last executing test programs: 7m32.025241033s ago: executing program 3 (id=83): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4080) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='.{\x00', &(0x7f0000000180)='-\x00', 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/145, 0x91}], 0x1) tkill(r1, 0xb) socket(0x10, 0x3, 0x0) 7m28.883360406s ago: executing program 3 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 7m26.180349364s ago: executing program 3 (id=96): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000300)="3d56d15ce619ec7ea1ac3b026c7096e494e532649914c0c774fdca6eae141a1f8ae76a2942ed3dfef13783ea3e16ec80694b16af92bf7df9de75ea2f0d95aec9ff8dc038d323ce7949d9dc057509e56ad972105b6b7aedb3a3a2a9703a78c110f8aff958b91b9caa40d0caec20fad31caf0b1b54fc6ee9c756470fa26c339243fb5e8dac74bd3251edd74e8c4a5f2762c2cf38ff0f7edc5223816b8b718422246b48280fe3c601c9108a233b352697858bd51d5926db5b0c4e7e462f286c8b") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2e9}]}}}]}, 0x40}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9) 7m23.984940949s ago: executing program 3 (id=102): socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@namecase}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x8000000d) 7m21.032949545s ago: executing program 32 (id=105): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x1) syz_open_dev$sndctrl(&(0x7f0000000080), 0x315, 0x11103) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300)={&(0x7f0000000100), 0x8}) 7m21.016559612s ago: executing program 3 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x4002}, 0x8, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0}) 7m17.856079014s ago: executing program 3 (id=113): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 7m16.418743025s ago: executing program 33 (id=113): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 5m41.480596812s ago: executing program 2 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 5m40.073571373s ago: executing program 2 (id=279): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0xc5) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 5m39.527864125s ago: executing program 2 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/115, 0x73}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x4}}], 0x2, 0x60, 0x0) 5m38.547534956s ago: executing program 2 (id=283): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mode=0']) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x1145d10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x25]}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 5m38.287869899s ago: executing program 2 (id=285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) 5m37.312121765s ago: executing program 2 (id=287): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) 5m36.033608087s ago: executing program 34 (id=287): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) 5m6.56663356s ago: executing program 4 (id=335): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) removexattr(0x0, 0x0) 5m5.648110144s ago: executing program 4 (id=337): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r3, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 5m5.363933674s ago: executing program 4 (id=339): openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000000e40), &(0x7f0000000280), 0x7f, r3}, 0x38) 5m4.133364851s ago: executing program 4 (id=341): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) r1 = open(0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./bus\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES32], 0x1, 0xa1b, &(0x7f0000001540)="$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") socket$rds(0x15, 0x5, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000080)=""/43, 0x2b) getdents(r2, 0xfffffffffffffffd, 0x58) 5m2.62068453s ago: executing program 4 (id=344): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b"], 0xa0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m1.816552016s ago: executing program 4 (id=345): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x4, 0xfffffffd) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x89745301ffea7a81, 0x70bd28, 0x25dfdbfa}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5m1.07138711s ago: executing program 35 (id=345): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x4, 0xfffffffd) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x89745301ffea7a81, 0x70bd28, 0x25dfdbfa}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4m29.167582028s ago: executing program 5 (id=400): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4m27.379347151s ago: executing program 5 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x81}, 