit(2000000605.210:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.8.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ad98e969 code=0x7ffc0000 [ 917.695150][ T30] audit: type=1326 audit(2000000605.430:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.8.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8ad98e969 code=0x7ffc0000 [ 917.824235][ T30] audit: type=1326 audit(2000000605.450:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.8.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ad98e969 code=0x7ffc0000 [ 917.847902][ T30] audit: type=1326 audit(2000000605.450:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.8.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8ad98d2d0 code=0x7ffc0000 [ 918.496673][T10321] netlink: 'syz.3.1003': attribute type 4 has an invalid length. [ 919.146923][T10328] fuse: Unknown parameter 'fd0x0000000000000003' [ 919.629051][T10336] loop2: detected capacity change from 0 to 16 [ 919.667070][T10336] erofs (device loop2): mounted with root inode @ nid 36. [ 920.174984][T10342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 920.257947][T10335] kvm: kvm [10334]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0xf364 [ 920.845147][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.854819][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.268729][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.277528][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.584106][T10359] tipc: Started in network mode [ 921.589208][T10359] tipc: Node identity b, cluster identity 4711 [ 921.596532][T10359] tipc: Node number set to 11 [ 921.602024][T10359] tipc: Cannot configure node identity twice [ 922.096546][T10363] netlink: 'syz.6.1013': attribute type 10 has an invalid length. [ 922.517954][T10368] netlink: 'syz.2.1014': attribute type 4 has an invalid length. [ 923.188940][T10377] fuse: Unknown parameter 'fd0x0000000000000003' [ 923.596533][T10382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 923.628568][T10384] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1016'. [ 923.939588][T10387] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1020'. [ 923.963603][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 923.963677][ T30] audit: type=1326 audit(2000000611.650:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.6.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 924.195416][ T30] audit: type=1326 audit(2000000611.900:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.6.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 924.220383][ T30] audit: type=1326 audit(2000000611.900:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.6.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 924.243956][ T30] audit: type=1326 audit(2000000611.900:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.6.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 927.252690][T10423] netlink: 'syz.3.1029': attribute type 4 has an invalid length. [ 927.775944][T10429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.095010][T10433] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1033'. [ 928.371390][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 931.129483][T10472] netlink: 'syz.4.1043': attribute type 4 has an invalid length. [ 932.560460][T10481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 933.202146][T10485] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1046'. [ 934.597764][T10505] No control pipe specified [ 935.005579][T10511] netlink: 'syz.4.1055': attribute type 4 has an invalid length. [ 935.489497][T10518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 936.963614][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 937.408656][ T9] usb 7-1: config 0 has no interfaces? [ 937.570087][ T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 937.580036][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.588697][ T9] usb 7-1: Product: syz [ 937.593052][ T9] usb 7-1: Manufacturer: syz [ 937.598064][ T9] usb 7-1: SerialNumber: syz [ 937.796637][ T9] usb 7-1: config 0 descriptor?? [ 938.071463][T10534] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1062'. [ 938.954815][T10552] No control pipe specified [ 939.207541][T10555] fuse: Bad value for 'fd' [ 939.655295][T10558] netlink: 'syz.8.1069': attribute type 4 has an invalid length. [ 940.755125][T10572] fuse: Bad value for 'rootmode' [ 940.831523][T10572] fuse: Bad value for 'fd' [ 941.223703][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 941.454098][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 941.464074][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.556438][ T9] usb 5-1: config 0 descriptor?? [ 941.573672][ T9] cp210x 5-1:0.0: cp210x converter detected [ 942.695221][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 942.784769][ T9] usb 5-1: USB disconnect, device number 7 [ 942.865762][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 942.876176][ T9] cp210x 5-1:0.0: device disconnected [ 943.472291][T10598] No control pipe specified [ 943.549339][T10601] netlink: 'syz.3.1082': attribute type 4 has an invalid length. [ 946.487744][ T7659] usb 7-1: USB disconnect, device number 6 [ 947.756477][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 948.121012][ T9] usb 3-1: config 0 has no interfaces? [ 948.285246][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 948.294944][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.303386][ T9] usb 3-1: Product: syz [ 948.307672][ T9] usb 3-1: Manufacturer: syz [ 948.312374][ T9] usb 3-1: SerialNumber: syz [ 948.360490][ T9] usb 3-1: config 0 descriptor?? [ 948.629481][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1094'. [ 951.393841][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 951.672280][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 951.714378][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.724973][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 951.734540][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.893461][ T7659] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 951.905017][ T9] usb 5-1: config 0 descriptor?? [ 951.935622][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 952.101997][ T7659] usb 4-1: device descriptor read/64, error -71 [ 952.403819][ T7659] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 952.594634][ T7659] usb 4-1: device descriptor read/64, error -71 [ 952.644880][ T9] gspca_vc032x: reg_w err -110 [ 952.650115][ T9] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 952.702514][ T9] usb 5-1: USB disconnect, device number 8 [ 952.741611][ T7659] usb usb4-port1: attempt power cycle [ 953.163470][ T7659] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 953.243538][ T7659] usb 4-1: device descriptor read/8, error -71 [ 953.516849][ T7659] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 953.689068][ T7659] usb 4-1: device descriptor read/8, error -71 [ 953.745165][ T1997] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 953.813294][ T7659] usb usb4-port1: unable to enumerate USB device [ 953.995097][ T1997] usb 7-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.009248][ T1997] usb 7-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.020369][ T1997] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 954.029705][ T1997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.005712][ T1997] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -71 [ 955.113987][ T1997] usb 7-1: USB disconnect, device number 7 [ 956.317035][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1115'. [ 956.326479][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1115'. [ 956.584187][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 956.584429][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 957.346628][ T1997] usb 3-1: USB disconnect, device number 11 [ 958.399518][T10744] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1125'. [ 959.713527][ T1997] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 959.784074][ T7659] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 959.956600][ T1997] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 959.968065][ T1997] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 959.980122][ T1997] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 959.990199][ T1997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.044092][ T7659] usb 4-1: Using ep0 maxpacket: 32 [ 960.149456][ T7659] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 960.158298][ T7659] usb 4-1: config 0 has no interface number 0 [ 960.165606][ T7659] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 960.178429][ T7659] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 960.191160][ T7659] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 960.202955][ T7659] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 960.213866][ T7659] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 960.226087][ T7659] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.236557][ T7659] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 960.249054][ T7659] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29797, setting to 1024 [ 960.261590][ T7659] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 960.272139][ T7659] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 960.352328][T10766] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 960.413040][ T1997] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 960.537834][ T30] audit: type=1326 audit(2000000648.230:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.6.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73f6b2ab39 code=0x7ffc0000 [ 960.561890][ T30] audit: type=1326 audit(2000000648.260:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.6.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73f6b2ab39 code=0x7ffc0000 [ 960.586671][ T30] audit: type=1326 audit(2000000648.260:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.6.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73f6b2ab39 code=0x7ffc0000 [ 960.609984][ T30] audit: type=1326 audit(2000000648.260:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.6.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73f6b2ab39 code=0x7ffc0000 [ 960.633725][ T30] audit: type=1326 audit(2000000648.260:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.6.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73f6b2ab39 code=0x7ffc0000 [ 960.658496][ T30] audit: type=1326 audit(2000000648.260:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.6.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73f6b2ab39 code=0x7ffc0000 [ 960.682120][ T30] audit: type=1326 audit(2000000648.260:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.6.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73f6b2ab39 code=0x7ffc0000 [ 960.705792][ T30] audit: type=1326 audit(2000000648.260:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.6.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73f6b2ab39 code=0x7ffc0000 [ 960.729411][ T30] audit: type=1326 audit(2000000648.260:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.6.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73f6b2ab39 code=0x7ffc0000 [ 960.752207][ T30] audit: type=1326 audit(2000000648.260:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.6.