0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newaddrlabel={0x1c, 0x48, 0x301}, 0x1c}}, 0x0) 4m26.242975365s ago: executing program 5 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x7ff}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x44050) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m25.313980667s ago: executing program 5 (id=413): socket$inet(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@ipv4={""/10, ""/2, @multicast1}}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@loopback}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@noload}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000001540)="$eJzs3MtvG8UfAPDvrvPoO/n1Vx59QAMFEVFImrRAD0gIBFIvSEhwgGNIQ1XqtqgJEq0q2iJUjoi/ADgi8RdwggsCTiCucEdIFeqlhQMyWns3cWLXuHYdh/rzkdaZ2dfM7OxkZ3e8DmBgTWQfScS2iPglIsZq0dUrTNT+3Lx+cf7P6xfnk6hUXv1jtLrejesX54tVi+225pHJNCL9MIm9TdJdPH/h1Fy5vHAuj08vnX5nevH8hSdPnp47sXBi4czs0aNHDs888/TsU3eknFm5bux5/+y+3cfe+OTl+Uq8+f2XWX635cvry1Ez3nWaEzERlUqlkq6aO1L9fLTrvW8s2yPiSh5OhvqcGdpWioisuoar7X8sSrFSeWPx0gd9zRzQU9n1abRhbin/O5RkyzfVrQvcTRLtGgZUccXP7n+Lab36HhvBteezz4Vq+W/mU23JUGT37cl47Y691KP0t0XE65f/+jSboulzCACAO+vrrP/zRLP+Xxr31q23Ix9DGY+IgxGxMyL+HxG7IuKeiOq690XE/beZfnX86cpKvLH/89PmjgvXhqz/92w+trW6/7c8ajNeymPbq+UfTt46WV44lB+TyRgezeIzLdL45sWfP77Vsom6/l82ZekXfcE8H78PrXlAd3xuaa6bMte7diViz1Cz8ifLIwFJROyOiD0d7D87Zicf/2JfFt6xtXH5v5e/lcsd5Gi1yucRj9Xq/3KsKX8hqQ2R3Gp8cnpTlBcOTRdnRaMffrz6Sn18uC7cXfm7l9X/lqbnf17+ohkU47WLbe54ZCV49deP8n02NuVOz/+R5LVVybw3t7R0biZiZCQa58+ubFvEi/Wz8k8eiLiaDwTXt/+dEX9/lm+3NyKyk/iBiHgwIvbneX8oIh6OiAMtDsV3LzzyduuD1d/6P96q/iPGk/rx+g4CpVPfflXsbLkq838u7dX/kWpoMp/Tzv+/djN4J44hAAAAbHRpdQw6SaeWw2k6NVX7Dv+u2JKWzy4uHZyId88cr41Vj8dwWjzpGqt7HjqTPxsu4rNr4ocj4n/Vbxptrsan5s+Wt/e78DDgtt6i/Wd+69WXXoCN47be10p6lw9g/XlfEwZX2+1/uLf5ANaf6z8MLu0fBlez9n8p4mYfsgKss9u6/j/Xu3wA669V+/fID+5u7v9hcGn/MJAaX4kvfqOhkzf9VwI7j3W1+QAFSj3ac9T/aEcPApH2/dB1Hkg3Qjb254HRiGh3q0s9rdO15w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/3z8BAAD//yxO2No=") 4m23.958943177s ago: executing program 5 (id=418): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r5, &(0x7f0000000140)='./file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') 4m20.704109361s ago: executing program 5 (id=423): socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) 4m19.537809743s ago: executing program 36 (id=423): socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) 2m13.696752566s ago: executing program 7 (id=685): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2001) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)={0xf, 0x9, 0x0, {0x5, 0xfff}, 0x3, 0xfff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="410000000100", 0x6) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x17, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @private1}}]}, 0xb8}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) futex(&(0x7f0000000080)=0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0x0) 2m12.496373595s ago: executing program 7 (id=688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040055}, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m8.816042176s ago: executing program 7 (id=695): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m4.977172723s ago: executing program 7 (id=704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 2m2.687594218s ago: executing program 7 (id=708): socket(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r0, 0x10, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000040)=0x10000) 2m1.447994678s ago: executing program 7 (id=709): syz_open_dev$video(0x0, 0x3ff, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x528}}, 0xc000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) 1m46.214340978s ago: executing program 37 (id=709): syz_open_dev$video(0x0, 0x3ff, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x528}}, 0xc000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) 18.831673963s ago: executing program 9 (id=909): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0, 0x0, 0xd4f}, 0x18) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r1, r4, 0x6700000000000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 14.968094609s ago: executing program 8 (id=912): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) sync() sync() sync() syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 14.189693208s ago: executing program 9 (id=915): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) alarm(0x7) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 13.944419808s ago: executing program 1 (id=916): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xa}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5e34, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) semtimedop(0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x7058, &(0x7f0000000a80)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x16, 0x20000002, r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) semget(0x1, 0x1, 0x108) 12.931454689s ago: executing program 0 (id=917): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x2300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 12.815912515s ago: executing program 6 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 10.754474528s ago: executing program 6 (id=919): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="8d437a5771"]}]}, 0x30}}, 0xc000) 10.631763646s ago: executing program 9 (id=920): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@local, @in6=@mcast1}, {@in=@broadcast}, @in6=@loopback, {}, {0x0, 0x48a9, 0x0, 0x1}}, 0x0, 0x800000}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 10.590006176s ago: executing program 0 (id=921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendto$inet(r1, &(0x7f0000000380)='g', 0x1, 0x40, 0x0, 0x0) 10.537003409s ago: executing program 8 (id=922): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(0x0, 0x8e, 0x202000) read$nci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 9.527873397s ago: executing program 6 (id=923): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) r6 = dup3(r4, r0, 0x0) ioctl$NBD_DO_IT(r6, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r7, 0xc08c5336, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 9.504950589s ago: executing program 1 (id=924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)={0x114, 0x33, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64}, @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x24040040}, 0x0) 8.493902943s ago: executing program 0 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x40004) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 8.466105781s ago: executing program 9 (id=926): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ppp(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x845, 0x101002) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000280)={0x3, 0x1}) r2 = msgget$private(0x0, 0x214) setreuid(0x0, 0x0) msgsnd(r2, 0x0, 0x401, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001480)=@nat={'nat\x00', 0x1b, 0x5, 0x3f0, 0x0, 0x1e8, 0xffffffff, 0x0, 0x2b8, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@ip={@private=0xa0100ff, @multicast2, 0x0, 0xffffffff, 'syzkaller0\x00', 'wlan0\x00', {}, {}, 0x88, 0x0, 0x8}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, 'SB', 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010101, 'ip6gre0\x00', {0x6ef}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0xe7c, 0x800, 0x0, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @port=0x4e23, @gre_key=0x9}}}}, {{@ip={@multicast2, @remote, 0xff, 0x7fffff80, 'sit0\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x73, 0x1, 0xa}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x6f, 0x4, 0x7}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @multicast2, @rand_addr=0x64010102, @port=0x4e24, @gre_key=0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1, 0x3, 0x3, 0x1, 0x2], 0x1, 0x1}, {0x4, [0x1, 0x1, 0x6, 0x4, 0x6], 0x5, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@minixdf}, {@lazytime}, {@noinit_itable}, {@nouid32}, {@grpjquota, 0x2e}], [{@obj_role}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") 7.583972253s ago: executing program 1 (id=927): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$sndtimer(0xffffff9c, 0x0, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KDSETMODE(r0, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x4, 0x101, 0x8, 0x7, 0x4}}) 6.748106073s ago: executing program 0 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$caif_seqpacket(0x25, 0x5, 0x1) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40, 0x1}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) 6.624014938s ago: executing program 8 (id=929): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x0) syz_emit_ethernet(0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaabba570ed6e01f70011aa036f86e76f317e01278ddd244314037e67e28174e38ff3fa9f1a92a79e1d406b0a8771a38eabd3342ae7838bf0aaedbd039f9a139ce6fc5dc61c9a87d89281b8dc55264d844baf98ba472da5f7253a40320537ee891bb1"], &(0x7f0000000280)={0x0, 0x4, [0xed3, 0x904, 0x24c, 0x75d]}) pipe(&(0x7f00000003c0)) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)="6395", 0x2}], 0x1, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xae) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 6.274758926s ago: executing program 6 (id=930): prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x7) ioctl$KVM_RUN(r0, 