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73f6b2ab39 code=0x7ffc0000 [ 960.936786][ T9] usb 9-1: USB disconnect, device number 3 [ 960.945663][ T7659] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 960.955201][ T7659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.965737][ T7659] usb 4-1: Product: syz [ 960.970160][ T7659] usb 4-1: Manufacturer: syz [ 960.975999][ T7659] usb 4-1: SerialNumber: syz [ 961.076527][ T7659] usb 4-1: config 0 descriptor?? [ 961.084329][T10762] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 961.101572][T10762] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 961.305322][ T7659] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 961.314621][ T7659] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 961.421875][ T7659] scsi host1: microtekX6 [ 961.672501][ T8942] usb 4-1: USB disconnect, device number 9 [ 961.673565][ T25] microtek usb (rev 0.4.3): error -19 submitting URB [ 961.693357][ T9227] udevd[9227]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 962.672824][T10795] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1141'. [ 963.490517][T10817] netlink: 'syz.6.1146': attribute type 10 has an invalid length. [ 964.006910][T10805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.116980][ T8942] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 964.309349][ T8942] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 964.321116][ T8942] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 964.332144][ T8942] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 964.344625][ T8942] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.452109][T10823] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 964.488489][ T8942] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 964.543569][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 964.728076][ T8942] usb 9-1: USB disconnect, device number 4 [ 964.744523][ T5848] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 964.764037][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 964.839098][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 964.849831][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.862108][ T9] usb 3-1: Product: syz [ 964.868656][ T9] usb 3-1: Manufacturer: syz [ 964.874585][ T9] usb 3-1: SerialNumber: syz [ 964.991183][ T5848] usb 5-1: device descriptor read/64, error -71 [ 965.004352][ T8395] udevd[8395]: setting owner of /dev/dmmidi3 to uid=0, gid=29 failed: No such file or directory [ 965.089796][ T9] usb 3-1: config 0 descriptor?? [ 965.169934][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 965.179612][ T9] usb 3-1: setting power ON [ 965.184966][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 965.229127][T10838] tipc: Started in network mode [ 965.235592][T10838] tipc: Node identity e0000001, cluster identity 4711 [ 965.242983][T10838] tipc: Enabling of bearer rejected, failed to enable media [ 965.257258][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 965.274067][ T9227] udevd[9227]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 965.275070][ T5848] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 965.324465][T10830] dvb-usb: bulk message failed: -22 (3/0) [ 965.330494][T10830] usb 3-1: gpio_write failed. [ 965.335686][T10830] dvb-usb: bulk message failed: -22 (7/0) [ 965.383038][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 965.392035][ T9] usb 3-1: media controller created [ 965.517420][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 965.614079][ T5848] usb 5-1: device descriptor read/64, error -71 [ 965.688066][T10841] cgroup: fork rejected by pids controller in /syz3 [ 965.724941][ T5848] usb usb5-port1: attempt power cycle [ 965.918443][ T9] usb 3-1: selecting invalid altsetting 6 [ 965.925071][ T9] usb 3-1: digital interface selection failed (-22) [ 965.931895][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 966.022550][ T9] usb 3-1: setting power OFF [ 966.027563][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 966.033826][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 966.043515][ T9] (NULL device *): no alternate interface [ 966.193507][ T5848] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 966.269145][ T5848] usb 5-1: device descriptor read/8, error -71 [ 966.535355][ T5848] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 966.632982][ T5848] usb 5-1: device descriptor read/8, error -71 [ 966.755030][ T5848] usb usb5-port1: unable to enumerate USB device [ 966.880190][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 967.076583][ T9] usb 3-1: USB disconnect, device number 12 [ 967.989123][ T14] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.240615][ T14] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.479668][ T14] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.621512][ T14] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.995922][ T14] bridge_slave_1: left allmulticast mode [ 969.002193][ T14] bridge_slave_1: left promiscuous mode [ 969.008994][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.164114][ T14] bridge_slave_0: left allmulticast mode [ 969.170032][ T14] bridge_slave_0: left promiscuous mode [ 969.176758][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.790173][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.831958][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.876822][ T14] bond0 (unregistering): Released all slaves [ 970.559336][ T14] hsr_slave_0: left promiscuous mode [ 970.620310][ T14] hsr_slave_1: left promiscuous mode [ 970.628290][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.638965][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.715308][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.723623][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.883943][ T14] veth1_macvtap: left promiscuous mode [ 970.889927][ T14] veth0_macvtap: left promiscuous mode [ 970.899157][ T14] veth1_vlan: left promiscuous mode [ 970.905009][ T14] veth0_vlan: left promiscuous mode [ 972.253801][ T9685] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 972.286104][ T14] team0 (unregistering): Port device team_slave_1 removed [ 972.308737][ T9685] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 972.319795][ T14] team0 (unregistering): Port device team_slave_0 removed [ 972.365141][ T9685] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 972.544252][ T9685] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 972.562262][ T9685] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 972.566679][T10898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1169'. [ 972.580527][T10898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1169'. [ 972.709152][T10902] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1170'. [ 974.513946][T10899] chnl_net:caif_netlink_parms(): no params data found [ 974.724477][ T5800] Bluetooth: hci2: command tx timeout [ 975.863743][T10939] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 975.876561][T10939] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 975.887638][T10939] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 976.312296][T10899] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.320668][T10899] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.330659][T10899] bridge_slave_0: entered allmulticast mode [ 976.338814][T10899] bridge_slave_0: entered promiscuous mode [ 976.433550][ T45] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 976.543398][T10899] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.551056][T10899] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.560598][T10899] bridge_slave_1: entered allmulticast mode [ 976.568771][T10899] bridge_slave_1: entered promiscuous mode [ 976.683872][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 976.698799][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 976.730476][ T45] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 976.740650][ T45] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 976.751742][ T45] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 976.761003][ T45] usb 5-1: config 128 has no interface number 0 [ 976.768487][ T45] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 976.780366][ T45] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 976.790749][ T45] usb 5-1: config 128 interface 127 has no altsetting 0 [ 976.803390][ T5800] Bluetooth: hci2: command tx timeout [ 976.921086][T10899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.966225][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 977.002047][T10899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.198886][ T45] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 977.208580][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.217074][ T45] usb 5-1: Product: syz [ 977.221423][ T45] usb 5-1: Manufacturer: syz [ 977.226431][ T45] usb 5-1: SerialNumber: syz [ 977.230266][ T9] usb 7-1: config 9 has an invalid interface number: 32 but max is 0 [ 977.239875][ T9] usb 7-1: config 9 has no interface number 0 [ 977.248503][ T9] usb 7-1: config 9 interface 32 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 977.261381][ T9] usb 7-1: config 9 interface 32 altsetting 9 bulk endpoint 0x2 has invalid maxpacket 1024 [ 977.271747][ T9] usb 7-1: config 9 interface 32 has no altsetting 0 [ 977.575720][T10899] team0: Port device team_slave_0 added [ 977.647439][T10899] team0: Port device team_slave_1 added [ 977.671673][ T9] usb 7-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 977.681577][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.691084][ T9] usb 7-1: Product: syz [ 977.696244][ T9] usb 7-1: Manufacturer: syz [ 977.701077][ T9] usb 7-1: SerialNumber: syz [ 977.846864][T10899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.854361][T10899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.882397][T10899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.044444][T10899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.051560][T10899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.080064][T10899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.155015][T10943] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 978.662132][ T9] usb 7-1: USB disconnect, device number 8 [ 978.903867][ T5800] Bluetooth: hci2: command tx timeout [ 978.957375][T10899] hsr_slave_0: entered promiscuous mode [ 978.967254][T10899] hsr_slave_1: entered promiscuous mode [ 978.975296][T10899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 978.983016][T10899] Cannot create hsr debugfs directory [ 979.083969][ T45] usb 5-1: USB disconnect, device number 13 [ 979.404438][ T7571] udevd[7571]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 980.956271][ T5800] Bluetooth: hci2: command tx timeout [ 981.614740][T10899] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 981.702136][T10899] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 981.815677][T10899] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 982.017166][T10899] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 983.763952][T10899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.034221][T10899] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.232780][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.240386][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.326557][T10997] fuse: Unknown parameter 'grou00000000000000000000' [ 984.526957][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.534660][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.778660][T10899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 984.791216][T10899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 986.997197][T10899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.565839][T10899] veth0_vlan: entered promiscuous mode [ 987.610522][T10899] veth1_vlan: entered promiscuous mode [ 987.928634][T10899] veth0_macvtap: entered promiscuous mode [ 987.984103][T10899] veth1_macvtap: entered promiscuous mode [ 988.182989][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.194311][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.207132][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.218794][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.229385][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.240956][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.251224][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.262022][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.276645][T10899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.631100][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.642037][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.652346][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.663181][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.673461][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.684306][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.694419][T10899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.705346][T10899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.722996][T10899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.078990][T10899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.088414][T10899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.101109][T10899] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.110300][T10899] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.664320][ T45] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 989.687659][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1198'. [ 989.751653][T11056] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3781544950 (3781544950 ns) > initial count (699260337 ns). Using initial count to start timer. [ 989.914651][ T45] usb 9-1: config 0 has no interfaces? [ 989.945541][ T45] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 989.955356][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.963673][ T45] usb 9-1: Product: syz [ 989.967968][ T45] usb 9-1: Manufacturer: syz [ 989.973836][ T45] usb 9-1: SerialNumber: syz [ 990.060174][ T7659] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 990.149256][ T45] usb 9-1: config 0 descriptor?? [ 990.269833][ T7659] usb 7-1: config 0 has no interfaces? [ 990.276003][ T7659] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 990.287194][ T7659] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.471291][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 990.471366][ T30] audit: type=1800 audit(2000000678.130:130): pid=11052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1199" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 990.518769][T11058] bridge_slave_1: left allmulticast mode [ 990.525204][T11058] bridge_slave_1: left promiscuous mode [ 990.531834][T11058] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.628932][ T7659] usb 7-1: config 0 descriptor?? [ 990.790143][T11058] bridge_slave_0: left allmulticast mode [ 990.796364][T11058] bridge_slave_0: left promiscuous mode [ 990.802772][T11058] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.045907][ T7659] usb 7-1: USB disconnect, device number 9 [ 992.961012][T11079] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.970243][T11079] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.979433][T11079] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.988491][T11079] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.005270][T11079] team0: Port device vxlan0 added [ 996.875773][T11124] netlink: 736 bytes leftover after parsing attributes in process `syz.6.1211'. [ 997.644275][T11121] ALSA: mixer_oss: invalid OSS volume '' [ 998.003586][ T3895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.011689][ T3895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.513496][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.521635][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.869152][ T1997] usb 9-1: USB disconnect, device number 5 [ 1001.377178][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1219'. [ 1002.218682][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1221'. [ 1002.233610][T11170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.242734][T11170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.338676][T11170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.347727][T11170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.029481][ T1997] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1003.275628][ T1997] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1003.286384][ T1997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.295276][ T1997] usb 7-1: Product: syz [ 1003.299721][ T1997] usb 7-1: Manufacturer: syz [ 1003.304686][ T1997] usb 7-1: SerialNumber: syz [ 1003.411663][ T1997] usb 7-1: config 0 descriptor?? [ 1003.825580][T11191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1005.801215][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1232'. [ 1006.592509][ T9] usb 7-1: USB disconnect, device number 10 [ 1007.133942][T11230] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1007.397851][T11234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1008.583859][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1008.787693][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1008.830318][ T9] usb 9-1: config 0 has an invalid interface number: 151 but max is 1 [ 1008.839269][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.850154][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1008.859492][ T9] usb 9-1: config 0 has no interface number 0 [ 1008.866040][ T9] usb 9-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1008.877380][ T9] usb 9-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1008.893009][ T9] usb 9-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1008.906640][ T9] usb 9-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1008.917463][ T9] usb 9-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1009.114824][ T9] usb 9-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1009.124548][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.132944][ T9] usb 9-1: Product: syz [ 1009.137454][ T9] usb 9-1: Manufacturer: syz [ 1009.142261][ T9] usb 9-1: SerialNumber: syz [ 1009.232588][ T9] usb 9-1: config 0 descriptor?? [ 1009.240306][T11250] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1009.331268][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1009.893768][ T1997] usb 9-1: USB disconnect, device number 6 [ 1010.575019][T11285] netlink: 'syz.6.1254': attribute type 1 has an invalid length. [ 1010.595218][T11286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.745570][T11285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1010.891432][T11285] bond1: (slave gretap1): making interface the new active one [ 1010.903754][T11285] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1011.389992][T11300] bridge1: entered allmulticast mode [ 1012.011797][T11309] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1262'. [ 1012.272379][ T7659] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1012.463527][ T7659] usb 4-1: Using ep0 maxpacket: 16 [ 1012.512919][ T7659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.525055][ T7659] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1012.536478][ T7659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.598388][ T7659] usb 4-1: config 0 descriptor?? [ 1012.708485][T11321] bond_slave_0: entered promiscuous mode [ 1012.714643][T11321] bond_slave_1: entered promiscuous mode [ 1012.721458][T11321] vlan2: entered promiscuous mode [ 1012.726993][T11321] bond0: entered promiscuous mode [ 1012.897487][T11323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.037879][ T7659] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 1013.045837][ T7659] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 1013.059952][ T7659] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 1013.067775][ T7659] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 1013.075449][ T7659] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 1013.315993][ T7659] hid-steam 0003:28DE:1102.0005: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 1013.411084][ T7659] usb 4-1: USB disconnect, device number 10 [ 1013.968103][T11336] tipc: Enabled bearer , priority 10 [ 1014.306044][T11339] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 1014.953588][ T9685] Bluetooth: hci0: command 0x0406 tx timeout [ 1015.196674][T11354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.270592][T11355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1279'. [ 1016.656998][T11382] batadv0: entered promiscuous mode [ 1016.671328][T11382] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1016.894866][T11382] batadv0: left promiscuous mode [ 1017.744421][T11393] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1017.789821][T11400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1017.934496][T11393] usb 5-1: Using ep0 maxpacket: 8 [ 1017.977958][T11393] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1017.987415][T11393] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1018.000987][T11393] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1018.014396][T11393] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1018.025657][T11393] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1018.040549][T11393] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1018.050552][T11393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.069505][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1018.076631][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1018.347101][T11393] usb 5-1: usb_control_msg returned -32 [ 1018.353700][T11393] usbtmc 5-1:16.0: can't read capabilities [ 1019.109351][T11418] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1019.373600][T11417] usb 5-1: USB disconnect, device number 14 [ 1019.449545][T11423] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1302'. [ 1021.354432][T11453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.271844][T11499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1026.508070][T11516] futex_wake_op: syz.3.1329 tries to shift op by -1; fix this program [ 1027.989521][T11533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1028.708563][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1339'. [ 1030.269624][T11565] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1030.365543][T11565] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1030.384613][T11569] fuse: Bad value for 'user_id' [ 1030.394013][T11569] fuse: Bad value for 'user_id' [ 1030.735332][T11572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1033.032457][T11608] fuse: Bad value for 'fd' [ 1033.736839][T11613] fuse: Bad value for 'fd' [ 1034.027412][T11618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1035.579167][T11638] fuse: Unknown parameter 'fd0x0000000000000005' [ 1036.120067][T11643] team_slave_0: entered promiscuous mode [ 1036.126070][T11643] team_slave_1: entered promiscuous mode [ 1036.131963][T11643] vxlan0: entered promiscuous mode [ 1036.141018][T11643] vlan2: entered promiscuous mode [ 1036.146328][T11643] team0: entered promiscuous mode [ 1038.516276][T11658] fuse: Bad value for 'fd' [ 1038.783042][T11664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.853430][ T5438] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1039.204753][ T5438] usb 7-1: config 0 has no interfaces? [ 1039.325833][ T5438] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1039.335472][ T5438] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.344219][ T5438] usb 7-1: Product: syz [ 1039.348605][ T5438] usb 7-1: Manufacturer: syz [ 1039.353652][ T5438] usb 7-1: SerialNumber: syz [ 1039.515933][ T5438] usb 7-1: config 0 descriptor?? [ 1041.869861][T11691] syz_tun: entered allmulticast mode [ 1041.937387][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 1042.100667][T11691] syz_tun (unregistering): left allmulticast mode [ 1044.217570][T11707] fuse: Bad value for 'fd' [ 1044.299120][T11708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1045.222959][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1395'. [ 1049.166856][T11758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1050.851411][T11769] netlink: 'syz.8.1408': attribute type 4 has an invalid length. [ 1051.356331][ T5438] usb 7-1: USB disconnect, device number 11 [ 1053.362210][T11798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1054.560395][T11810] netlink: 'syz.8.1421': attribute type 4 has an invalid length. [ 1057.652614][T11840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1061.495424][T11882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1061.797485][T11892] loop4: detected capacity change from 0 to 16 [ 1061.891814][T11892] erofs (device loop4): mounted with root inode @ nid 36. [ 1067.232581][T11930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1068.337033][T11944] loop8: detected capacity change from 0 to 16 [ 1068.464175][T11944] erofs (device loop8): mounted with root inode @ nid 36. [ 1069.900722][T11961] bridge0: entered allmulticast mode [ 1072.207815][T11979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1073.063378][ T5438] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1073.414172][ T5438] usb 3-1: config 0 has no interfaces? [ 1073.582209][ T5438] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1073.591715][ T5438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.600305][ T5438] usb 3-1: Product: syz [ 1073.608317][ T5438] usb 3-1: Manufacturer: syz [ 1073.614850][ T5438] usb 3-1: SerialNumber: syz [ 1073.812998][ T5438] usb 3-1: config 0 descriptor?? [ 1074.295794][T11393] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1074.402091][T12006] loop3: detected capacity change from 0 to 16 [ 1074.517394][T12006] erofs (device loop3): mounted with root inode @ nid 36. [ 1074.771298][T11393] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1074.783329][T11393] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1074.794760][T11393] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1074.805159][T11393] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1074.818439][T11393] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1074.827753][T11393] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.026908][T11393] usb 9-1: config 0 descriptor?? [ 1075.485515][T11393] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 1075.644751][T11393] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1076.944295][T12016] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1076.950490][T12016] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1077.293786][T11417] usb 9-1: reset high-speed USB device number 7 using dummy_hcd [ 1077.548256][T12016] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1077.555599][T12016] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1077.990467][T12016] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1077.996968][T12016] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1078.105116][T12029] bridge1: entered allmulticast mode [ 1078.464360][T12016] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1078.470528][T12016] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1078.948768][T12016] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1078.956094][T12016] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1079.452819][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1079.459801][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1082.098630][T12047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1082.257528][ T11] usb 9-1: USB disconnect, device number 7 [ 1082.521733][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1485'. [ 1082.564788][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1485'. [ 1083.839601][T12069] loop6: detected capacity change from 0 to 16 [ 1083.996759][T12069] erofs (device loop6): mounted with root inode @ nid 36. [ 1084.386335][T11417] usb 3-1: USB disconnect, device