0xae80, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 4.919982993s ago: executing program 0 (id=931): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000000080)={[{@shortname_winnt}, {@numtail}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@rodir}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@utf8no}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) shutdown(0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 4.140850937s ago: executing program 8 (id=932): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.993553134s ago: executing program 1 (id=933): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) unshare(0x22020600) write(r0, &(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x81) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010"], 0x80}}, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 3.909708366s ago: executing program 6 (id=934): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000001080)=""/213, 0xd5}], 0x1) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents(r1, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffc98}]) 2.630749649s ago: executing program 9 (id=935): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200008d4, 0x0, 0x0) recvmsg$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unlink(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(0x0, 0xfff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 2.563292498s ago: executing program 8 (id=936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000300), 0x6) 1.395416118s ago: executing program 0 (id=937): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="66b821010f00d80fb478072e0fc77c76e0360f01c5c4e171574b83f30f09c4c29900bc457d000000650f01cb670fc75ea4c4c1785528"}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.324002045s ago: executing program 1 (id=938): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) 1.209380748s ago: executing program 8 (id=939): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x3, 0xf29, &(0x7f0000001e80)="$eJzs3U9sHNUZAPA3G/9LbOI1UDBQQgqtCBTskERqegsC9Yi49A4KCY0wFDW0EhEQ0wOiEqJIiFPFgYoLpVKKVCRQpQr11PbUqreeUC9UqlIpqIcWKXEV+81692Vfdj22Z9fe30/6/Pzmzc73zdpx5o3XbwMwshqrH48dmy9CeOfTtx99+ani46vb7mrtcXD1YxF7zRDCeFu/SI73edxw+dJLJ7u1RTiy+rHsh8cuth47HUJYDgfDZ6EZPlxc+vKDdx859NFrU7e8ee6ZV7bp9FvS8wAAgN3owp+X/n7fP//0wNxXFw6cCJOt7eX1eTP2p+N1/+F4oVxeLzdCZ79oi3YTyX57YjSS/fYk+40lecYy+caT44xn9pvokW9P27Zu5wkAAAA7UTmvbYaisdDRbzQWFtbm/Vd9PjtRLDx3Zun02QEVCgAAAFT2n/OrL7oVYktjb/kNNgS1XC8aNdc4tgOeEyGEEEIIIcTujJXZQd59AAAAAEZRul7YNZa3dqWu1tGa/eW/+HCj++NhC9T9/X/9/FMDzt/FiOd//1U/cQAAqG63Xk2W51VeR5frGKTrCO5JHrfR6/9GcpyxDdaZW1dwp6w3mKszfV6HVa7+jX4dByVXf7oe5rDK1Z+u0zmscvVP1lxHVbn6u9z5GUq5+vfWXEdVufr31VxHVbn6p2uuo6pc/TM111FVrv4baq6jqlz9+2uuo6pc/TvlZbW5+ps111FVrv65muuoKlf/jTXXUVWu/ptqrqOqXP0311zHoNwZ2/J5OJDZb7rLnG6nzPEAAABg1P3P+n9CCCFGNl5d+8+wc/tUl21CCCGEEDs+zg/29gMAAAAwBMq/Cyj/6n0lKsf39Bgfax+fWt+hHB/v8fiJHuOTPcYBAACAEH73+unb3irW17vb7Hp45bpRe8PHV0KFdYzS9Qg3mn+z655tNv9OWbcMAACA0VJ877Mr9z/63gtzX104cKJt9nslznfLdUDH4r2BT2K/fF3ATNIvyjn0ic48jcx+6f2BG3LHe3yTJwoAAAAjrJy/N0PRWGibdzdDo7GwsD4fnw/jxekzS6cOx375/ix/nB2fvLr9oZrrBgAAAPq3Pt/vPv8v38d3PkwUC8+dWTp9dq0/09o+3mi/LzC7vr1ovy/QTLYfyWw/Gvvl+3f+YHbv6vaFkz9cemqrTx4AAABGxNkXzz3z5NLSqR+NzidjIYRNHScMw1n4xCfb+smgfzIBAABb7Ysv3h7/8dGZ36/9/f/6+ndX4icHY78Z1/b7S9xevk6g/DuAa/5e/4nOPLO5/Z7v3K+Z7LcnxmRS91TbccLqeoOdj5vL5Wt2Hmcik286yTeT5EvXKRhL9i+6rCUYuqxPWO43m2xP12EcS3IUSf67u+QCAACA0uILzz6/ePbFcw+eefbJp089feq5o0eOf/f48cMPfeehxdXX9S+2v7ofAAAA2InWX/Q76EoAAAAAAAAAAAAAAAAAAABgdNXxdmKDPkcAAAAYdf8+H0JYFiIT5RsMDroOMcyxMjn4GnZ3BP8OhRBCCLHJMO8TyyGsrKTvNA8AAACwvS5feulke3uN5WJL87WO1lxrrsS8ZTvz4N/mrka528WHO++X7NvSahh1dX//yz+s+Se7jr//6tbmnwrrP/tCXz//Gp0HONHR29tv3nsXfzXfyh9CuH2sz/zp+T/eb8ZOh5L894b+8q+8l+R/oqPX6Df/fUn+fX3mv+b8n89lmLpu/vtj/vnYP3RPv/k7T3EyydbvN8C3k/N/KvSbPzn/Zp8JEw/E/AAwilr/m6+cH2whW6y8Siivp6djvzzfeLkZ0lc/bPT6v5EcZ2zTlXcet7wOujX2W1d1y515Sxutv3xeZmJ7Q8U6UzvlVSW5+rfq67jdcvWP11xHVbn6J2quo6pc/d1n78MnV//1Z4/DI1d/3zciBixX/065r5yrf7rmOqrK1T9Tcx1V5erf6P/jg5Krf3/NdVSVq3+25jqqytVf8bZa7XL1z9VcR1W5+m+suY6qcvXfVHMdVeXqv7nmOgbljtjm5sPl/HM2jpX9ZtKf7PJc9v3LEAAAAGBb/Wso14Fou3Mw8FqEEEIIIYTY/fHflTWDrkMIsX2xsjLIuw8MWrGDXisOwNbZ3tUsGHa+/qPN13+0+fpzPeVv4oukX9rTY3ysx/h4j/GJZDz9fp3sMX5TctyV8r5mdHOP8a/FM8iN708e/5Nk/NYex5/vMX5bj/Hbe4zf0WMcAACA0XBLbM0PAQAAYPd6+defvPHbe5+4NPfVhQMnwsQ1684fjv3J+Lv112M/Xfe+NB5/5//T2P9lbP8Q238k+3v9CQAAAGy/8n1i/P4fAAAAdq/yfUrN/wEAAGD3mout+T8AAADsXjfG1vwfAAAAdrFiqvvm2Jb3Be6Obb/r+gEAw+/rsb0ztgdie1dsvxHb8jrgnth+s6b6AICt84vv/+z4W8X6ev9Hk/HLcXvZXmN57U5B0ehcyX9vbPfF9lt91pO+H0C/+Uv7+8yzXflnN5kfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANg9Gqsfjx2bL0J459O3H/35xBt/vbrtrtYeB1c/FrHXDCGMtx5Xjq73fxN3vHzppZPt7ZXYFuFIKELR2h4eu9jKNB1CWA4Hw2ehGT5cXPryg3cfOfTRa1O3vHnumVe28SnoOD8AAADYjf4fAAD//4z4HDs=") r0 = syz_open_dev$dri(&(0x7f0000000140), 0x3ff, 0x80000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x17a) pwrite64(r1, &(0x7f00000002c0)='\b', 0x1, 0x8004c61) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1268, &(0x7f0000002500)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 758.477137ms ago: executing program 6 (id=940): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4871b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) fcntl$setsig(r0, 0xa, 0x21) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1210080, &(0x7f0000000400)={[{@type={'type', 0x3d, "5f3b48d8"}}, {@creator={'creator', 0x3d, "888aaae6"}}, {@umask={'umask', 0x3d, 0x4}}, {@dir_umask={'dir_umask', 0x3d, 0x3edbe866}}, {}, {}, {@gid={'gid', 0x3d, 0xee01}}]}, 0x4, 0x32f, &(0x7f0000000c80)="$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") openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) creat(&(0x7f0000002240)='./file1\x00', 0x804000000000040) r2 = syz_open_dev$usbmon(&(0x7f0000000100), 0x3, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb635773f07ebbeee, 0x12, r2, 0xffffe000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1817c1, 0x0) pwritev2(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="1b", 0x1}], 0x1, 0x7f, 0x4, 0x21) rt_sigtimedwait(&(0x7f0000000000)={[0x10]}, 0x0, 0x0, 0x8) clock_getres(0x5, &(0x7f0000000040)) 95.403176ms ago: executing program 9 (id=941): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) socket$unix(0x1, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 1 (id=942): r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0xa04000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): ow storage [ 228.826128][ T6989] rock: sig=0x66, size=4, remaining=3 [ 228.861691][ T6989] rock: directory entry would overflow storage [ 228.868433][ T6989] rock: sig=0x66, size=4, remaining=3 [ 228.883548][ T6989] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 228.899602][ T5843] Bluetooth: hci3: command tx timeout [ 229.464049][ T5840] Bluetooth: hci1: command tx timeout [ 231.615210][ T5840] Bluetooth: hci3: command tx timeout [ 231.620771][ T5840] Bluetooth: hci1: command tx timeout [ 233.646067][ T5843] Bluetooth: hci3: command tx timeout [ 235.330832][ T6881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.684929][ T6881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.800963][ T6881] bond0 (unregistering): Released all slaves [ 236.496400][ T6881] hsr_slave_0: left promiscuous mode [ 236.526784][ T6881] hsr_slave_1: left promiscuous mode [ 236.564188][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.614922][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.178744][ T7050] syz.1.244 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 238.454407][ T29] audit: type=1800 audit(1738832573.919:56): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.245" name="/" dev="9p" ino=2 res=0 errno=0 [ 239.960751][ T6881] team0 (unregistering): Port device team_slave_1 removed [ 240.157949][ T7060] netlink: 'syz.2.247': attribute type 10 has an invalid length. [ 240.160908][ T6881] team0 (unregistering): Port device team_slave_0 removed [ 241.012830][ T7060] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 243.001474][ T6910] chnl_net:caif_netlink_parms(): no params data found [ 245.666004][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.673343][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.691952][ T6889] bridge_slave_0: entered allmulticast mode [ 245.703066][ T6889] bridge_slave_0: entered promiscuous mode [ 247.018610][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.044358][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.051697][ T6889] bridge_slave_1: entered allmulticast mode [ 247.070928][ T7096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 247.082210][ T6889] bridge_slave_1: entered promiscuous mode [ 247.174013][ T7096] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 247.230652][ T7096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 247.239910][ T7096] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 247.252090][ T7096] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 247.258906][ T7096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.130351][ T7096] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 248.189745][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 248.204064][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 248.255080][ T7096] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 248.295300][ T7096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.308981][ T7130] loop2: detected capacity change from 0 to 256 [ 