number 13 [ 1084.588775][T12076] loop7: detected capacity change from 0 to 7 [ 1084.688978][T12076] Dev loop7: unable to read RDB block 7 [ 1084.695089][T12076] loop7: unable to read partition table [ 1084.805606][T12076] loop7: partition table beyond EOD, truncated [ 1084.812321][T12076] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1086.933719][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1087.143394][ T45] usb 4-1: config 0 has no interfaces? [ 1087.149308][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1087.158982][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.266370][ T45] usb 4-1: config 0 descriptor?? [ 1087.514933][ T45] usb 4-1: USB disconnect, device number 11 [ 1088.987844][T12114] overlayfs: missing 'lowerdir' [ 1089.118654][T12116] bridge1: entered allmulticast mode [ 1089.905072][T12125] loop7: detected capacity change from 0 to 7 [ 1089.985979][T12125] Dev loop7: unable to read RDB block 7 [ 1089.991854][T12125] loop7: unable to read partition table [ 1090.044342][T12125] loop7: partition table beyond EOD, truncated [ 1090.050949][T12125] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1090.216134][T12126] loop3: detected capacity change from 0 to 16 [ 1090.363480][T12126] erofs (device loop3): mounted with root inode @ nid 36. [ 1093.723374][T11393] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1093.889939][T12160] overlayfs: missing 'lowerdir' [ 1093.951272][T11393] usb 3-1: config 0 has no interfaces? [ 1093.957195][T11393] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1093.966560][T11393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.014888][T11393] usb 3-1: config 0 descriptor?? [ 1094.293653][T11393] usb 3-1: USB disconnect, device number 14 [ 1095.660733][T12178] loop6: detected capacity change from 0 to 16 [ 1095.745435][T12178] erofs (device loop6): mounted with root inode @ nid 36. [ 1097.063936][T12197] netlink: 'syz.8.1524': attribute type 10 has an invalid length. [ 1097.219542][T12202] overlayfs: missing 'lowerdir' [ 1098.575017][T11417] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1098.778220][T11417] usb 7-1: config 0 has no interfaces? [ 1098.784267][T11417] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1098.794743][T11417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.932218][T11417] usb 7-1: config 0 descriptor?? [ 1099.150823][ T45] usb 7-1: USB disconnect, device number 12 [ 1100.598338][T12257] loop4: detected capacity change from 0 to 16 [ 1100.603421][T12259] overlayfs: missing 'lowerdir' [ 1100.678159][T12257] erofs (device loop4): mounted with root inode @ nid 36. [ 1103.157137][T12294] bridge1: entered allmulticast mode [ 1103.332390][T11417] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1104.351457][T11417] usb 4-1: config 0 has no interfaces? [ 1104.415588][T11417] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1104.425147][T11417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.433547][T11417] usb 4-1: Product: syz [ 1104.437935][T11417] usb 4-1: Manufacturer: syz [ 1104.442821][T11417] usb 4-1: SerialNumber: syz [ 1104.530560][T11417] usb 4-1: config 0 descriptor?? [ 1105.226384][T12310] overlayfs: missing 'lowerdir' [ 1105.372942][T12314] loop6: detected capacity change from 0 to 16 [ 1105.525166][T12314] erofs (device loop6): mounted with root inode @ nid 36. [ 1107.408898][T12336] bridge2: entered allmulticast mode [ 1107.602256][T12340] tipc: Started in network mode [ 1107.607777][T12340] tipc: Node identity 2, cluster identity 6 [ 1107.613890][T12340] tipc: Node number set to 2 [ 1108.595507][T12349] fuse: Unknown parameter 'user_i00000000000000000000' [ 1110.277684][T12363] overlayfs: missing 'lowerdir' [ 1111.214974][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1571'. [ 1111.224414][T12377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.232150][T12377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.386517][T12377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.394506][T12377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.813927][T12389] fuse: Unknown parameter 'user_i00000000000000000000' [ 1111.841335][T12390] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1575'. [ 1111.892354][T12380] bridge2: entered allmulticast mode [ 1113.611180][T11417] usb 4-1: USB disconnect, device number 12 [ 1113.810345][T12413] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1113.819538][T12413] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1114.790682][T12432] bridge2: entered allmulticast mode [ 1114.891671][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 1115.830078][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1594'. [ 1115.983393][T12451] macvtap1: entered promiscuous mode [ 1115.993367][T12451] macvtap1: entered allmulticast mode [ 1116.001783][T12451] team0: entered allmulticast mode [ 1116.011177][T12451] team_slave_0: entered allmulticast mode [ 1116.021950][T12451] team_slave_1: entered allmulticast mode [ 1116.031893][T12451] vxlan0: entered allmulticast mode [ 1116.050220][T12451] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1116.258095][T12453] team0: left allmulticast mode [ 1116.263966][T12453] team_slave_0: left allmulticast mode [ 1116.269883][T12453] team_slave_1: left allmulticast mode [ 1116.275884][T12453] vxlan0: left allmulticast mode [ 1116.321395][T12461] fuse: Bad value for 'user_id' [ 1116.326873][T12461] fuse: Bad value for 'user_id' [ 1116.895359][T12466] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1116.904866][T12466] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1117.094631][T12470] capability: warning: `syz.3.1599' uses deprecated v2 capabilities in a way that may be insecure [ 1117.474537][T11417] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1117.482353][T12475] fuse: Bad value for 'group_id' [ 1117.489085][T12475] fuse: Bad value for 'group_id' [ 1117.731003][T11417] usb 4-1: config 0 has an invalid interface number: 74 but max is 0 [ 1117.739573][T11417] usb 4-1: config 0 has no interface number 0 [ 1117.813723][T11417] usb 4-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=83.4e [ 1117.823288][T11417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.831427][T11417] usb 4-1: Product: syz [ 1117.836381][T11417] usb 4-1: Manufacturer: syz [ 1117.841113][T11417] usb 4-1: SerialNumber: syz [ 1117.873783][T11417] usb 4-1: config 0 descriptor?? [ 1118.098253][T11417] usb 4-1: USB disconnect, device number 13 [ 1118.801804][T12489] bridge2: entered allmulticast mode [ 1119.670401][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1607'. [ 1119.777380][T12499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.785921][T12499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.841150][T12499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.849455][T12499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.265620][T12514] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1121.275012][T12514] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1121.760104][T12521] fuse: Bad value for 'group_id' [ 1121.765526][T12521] fuse: Bad value for 'group_id' [ 1122.584064][T12537] bridge3: entered allmulticast mode [ 1123.561373][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'. [ 1123.571784][T12552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.580186][T12552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.743783][T12552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.751634][T12552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.071421][ T30] audit: type=1326 audit(2000000811.800:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1258e969 code=0x7ffc0000 [ 1124.095166][ T30] audit: type=1326 audit(2000000811.800:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1258e969 code=0x7ffc0000 [ 1124.338240][ T30] audit: type=1326 audit(2000000811.860:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f1258e969 code=0x7ffc0000 [ 1124.361286][ T30] audit: type=1326 audit(2000000811.860:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1258e969 code=0x7ffc0000 [ 1124.384415][ T30] audit: type=1326 audit(2000000811.860:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1258e969 code=0x7ffc0000 [ 1124.604541][T12567] overlayfs: missing 'lowerdir' [ 1125.265351][T12578] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1630'. [ 1125.274952][T12578] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1630'. [ 1125.284953][T12578] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1125.294925][T12578] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1769169250) [ 1125.520653][T12589] fuse: Unknown parameter 'user_id00000000000000000000' [ 1126.362230][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1639'. [ 1126.493938][T12608] overlayfs: missing 'lowerdir' [ 1127.199504][T12623] fuse: Bad value for 'fd' [ 1127.895673][T12638] fuse: Unknown parameter 'user_id00000000000000000000' [ 1128.937444][T12658] overlayfs: missing 'lowerdir' [ 1129.307774][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1658'. [ 1129.372553][T12671] fuse: Bad value for 'fd' [ 1129.515969][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1657'. [ 1129.532905][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1657'. [ 1133.276403][T12715] overlayfs: missing 'workdir' [ 1134.397391][T12727] fuse: Bad value for 'fd' [ 1134.647733][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1673'. [ 1137.594186][T12755] fuse: Bad value for 'fd' [ 1138.361825][T12765] overlayfs: missing 'workdir' [ 1138.459950][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1683'. [ 1139.183831][T12775] fuse: Bad value for 'fd' [ 1139.401924][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1685'. [ 1140.935847][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1140.942635][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1142.665240][T12879] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1694'. [ 1142.729262][T12878] overlayfs: missing 'workdir' [ 1144.069408][T12897] fuse: Invalid rootmode [ 1145.011169][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 1146.205648][ T30] audit: type=1326 audit(2000000833.920:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.6.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1146.350360][ T30] audit: type=1326 audit(2000000833.980:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.6.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1146.904333][ T30] audit: type=1326 audit(2000000834.600:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.6.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1146.927687][ T30] audit: type=1326 audit(2000000834.620:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.6.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f73f6bc1225 code=0x7ffc0000 [ 1146.950451][ T30] audit: type=1326 audit(2000000834.620:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.6.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1147.053401][ T1997] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1147.384877][ T30] audit: type=1326 audit(2000000834.770:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.6.