248.313304][ T7096] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 248.408852][ T6889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.426151][ T7096] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 248.588956][ T6910] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.607687][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.617883][ T6910] bridge_slave_0: entered allmulticast mode [ 248.636110][ T6910] bridge_slave_0: entered promiscuous mode [ 248.728738][ T6889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.762945][ T6910] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.779554][ T6910] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.791225][ T6910] bridge_slave_1: entered allmulticast mode [ 248.814231][ T6910] bridge_slave_1: entered promiscuous mode [ 249.084686][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 249.186509][ T6889] team0: Port device team_slave_0 added [ 249.254203][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 249.326761][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 249.331004][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 249.335683][ T6910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.421470][ T6889] team0: Port device team_slave_1 added [ 249.626196][ T6910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.611507][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 250.689779][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.708804][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.736734][ T6889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.750128][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 250.751857][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.767553][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.800887][ T6889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.912227][ T7150] kvm: pic: single mode not supported [ 250.958612][ T6910] team0: Port device team_slave_0 added [ 251.052778][ T6910] team0: Port device team_slave_1 added [ 251.182400][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 251.335073][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 251.404580][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 251.464683][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.471707][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.693084][ T6910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.780972][ T7165] netlink: 256 bytes leftover after parsing attributes in process `syz.2.273'. [ 252.517818][ T6889] hsr_slave_0: entered promiscuous mode [ 252.538625][ T6889] hsr_slave_1: entered promiscuous mode [ 252.556414][ T6889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.574188][ T6889] Cannot create hsr debugfs directory [ 252.669772][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.679888][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.717413][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 252.723676][ T6910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.226169][ T7175] loop1: detected capacity change from 0 to 512 [ 253.375574][ T7175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.405310][ T7175] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.728149][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 254.339010][ T6910] hsr_slave_0: entered promiscuous mode [ 254.385532][ T6910] hsr_slave_1: entered promiscuous mode [ 254.423783][ T6910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.468466][ T6910] Cannot create hsr debugfs directory [ 254.576134][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.773946][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 256.063528][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 256.116402][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 256.156810][ T7193] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 256.184072][ T7193] netlink: 10 bytes leftover after parsing attributes in process `syz.1.277'. [ 256.234686][ T7197] overlayfs: failed to get inode (-116) [ 256.281534][ T7197] overlayfs: failed to look up (file0) for ino (-116) [ 256.300972][ T5840] block nbd0: Receive control failed (result -32) [ 257.170882][ T6016] Bluetooth: Error in BCSP hdr checksum [ 257.307547][ T6881] bridge_slave_1: left allmulticast mode [ 257.313268][ T6881] bridge_slave_1: left promiscuous mode [ 257.324420][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.350109][ T6881] bridge_slave_0: left allmulticast mode [ 257.372288][ T6881] bridge_slave_0: left promiscuous mode [ 257.396704][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.411434][ T35] Bluetooth: Error in BCSP hdr checksum [ 257.658142][ T35] Bluetooth: Error in BCSP hdr