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1147.808097][ T1997] usb 9-1: Using ep0 maxpacket: 16 [ 1148.095908][ T1997] usb 9-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1148.106536][ T1997] usb 9-1: too many endpoints for config 0 interface 0 altsetting 1: 145, using maximum allowed: 30 [ 1148.117589][ T1997] usb 9-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 145 [ 1148.130964][ T1997] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1148.396680][ T1997] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1148.406444][ T1997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.414840][ T1997] usb 9-1: Product: syz [ 1148.419115][ T1997] usb 9-1: Manufacturer: syz [ 1148.423903][ T1997] usb 9-1: SerialNumber: syz [ 1148.598788][ T1997] usb 9-1: config 0 descriptor?? [ 1155.507565][T12970] fuse: Unknown parameter 'group_id00000000000000000000' [ 1156.265569][T12975] fuse: Invalid rootmode [ 1157.073960][T12980] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1157.113877][T12980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1157.149830][T12980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1157.168788][T12980] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1157.178923][T12980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1157.263945][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1157.304000][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1157.325147][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1157.347669][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1157.375198][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1159.434676][T12980] Bluetooth: hci3: command tx timeout [ 1159.754262][T12978] chnl_net:caif_netlink_parms(): no params data found [ 1159.843512][T11417] usb 9-1: USB disconnect, device number 8 [ 1161.316751][T13029] fuse: Invalid rootmode [ 1161.513861][T12980] Bluetooth: hci3: command tx timeout [ 1161.602864][T13033] fuse: Unknown parameter 'group_id00000000000000000000' [ 1161.744146][T12978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.751807][T12978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.759806][T12978] bridge_slave_0: entered allmulticast mode [ 1161.768111][T12978] bridge_slave_0: entered promiscuous mode [ 1161.921704][T12978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.929321][T12978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.937033][T12978] bridge_slave_1: entered allmulticast mode [ 1161.945291][T12978] bridge_slave_1: entered promiscuous mode [ 1162.087637][T13039] netlink: 184 bytes leftover after parsing attributes in process `syz.8.1725'. [ 1162.335929][T12978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.360272][T13041] netlink: 'syz.2.1727': attribute type 10 has an invalid length. [ 1162.369279][T13041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1727'. [ 1162.391278][T13041] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 1162.401492][T13041] team0: Failed to send options change via netlink (err -105) [ 1162.409207][T13041] team0: Port device netdevsim1 added [ 1162.427445][T12978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.641142][T12978] team0: Port device team_slave_0 added [ 1162.726111][T12978] team0: Port device team_slave_1 added [ 1162.734346][T11417] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1162.949352][T13044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1162.983025][T11417] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 1162.993030][T11417] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 1163.001667][T11417] usb 3-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 1163.012052][T11417] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1163.021312][T11417] usb 3-1: config 0 has no interface number 0 [ 1163.027605][T11417] usb 3-1: config 0 has no interface number 1 [ 1163.034098][T11417] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1163.044273][T11417] usb 3-1: config 0 interface 197 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1163.057520][T11417] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1163.070597][T11417] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1163.084469][T11417] usb 3-1: config 0 interface 255 has no altsetting 0 [ 1163.157317][T12978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.164749][T12978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1163.191591][T12978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.254816][ T3695] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 1163.288683][T11417] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 1163.298229][T11417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.306822][T11417] usb 3-1: Product: syz [ 1163.311124][T11417] usb 3-1: Manufacturer: syz [ 1163.315914][T11417] usb 3-1: SerialNumber: syz [ 1163.352793][T12978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.360806][T12978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1163.387374][T12978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.400977][T11417] usb 3-1: config 0 descriptor?? [ 1163.409369][T13042] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1163.457308][T11417] qmi_wwan 3-1:0.197: probe with driver qmi_wwan failed with error -22 [ 1163.594052][T12980] Bluetooth: hci3: command tx timeout [ 1163.751785][T11417] usb 3-1: USB disconnect, device number 15 [ 1164.063517][T12978] hsr_slave_0: entered promiscuous mode [ 1164.073860][T12978] hsr_slave_1: entered promiscuous mode [ 1164.082364][T12978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1164.090318][T12978] Cannot create hsr debugfs directory [ 1165.673934][T12980] Bluetooth: hci3: command tx timeout [ 1165.870247][T13068] fuse: Bad value for 'rootmode' [ 1166.578859][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 1166.702727][T13077] fuse: Unknown parameter 'group_id00000000000000000000' [ 1166.854867][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 1167.042087][T12978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1167.204484][T12978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1167.315472][T12978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1167.402719][T12978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1168.240710][T13094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1169.324756][T12978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.497957][T12978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.637497][T12850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.645104][T12850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.941477][T12850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.949192][T12850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.299201][T13116] fuse: Bad value for 'rootmode' [ 1171.057941][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1748'. [ 1171.139323][T13124] fuse: Bad value for 'user_id' [ 1171.144988][T13124] fuse: Bad value for 'user_id' [ 1171.156529][T13128] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1747'. [ 1171.519578][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1749'. [ 1172.123852][T13141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1172.136588][T12978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.711457][T12978] veth0_vlan: entered promiscuous mode [ 1172.838420][T12978] veth1_vlan: entered promiscuous mode [ 1172.935527][T13150] fuse: Bad value for 'fd' [ 1173.135590][T12978] veth0_macvtap: entered promiscuous mode [ 1173.218424][T12978] veth1_macvtap: entered promiscuous mode [ 1173.427870][T12978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.439721][T12978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.454933][T12978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.704601][T12978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.715283][T12978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.728600][T12978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.922397][T12978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.932110][T12978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.941376][T12978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.950455][T12978] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.694776][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1759'. [ 1174.799158][T13168] fuse: Bad value for 'user_id' [ 1174.805375][T13168] fuse: Bad value for 'user_id' [ 1175.476314][T13172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1175.541545][T13175] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1761'. [ 1176.256049][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1763'. [ 1178.652288][T13210] fuse: Bad value for 'user_id' [ 1178.657648][T13210] fuse: Bad value for 'user_id' [ 1178.788415][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1771'. [ 1179.535141][T13223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1180.305815][T13237] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1775'. [ 1180.634432][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.642521][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.957312][ T4022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.965722][ T4022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.978635][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1778'. [ 1182.256511][T13265] fuse: Bad value for 'fd' [ 1182.512276][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 1183.181889][T13286] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1789'. [ 1185.229529][T13311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1794'. [ 1187.403671][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1799'. [ 1189.558585][T13351] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1803'. [ 1192.982237][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 1192.992173][T13366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.000187][T13366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.146251][T13366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.154093][T13366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1196.596982][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1813'. [ 1196.609371][T13386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.617774][T13386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.396067][T13399] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1817'. [ 1198.821085][T13419] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 1199.595978][T13428] netlink: 'syz.4.1826': attribute type 10 has an invalid length. [ 1199.604257][T13428] team0: Device macvtap0 is up. Set it down before adding it as a team port [ 1199.893376][ T30] audit: type=1326 audit(2000000887.600:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13435 comm="syz.6.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1200.001371][ T30] audit: type=1326 audit(2000000887.670:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13435 comm="syz.6.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1200.254865][ T30] audit: type=1326 audit(2000000887.760:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13435 comm="syz.6.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1200.279988][ T30] audit: type=1326 audit(2000000887.760:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13435 comm="syz.6.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1200.303616][ T30] audit: type=1326 audit(2000000887.760:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13435 comm="syz.6.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1200.588130][ T30] audit: type=1326 audit(2000000888.090:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13435 comm="syz.6.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1200.614416][ T30] audit: type=1326 audit(2000000888.090:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13435 comm="syz.6.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1200.637505][ T30] audit: type=1326 audit(2000000888.090:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13435 comm="syz.6.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1202.041259][T13463] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1834'. [ 1202.054796][T13462] loop2: detected capacity change from 0 to 64 [ 1202.347210][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1202.353873][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1204.789979][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'. [ 1207.429473][T13514] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1851'. [ 1210.460145][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1857'. [ 1214.925879][T13563] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1865'. [ 1215.350595][T13555] loop1: detected capacity change from 0 to 4096 [ 1215.480590][T13555] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 1215.654199][T13555] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1215.965083][T13555] ntfs3(loop1): volume is dirty and "force" flag is not set! [ 1216.996787][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1872'. [ 1217.671237][T13591] loop4: detected capacity change from 0 to 128 [ 1218.529568][T13600] loop4: detected capacity change from 0 to 128 [ 1218.606987][T13600] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1218.690767][T13600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1221.565630][T13611] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1880'. [ 1225.624800][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 1225.686048][T13628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.694272][T13628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.847623][T13656] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1894'. [ 1229.923184][T13667] process 'syz.8.1895' launched './file0' with NULL argv: empty string added [ 1232.156602][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'. [ 1233.347292][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'. [ 1233.355179][T13703] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1907'. [ 1235.717995][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 1236.924410][T13737] loop2: detected capacity change from 0 to 4096 [ 1237.059254][T13743] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1237.167575][ T30] audit: type=1800 audit(2000000924.900:150): pid=13737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1920" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1237.534167][ T30] audit: type=1804 audit(2000000925.240:151): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1920" name="/newroot/462/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 1237.557449][ T30] audit: type=1800 audit(2000000925.240:152): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1920" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1240.769979][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1927'. [ 1240.939898][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1927'. [ 1241.169574][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'. [ 1241.976030][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1933'. [ 1245.284115][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1943'. [ 1245.871118][T13832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 1245.880571][T13832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1245.888701][T13832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.974705][T13832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1245.982618][T13832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.620035][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1957'. [ 1254.087023][T13928] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1967'. [ 1254.212911][T13933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1254.220497][T13933] IPv6: NLM_F_CREATE should be set when creating new route [ 1254.950014][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1971'. [ 1262.629119][T13991] loop6: detected capacity change from 0 to 4096 [ 1263.747579][T14007] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1988'. [ 1263.813922][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1263.820613][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1266.264204][ T11] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1266.545513][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 1266.637188][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1266.722368][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.733740][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1266.742972][ T11] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1267.152822][ T11] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1267.162569][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.171117][ T11] usb 2-1: Product: syz [ 1267.175652][ T11] usb 2-1: Manufacturer: syz [ 1267.180476][ T11] usb 2-1: SerialNumber: syz [ 1267.772042][ T11] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1267.779800][ T11] cdc_ncm 2-1:1.0: bind() failure [ 1267.952352][ T11] usb 2-1: USB disconnect, device number 4 [ 1268.500257][ T7659] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1268.696119][ T7659] usb 9-1: Using ep0 maxpacket: 8 [ 1268.759191][ T7659] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.770558][ T7659] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1268.859969][ T7659] usb 9-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1268.869842][ T7659] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.878439][ T7659] usb 9-1: Product: syz [ 1268.882833][ T7659] usb 9-1: Manufacturer: syz [ 1268.888053][ T7659] usb 9-1: SerialNumber: syz [ 1268.907714][ T7659] usb 9-1: config 0 descriptor?? [ 1269.229174][ T11] usb 9-1: USB disconnect, device number 9 [ 1272.538143][T14122] loop8: detected capacity change from 0 to 256 [ 1273.229698][T14122] FAT-fs (loop8): Directory bread(block 64) failed [ 1273.236942][T14122] FAT-fs (loop8): Directory bread(block 65) failed [ 1273.245449][T14122] FAT-fs (loop8): Directory bread(block 66) failed [ 1273.252242][T14122] FAT-fs (loop8): Directory bread(block 67) failed [ 1273.259478][T14122] FAT-fs (loop8): Directory bread(block 68) failed [ 1273.266495][T14122] FAT-fs (loop8): Directory bread(block 69) failed [ 1273.273801][T14122] FAT-fs (loop8): Directory bread(block 70) failed [ 1273.280597][T14122] FAT-fs (loop8): Directory bread(block 71) failed [ 1273.287676][T14122] FAT-fs (loop8): Directory bread(block 72) failed [ 1273.294588][T14122] FAT-fs (loop8): Directory bread(block 73) failed [ 1276.075252][T14170] loop8: detected capacity change from 0 to 256 [ 1276.129020][T14170] exfat: Unknown parameter '' [ 1276.725314][T14175] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1276.731813][T14175] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1276.781578][T14175] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1277.763304][ T11] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1278.011931][ T11] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1278.021374][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.057462][ T11] usb 5-1: config 0 descriptor?? [ 1278.074453][ T11] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1278.393593][T12980] Bluetooth: hci3: command 0x0c1a tx timeout [ 1278.523190][ T11] gp8psk: usb in 128 operation failed. [ 1278.543889][ T11] gp8psk: usb in 137 operation failed. [ 1278.549602][ T11] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1278.561277][ T11] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1278.624661][ T11] usb 5-1: USB disconnect, device number 15 [ 1279.719037][T14217] 9p: Unknown access argument ?: -22 [ 1280.474820][T12980] Bluetooth: hci3: command 0x0c1a tx timeout [ 1283.025555][T12980] Bluetooth: hci3: command 0x0c1a tx timeout [ 1285.608615][ T7659] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1285.828015][ T7659] usb 2-1: Using ep0 maxpacket: 16 [ 1285.862524][ T7659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1285.912223][ T7659] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1285.921977][ T7659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.930453][ T7659] usb 2-1: Product: syz [ 1285.935316][ T7659] usb 2-1: Manufacturer: syz [ 1285.940157][ T7659] usb 2-1: SerialNumber: syz [ 1285.981393][ T7659] usb 2-1: config 0 descriptor?? [ 1286.021084][ T7659] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1286.270085][T12845] usb 2-1: Failed to submit usb control message: -71 [ 1286.276967][ T11] usb 2-1: USB disconnect, device number 5 [ 1286.283395][T12845] usb 2-1: unable to send the bmi data to the device: -71 [ 1286.290770][T12845] usb 2-1: unable to get target info from device [ 1286.297762][T12845] usb 2-1: could not get target info (-71) [ 1286.303913][T12845] usb 2-1: could not probe fw (-71) [ 1286.719796][T14271] syzkaller1: entered promiscuous mode [ 1286.726003][T14271] syzkaller1: entered allmulticast mode [ 1292.401758][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1292.413829][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1292.424501][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1292.449499][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1292.463490][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1292.592604][ T30] audit: type=1326 audit(2000000980.320:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1292.616342][ T30] audit: type=1326 audit(2000000980.320:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1292.761464][ T30] audit: type=1326 audit(2000000980.490:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1292.784610][ T30] audit: type=1326 audit(2000000980.490:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1292.808037][ T30] audit: type=1326 audit(2000000980.490:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1293.004667][ T30] audit: type=1326 audit(2000000980.570:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1293.027991][ T30] audit: type=1326 audit(2000000980.570:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1293.051345][ T30] audit: type=1326 audit(2000000980.570:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.6.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f6b8e969 code=0x7ffc0000 [ 1294.387042][T14318] chnl_net:caif_netlink_parms(): no params data found [ 1294.573683][T12980] Bluetooth: hci2: command tx timeout [ 1295.047909][T14348] loop2: detected capacity change from 0 to 256 [ 1296.515257][T14318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.522668][T14318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.530840][T14318] bridge_slave_0: entered allmulticast mode [ 1296.539180][T14318] bridge_slave_0: entered promiscuous mode [ 1296.637928][T12980] Bluetooth: hci2: command tx timeout [ 1296.648730][T14318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.656635][T14318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.664544][T14318] bridge_slave_1: entered allmulticast mode [ 1296.674412][T14318] bridge_slave_1: entered promiscuous mode [ 1296.999110][T14318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.020105][T14318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.933852][T14318] team0: Port device team_slave_0 added [ 1298.059122][T14318] team0: Port device team_slave_1 added [ 1298.716583][T14318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.724242][T14318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.750949][T14318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.764165][T12980] Bluetooth: hci2: command tx timeout [ 1299.317909][T14318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.325443][T14318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.351904][T14318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.485213][T14318] hsr_slave_0: entered promiscuous mode [ 1300.495862][T14318] hsr_slave_1: entered promiscuous mode [ 1300.504450][T14318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1300.512223][T14318] Cannot create hsr debugfs directory [ 1300.820548][T12980] Bluetooth: hci2: command tx timeout [ 1305.327855][T14430] bridge5: entered allmulticast mode [ 1307.178710][T14432] loop4: detected capacity change from 0 to 1024 [ 1307.292954][ T11] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1307.335361][T14318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.422805][ T11] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1307.471748][T14432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1307.675843][ T5800] Bluetooth: hci2: command 0x0405 tx timeout [ 1307.816520][T14318] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.021042][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.028575][ T3695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.104798][T14444] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2093'. [ 1308.224514][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.231869][ T3695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.264495][T10042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.743511][T14449] loop6: detected capacity change from 0 to 2048 [ 1308.959911][T14449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1311.070828][T14476] loop2: detected capacity change from 0 to 512 [ 1311.146216][T14480] vivid-002: disconnect [ 1311.153408][T14478] vivid-002: reconnect [ 1311.412356][T14318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.436972][T14476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.450273][T14476] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1311.640266][ T30] audit: type=1800 audit(2000000999.370:161): pid=14476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2101" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 1312.253198][T14492] bridge1: entered allmulticast mode [ 1316.070544][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.588204][T14318] veth0_vlan: entered promiscuous mode [ 1316.720756][T14318] veth1_vlan: entered promiscuous mode [ 1317.041581][T14318] veth0_macvtap: entered promiscuous mode [ 1317.212644][T14318] veth1_macvtap: entered promiscuous mode [ 1317.531766][T14318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1317.998066][T14318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1319.981440][T14542] bridge3: entered allmulticast mode [ 1320.114378][ T5846] kworker/1:4 (5846) used greatest stack depth: 5208 bytes left [ 1324.830694][T14589] loop6: detected capacity change from 0 to 256 [ 1324.859131][T14591] bridge4: entered allmulticast mode [ 1325.065819][T14589] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1325.230689][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1325.238693][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1326.660629][T14612] netlink: 'syz.4.2127': attribute type 10 has an invalid length. [ 1326.684839][T14612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.700007][T14612] bond0: (slave team0): Enslaving as an active interface with an up link [ 1328.990649][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1328.999475][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.200051][T12848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.208583][T12848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.181323][T14645] bridge5: entered allmulticast mode [ 1330.960034][T14651] loop6: detected capacity change from 0 to 32768 [ 1331.092330][T14651] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1333.242140][ T7538] ocfs2: Unmounting device (7,6) on (node local) [ 1333.263904][ T11] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1333.526012][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.536540][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1333.661731][ T11] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1333.671319][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.679816][ T11] usb 5-1: Product: syz [ 1333.684292][ T11] usb 5-1: Manufacturer: syz [ 1333.689113][ T11] usb 5-1: SerialNumber: syz [ 1334.047998][ T11] usb 5-1: 0:2 : does not exist [ 1334.147866][ T11] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1334.344621][ T11] usb 5-1: USB disconnect, device number 16 [ 1334.759275][T14272] udevd[14272]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1335.105927][T14689] loop4: detected capacity change from 0 to 64 [ 1335.453282][T14691] hugetlbfs: syz.6.2141 (14691): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1336.646850][T14704] bridge6: entered allmulticast mode [ 1337.212606][ T30] audit: type=1326 audit(2000001024.940:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14712 comm="syz.4.2152" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3826b8e969 code=0x0 [ 1337.234744][ C0] vkms_vblank_simulate: vblank timer overrun [ 1338.857109][T14724] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2151'. [ 1342.077540][T14745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1342.265685][T14743] loop4: detected capacity change from 0 to 32768 [ 1342.380293][T14743] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1342.389205][T14743] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1343.897069][T14743] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1343.914217][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1343.921366][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1345.437139][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1515ms [ 1345.446109][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 1345.451860][T14743] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1345.503678][T14743] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 1346.125820][T14762] bridge6: entered allmulticast mode [ 1348.936812][T14776] loop5: detected capacity change from 0 to 512 [ 1348.977899][T14776] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1349.141136][T14776] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1349.149675][T14776] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 1349.167263][T14785] loop2: detected capacity change from 0 to 256 [ 1349.206648][T14785] exfat: Unknown parameter '' [ 1349.339156][T14776] EXT4-fs (loop5): 1 truncate cleaned up [ 1349.349890][T14776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1349.613563][ T11] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1350.353740][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 1350.404091][T14318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.428022][ T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1350.437512][ T11] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1350.449434][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1350.460759][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1350.825138][ T11] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1350.835511][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.844768][ T11] usb 5-1: Product: syz [ 1350.849148][ T11] usb 5-1: Manufacturer: syz [ 1350.854393][ T11] usb 5-1: SerialNumber: syz [ 1351.007723][ T11] usb 5-1: config 0 descriptor?? [ 1351.015761][T14790] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1351.324214][ T11] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1351.348240][ T11] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 1352.452782][ C0] powermate: config urb returned -71 [ 1352.457921][ T7659] usb 5-1: USB disconnect, device number 17 [ 1352.458237][ C0] powermate: usb_submit_urb(config) failed [ 1352.460696][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1352.575638][T14817] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2179'. [ 1352.647180][T14817] veth1_macvtap: left promiscuous mode [ 1353.851126][T14837] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2184'. [ 1353.861111][T14837] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2184'. [ 1357.028795][T14841] orangefs_mount: mount request failed with -4 [ 1358.080591][T14867] tipc: Started in network mode [ 1358.086094][T14867] tipc: Node identity 72c839ede418, cluster identity 4711 [ 1358.094125][T14867] tipc: Enabled bearer , priority 0 [ 1358.264657][T14870] syzkaller0: MTU too low for tipc bearer [ 1358.270792][T14870] tipc: Disabling bearer [ 1359.702228][T14893] loop6: detected capacity change from 0 to 256 [ 1360.016607][T14893] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1367.155271][T14958] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1367.245270][T14958] bond2: entered promiscuous mode [ 1367.250586][T14958] bond2: entered allmulticast mode [ 1367.257363][T14958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1367.335904][ T11] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1367.457760][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 1367.523439][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 1367.568401][ T11] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1367.577506][ T11] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.588246][ T11] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1367.599701][ T11] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1367.613362][ T11] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1367.622670][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.859530][ T11] usbtmc 6-1:16.0: bulk endpoints not found [ 1368.100536][ T11] usb 6-1: USB disconnect, device number 4 [ 1369.701652][T14995] loop5: detected capacity change from 0 to 256 [ 1369.945699][T14995] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1370.172955][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2234'. [ 1376.031425][T15047] loop2: detected capacity change from 0 to 256 [ 1376.278768][T15047] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1376.580950][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2247'. [ 1377.527818][T15058] loop4: detected capacity change from 0 to 32768 [ 1377.611864][T15058] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1378.021389][T15058] XFS (loop4): Ending clean mount [ 1378.045055][T15058] XFS (loop4): Quotacheck needed: Please wait. [ 1378.062064][ T74] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0xaf/0x2d0, xfs_rmapbt block 0x20 [ 1378.073896][ T74] XFS (loop4): Unmount and run xfs_repair [ 1378.079826][ T74] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1378.088498][ T74] 00000000: 52 4d 42 33 00 00 00 0b ff ff ff ff ff ff ff ff RMB3............ [ 1378.097771][ T74] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 10 ....... ........ [ 1378.107099][ T74] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab ..*.w.B.....G.K. [ 1378.122787][ T74] 00000030: 00 00 00 00 e8 3b 89 e6 00 00 00 00 00 00 00 01 .....;.......... [ 1378.132159][ T74] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 1378.142538][ T74] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 1378.152295][ T74] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 01 ................ [ 1378.161712][ T74] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 1378.170980][ T74] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x20 len 8 error 74 [ 1378.437050][ T74] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x740/0xe70 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 1378.453659][ T74] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 1378.514001][T15058] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1378.523945][T15058] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1379.479344][T15089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2256'. [ 1379.775662][T15088] loop5: detected capacity change from 0 to 8 [ 1380.214126][T15088] cramfs: Error -5 while decompressing! [ 1380.220149][T15088] cramfs: ffffffff952dd5e8(26)->ffff888021753000(4096) [ 1380.227632][T15088] cramfs: Error -3 while decompressing! [ 1380.235631][T15088] cramfs: ffffffff952dd602(26)->ffff888021756000(4096) [ 1380.242804][T15088] cramfs: Error -3 while decompressing! [ 1380.249639][T15088] cramfs: ffffffff952dd61c(16)->ffff88801ffa2000(4096) [ 1380.257912][T15088] cramfs: Error -5 while decompressing! [ 1380.263782][T15088] cramfs: ffffffff952dd5e8(26)->ffff888021753000(4096) [ 1380.378114][ T30] audit: type=1800 audit(1380.253:163): pid=15088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2258" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 1381.469743][T15096] loop4: detected capacity change from 0 to 256 [ 1381.778784][T15096] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1382.304146][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2262'. [ 1382.356412][T15102] veth1_macvtap: left promiscuous mode [ 1382.471041][T15109] loop6: detected capacity change from 0 to 1024 [ 1382.481171][T15109] EXT4-fs: Ignoring removed nobh option [ 1382.487252][T15109] EXT4-fs: Ignoring removed bh option [ 1382.655616][T15109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1383.184399][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 1383.289274][ T7538] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.937944][ T7659] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1384.084887][T15137] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 1384.263437][ T7659] usb 3-1: Using ep0 maxpacket: 16 [ 1384.449146][ T7659] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.459649][ T7659] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1384.769800][ T7659] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1384.779320][ T7659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.788099][ T7659] usb 3-1: Product: syz [ 1384.792471][ T7659] usb 3-1: Manufacturer: syz [ 1384.798351][ T7659] usb 3-1: SerialNumber: syz [ 1384.942830][T15142] loop6: detected capacity change from 0 to 512 [ 1385.203639][ T7659] usb 3-1: 0:2 : does not exist [ 1385.221756][ T7659] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1385.227695][T15142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1385.310985][ T7659] usb 3-1: USB disconnect, device number 16 [ 1385.623546][T14272] udevd[14272]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1385.682493][ T7538] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.758100][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1386.764815][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1388.809079][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2282'. [ 1392.504730][T15190] loop6: detected capacity change from 0 to 512 [ 1392.899410][T15190] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.774014][ T7538] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.562057][T15213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2293'. [ 1400.225778][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2297'. [ 1400.423575][T15236] syzkaller1: entered promiscuous mode [ 1400.429432][T15236] syzkaller1: entered allmulticast mode [ 1400.449601][T15238] loop2: detected capacity change from 0 to 512 [ 1400.582970][T15238] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1400.658837][T15238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 1400.736126][T15238] System zones: 1-12 [ 1400.817911][ T5438] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1400.834550][T15238] EXT4-fs (loop2): 1 truncate cleaned up [ 1400.842327][T15238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1401.037266][ T5438] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1401.046929][ T5438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.055384][ T5438] usb 6-1: Product: syz [ 1401.059761][ T5438] usb 6-1: Manufacturer: syz [ 1401.064658][ T5438] usb 6-1: SerialNumber: syz [ 1401.225211][ T5438] usb 6-1: config 0 descriptor?? [ 1401.454099][ T5438] hso 6-1:0.0: Failed to find BULK IN ep [ 1401.537477][ T5438] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1403.108876][ T5438] usb 6-1: USB disconnect, device number 5 [ 1403.278176][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.939167][T15271] loop2: detected capacity change from 0 to 512 [ 1404.232981][T15271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1404.710550][ T30] audit: type=1326 audit(1404.693:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.1.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff868f8e969 code=0x7ffc0000 [ 1404.815485][ T30] audit: type=1326 audit(1404.733:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.1.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff868f8e969 code=0x7ffc0000 [ 1404.819751][T15271] syz.2.2304 (15271) used greatest stack depth: 5136 bytes left [ 1404.838414][ T30] audit: type=1326 audit(1404.733:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.1.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff868f8e969 code=0x7ffc0000 [ 1404.838624][ T30] audit: type=1326 audit(1404.753:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.1.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff868f8e969 code=0x7ffc0000 [ 1404.838823][ T30] audit: type=1326 audit(1404.753:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.1.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7ff868f8e969 code=0x7ffc0000 [ 1404.839026][ T30] audit: type=1326 audit(1404.753:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.1.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff868f8e969 code=0x7ffc0000 [ 1404.978297][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.704025][T15302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2309'. [ 1405.993921][ T5800] Bluetooth: hci2: command 0x0405 tx timeout [ 1406.801888][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2313'. [ 1406.815890][T15313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.824722][T15313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.053555][ T7659] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1407.315743][ T7659] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1407.326210][ T7659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.334964][ T7659] usb 2-1: Product: syz [ 1407.339358][ T7659] usb 2-1: Manufacturer: syz [ 1407.344286][ T7659] usb 2-1: SerialNumber: syz [ 1407.419272][ T7659] usb 2-1: config 0 descriptor?? [ 1407.464110][ T7659] ch341 2-1:0.0: ch341-uart converter detected [ 1408.490037][ T7659] usb 2-1: failed to send control message: -71 [ 1408.496901][ T7659] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1408.549834][ T7659] usb 2-1: USB disconnect, device number 6 [ 1408.599864][ T7659] ch341 2-1:0.0: device disconnected [ 1408.786983][T15338] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2319'. [ 1408.954671][T15336] loop2: detected capacity change from 0 to 1024 [ 1409.796901][ T3695] hfsplus: b-tree write err: -5, ino 4 [ 1409.833806][ T11] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1410.019022][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 1410.052878][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.064597][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.075049][ T11] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1410.084959][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.200502][ T11] usb 2-1: config 0 descriptor?? [ 1410.240888][ T11] hub 2-1:0.0: USB hub found [ 1410.466530][ T11] hub 2-1:0.0: 1 port detected [ 1410.894006][T15360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2325'. [ 1411.575731][ T11] hub 2-1:0.0: activate --> -90 [ 1411.807504][ T11] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1411.820784][ T5438] usb 2-1: USB disconnect, device number 7 [ 1415.607855][T12980] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1415.626594][T12980] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1415.639703][T12980] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1415.660037][T12980] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1415.675998][T12980] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1416.457363][T15404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2337'. [ 1417.383948][T15391] chnl_net:caif_netlink_parms(): no params data found [ 1417.834060][T12980] Bluetooth: hci5: command tx timeout [ 1417.894923][T15414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2340'. [ 1419.434002][T12980] Bluetooth: hci2: command 0x0405 tx timeout [ 1419.615198][T15391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.622841][T15391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.630933][T15391] bridge_slave_0: entered allmulticast mode [ 1419.640317][T15391] bridge_slave_0: entered promiscuous mode [ 1419.913350][ T5800] Bluetooth: hci5: command tx timeout [ 1419.931680][T15391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.940417][T15391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.950205][T15391] bridge_slave_1: entered allmulticast mode [ 1419.966556][T15391] bridge_slave_1: entered promiscuous mode [ 1421.993394][ T5800] Bluetooth: hci5: command tx timeout [ 1422.739149][T15391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.925083][T15391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.349540][T15391] team0: Port device team_slave_0 added [ 1423.412197][T15391] team0: Port device team_slave_1 added [ 1424.081686][ T5800] Bluetooth: hci5: command tx timeout [ 1424.097312][T15391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.104719][T15391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.132060][T15391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.305710][T15465] loop2: detected capacity change from 0 to 64 [ 1424.429049][T15391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.437401][T15391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.463397][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.469709][T15391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.609290][T15465] ===================================================== [ 1424.616802][T15465] BUG: KMSAN: uninit-value in hfs_find_set_zero_bits+0x74d/0xb60 [ 1424.624804][T15465] hfs_find_set_zero_bits+0x74d/0xb60 [ 1424.631276][T15465] hfs_vbm_search_free+0x13c/0x5b0 [ 1424.636798][T15465] hfs_extend_file+0x6a5/0x1b00 [ 1424.641780][T15465] hfs_get_block+0x435/0x1150 [ 1424.646703][T15465] __block_write_begin_int+0xaab/0x3000 [ 1424.652416][T15465] cont_write_begin+0x10df/0x1ba0 [ 1424.657662][T15465] hfs_write_begin+0x85/0x130 [ 1424.662458][T15465] generic_perform_write+0x3f4/0x10c0 [ 1424.668203][T15465] __generic_file_write_iter+0x213/0x460 [ 1424.674169][T15465] generic_file_write_iter+0x131/0x980 [ 1424.679820][T15465] do_iter_readv_writev+0x93b/0xb90 [ 1424.685497][T15465] vfs_writev+0x51c/0x1420 [ 1424.690281][T15465] __se_sys_pwritev2+0x22f/0x470 [ 1424.695437][T15465] __x64_sys_pwritev2+0xe4/0x150 [ 1424.700482][T15465] x64_sys_call+0x22b9/0x3db0 [ 1424.705547][T15465] do_syscall_64+0xd9/0x1b0 [ 1424.710163][T15465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.716238][T15465] [ 1424.718608][T15465] Uninit was created at: [ 1424.723029][T15465] __kmalloc_cache_noprof+0x7f7/0xed0 [ 1424.728645][T15465] hfs_mdb_get+0x1cc8/0x2a90 [ 1424.734361][T15465] hfs_fill_super+0x3d0/0xb80 [ 1424.739413][T15465] get_tree_bdev_flags+0x6e3/0x920 [ 1424.744773][T15465] get_tree_bdev+0x38/0x50 [ 1424.749283][T15465] hfs_get_tree+0x35/0x40 [ 1424.753770][T15465] vfs_get_tree+0xb0/0x5c0 [ 1424.758310][T15465] do_new_mount+0x73c/0x1620 [ 1424.762984][T15465] path_mount+0x6db/0x1e90 [ 1424.767743][T15465] __se_sys_mount+0x6eb/0x7d0 [ 1424.772641][T15465] __x64_sys_mount+0xe4/0x150 [ 1424.777610][T15465] x64_sys_call+0xfa7/0x3db0 [ 1424.782403][T15465] do_syscall_64+0xd9/0x1b0 [ 1424.787214][T15465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.794053][T15465] [ 1424.796516][T15465] CPU: 0 UID: 0 PID: 15465 Comm: syz.2.2353 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1424.809016][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1424.819275][T15465] ===================================================== [ 1424.826647][T15465] Disabling lock debugging due to kernel taint [ 1424.832871][T15465] Kernel panic - not syncing: kmsan.panic set ... [ 1424.839367][T15465] CPU: 0 UID: 0 PID: 15465 Comm: syz.2.2353 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1424.853235][T15465] Tainted: [B]=BAD_PAGE [ 1424.857467][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1424.867608][T15465] Call Trace: [ 1424.870944][T15465] [ 1424.873929][T15465] __dump_stack+0x26/0x30 [ 1424.878365][T15465] dump_stack_lvl+0x53/0x270 [ 1424.883063][T15465] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1424.889047][T15465] dump_stack+0x1e/0x25 [ 1424.893322][T15465] panic+0x4bd/0xd50 [ 1424.897392][T15465] kmsan_report+0x29d/0x2a0 [ 1424.902007][T15465] ? stack_depot_save_flags+0x35/0x7c0 [ 1424.907584][T15465] ? kmsan_get_metadata+0x105/0x1b0 [ 1424.912906][T15465] ? __msan_warning+0x96/0x120 [ 1424.917792][T15465] ? hfs_find_set_zero_bits+0x74d/0xb60 [ 1424.923472][T15465] ? hfs_vbm_search_free+0x13c/0x5b0 [ 1424.928877][T15465] ? hfs_extend_file+0x6a5/0x1b00 [ 1424.934000][T15465] ? hfs_get_block+0x435/0x1150 [ 1424.938944][T15465] ? __block_write_begin_int+0xaab/0x3000 [ 1424.944773][T15465] ? cont_write_begin+0x10df/0x1ba0 [ 1424.950064][T15465] ? hfs_write_begin+0x85/0x130 [ 1424.955029][T15465] ? generic_perform_write+0x3f4/0x10c0 [ 1424.960678][T15465] ? __generic_file_write_iter+0x213/0x460 [ 1424.966580][T15465] ? generic_file_write_iter+0x131/0x980 [ 1424.972311][T15465] ? do_iter_readv_writev+0x93b/0xb90 [ 1424.977790][T15465] ? vfs_writev+0x51c/0x1420 [ 1424.982492][T15465] ? __se_sys_pwritev2+0x22f/0x470 [ 1424.987702][T15465] ? __x64_sys_pwritev2+0xe4/0x150 [ 1424.992920][T15465] ? x64_sys_call+0x22b9/0x3db0 [ 1424.997894][T15465] ? do_syscall_64+0xd9/0x1b0 [ 1425.002678][T15465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.008846][T15465] ? hfs_extend_file+0x46d/0x1b00 [ 1425.013972][T15465] ? hfs_get_block+0x435/0x1150 [ 1425.018915][T15465] ? __block_write_begin_int+0xaab/0x3000 [ 1425.024739][T15465] ? cont_write_begin+0x10df/0x1ba0 [ 1425.030044][T15465] ? hfs_write_begin+0x85/0x130 [ 1425.034988][T15465] ? generic_perform_write+0x3f4/0x10c0 [ 1425.040641][T15465] ? __generic_file_write_iter+0x213/0x460 [ 1425.046553][T15465] ? generic_file_write_iter+0x131/0x980 [ 1425.052283][T15465] ? do_iter_readv_writev+0x93b/0xb90 [ 1425.057756][T15465] ? vfs_writev+0x51c/0x1420 [ 1425.062454][T15465] ? __se_sys_pwritev2+0x22f/0x470 [ 1425.067665][T15465] ? __x64_sys_pwritev2+0xe4/0x150 [ 1425.072914][T15465] ? x64_sys_call+0x22b9/0x3db0 [ 1425.077885][T15465] ? do_syscall_64+0xd9/0x1b0 [ 1425.082758][T15465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.088939][T15465] ? kmsan_get_metadata+0x105/0x1b0 [ 1425.094249][T15465] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1425.100197][T15465] ? kfree+0x151/0xea0 [ 1425.104375][T15465] ? filter_irq_stacks+0x49/0x190 [ 1425.109589][T15465] ? stack_depot_save_flags+0x35/0x7c0 [ 1425.115169][T15465] ? kmsan_get_metadata+0x105/0x1b0 [ 1425.120483][T15465] __msan_warning+0x96/0x120 [ 1425.125171][T15465] hfs_find_set_zero_bits+0x74d/0xb60 [ 1425.130662][T15465] ? kmsan_get_metadata+0x105/0x1b0 [ 1425.135968][T15465] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1425.141900][T15465] hfs_vbm_search_free+0x13c/0x5b0 [ 1425.147136][T15465] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1425.153070][T15465] hfs_extend_file+0x6a5/0x1b00 [ 1425.158077][T15465] ? __mark_inode_dirty+0x371/0x1090 [ 1425.163492][T15465] hfs_get_block+0x435/0x1150 [ 1425.168266][T15465] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1425.174447][T15465] ? kmsan_get_metadata+0x105/0x1b0 [ 1425.179760][T15465] __block_write_begin_int+0xaab/0x3000 [ 1425.185446][T15465] ? __pfx_hfs_get_block+0x10/0x10 [ 1425.190680][T15465] cont_write_begin+0x10df/0x1ba0 [ 1425.195809][T15465] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1425.201729][T15465] ? kmsan_get_metadata+0x105/0x1b0 [ 1425.207038][T15465] ? kmsan_get_metadata+0x105/0x1b0 [ 1425.212364][T15465] hfs_write_begin+0x85/0x130 [ 1425.217133][T15465] ? __pfx_hfs_get_block+0x10/0x10 [ 1425.222341][T15465] ? __pfx_hfs_write_begin+0x10/0x10 [ 1425.227717][T15465] generic_perform_write+0x3f4/0x10c0 [ 1425.233268][T15465] __generic_file_write_iter+0x213/0x460 [ 1425.239073][T15465] generic_file_write_iter+0x131/0x980 [ 1425.244642][T15465] ? __rcu_read_unlock+0x6d/0xd0 [ 1425.249683][T15465] ? aa_file_perm+0x24c/0x18d0 [ 1425.254555][T15465] ? kmsan_get_metadata+0x105/0x1b0 [ 1425.259864][T15465] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1425.265788][T15465] ? vfs_iter_read+0x721/0x770 [ 1425.270652][T15465] ? filter_irq_stacks+0x49/0x190 [ 1425.275784][T15465] ? stack_depot_save_flags+0x35/0x7c0 [ 1425.281372][T15465] ? kmsan_get_metadata+0x105/0x1b0 [ 1425.286676][T15465] ? kmsan_get_metadata+0x105/0x1b0 [ 1425.291985][T15465] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1425.298429][T15465] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1425.304522][T15465] do_iter_readv_writev+0x93b/0xb90 [ 1425.309864][T15465] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1425.315966][T15465] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1425.322066][T15465] vfs_writev+0x51c/0x1420 [ 1425.326640][T15465] ? kmsan_get_metadata+0x105/0x1b0 [ 1425.331986][T15465] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1425.337939][T15465] __se_sys_pwritev2+0x22f/0x470 [ 1425.343032][T15465] __x64_sys_pwritev2+0xe4/0x150 [ 1425.348146][T15465] x64_sys_call+0x22b9/0x3db0 [ 1425.352994][T15465] do_syscall_64+0xd9/0x1b0 [ 1425.357647][T15465] ? irqentry_exit+0x16/0x60 [ 1425.362338][T15465] ? clear_bhb_loop+0x25/0x80 [ 1425.367122][T15465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.373148][T15465] RIP: 0033:0x7f2f1258e969 [ 1425.377684][T15465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1425.397412][T15465] RSP: 002b:00007f2f1343c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1425.405933][T15465] RAX: ffffffffffffffda RBX: 00007f2f127b5fa0 RCX: 00007f2f1258e969 [ 1425.414002][T15465] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 1425.422049][T15465] RBP: 00007f2f12610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1425.430098][T15465] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000000 [ 1425.438144][T15465] R13: 0000000000000000 R14: 00007f2f127b5fa0 R15: 00007ffdc8a52648 [ 1425.446224][T15465] [ 1425.449634][T15465] Kernel Offset: disabled [ 1425.454029][T15465] Rebooting in 86400 seconds..