checksum [ 257.916670][ T1084] Bluetooth: Error in BCSP hdr checksum [ 258.176411][ T35] Bluetooth: Error in BCSP hdr checksum [ 258.328892][ T6881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.349902][ T6881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.376462][ T6881] bond0 (unregistering): Released all slaves [ 258.436955][ T1161] Bluetooth: Error in BCSP hdr checksum [ 258.585007][ T6881] hsr_slave_0: left promiscuous mode [ 258.604073][ T6881] hsr_slave_1: left promiscuous mode [ 258.610391][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.635673][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.774070][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 258.864040][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 258.922482][ T62] Bluetooth: Error in BCSP hdr checksum [ 259.171946][ T6016] Bluetooth: Error in BCSP hdr checksum [ 259.334782][ T5843] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 259.348170][ T5840] Bluetooth: hci6: command 0xfc11 tx timeout [ 259.436104][ T6016] Bluetooth: Error in BCSP hdr checksum [ 261.536850][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.543723][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.304739][ T7240] loop1: detected capacity change from 0 to 1024 [ 263.882046][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.916240][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.937700][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.951842][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.961910][ T6881] team0 (unregistering): Port device team_slave_1 removed [ 263.972471][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 263.980718][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.122713][ T6881] team0 (unregistering): Port device team_slave_0 removed [ 264.397669][ T7252] loop1: detected capacity change from 0 to 8 [ 264.419404][ T7252] SQUASHFS error: lzo decompression failed, data probably corrupt [ 264.430950][ T7252] SQUASHFS error: Failed to read block 0x1dd: -5 [ 264.437415][ T7252] SQUASHFS error: Unable to read metadata cache entry [1db] [ 264.444880][ T7252] SQUASHFS error: Unable to read inode 0xa7 [ 264.452455][ T7252] netlink: 'syz.1.295': attribute type 28 has an invalid length. [ 264.460344][ T7252] netlink: 55 bytes leftover after parsing attributes in process `syz.1.295'. [ 264.871545][ T7254] warning: `syz.4.296' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 266.853176][ T5843] Bluetooth: hci4: command tx timeout [ 267.279572][ T6889] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 267.504384][ T7245] chnl_net:caif_netlink_parms(): no params data found [ 267.521103][ T6889] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.546286][ T6889] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.580958][ T6889] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.746344][ T6881] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.924340][ T5843] Bluetooth: hci4: command tx timeout [ 268.996096][ T6881] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.508415][ T6881] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.802099][ T6881] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.005887][ T5843] Bluetooth: hci4: command tx timeout [ 271.727952][ T7245] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.741630][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.750294][ T7245] bridge_slave_0: entered allmulticast mode [ 271.767500][ T7245] bridge_slave_0: entered promiscuous mode [ 271.846463][ T6889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.891059][ T6889] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.920209][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.954513][ T5897] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 271.963754][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.986669][ T7245] bridge_slave_1: entered allmulticast mode [ 272.043224][ T7245] bridge_slave_1: entered promiscuous mode [ 272.973966][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 272.996027][ T5897] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 273.027393][ T5897] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 273.065930][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 273.095340][ T5843] Bluetooth: hci4: command tx timeout [ 273.101004][ T5897] usb 5-1: Product: syz [ 273.140718][ T5897] usb 5-1: Manufacturer: syz [ 273.161687][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.169017][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.184028][ T5897] usb 5-1: SerialNumber: syz [ 273.215393][ T5897] usb 5-1: config 0 descriptor?? [ 273.234006][ T7319] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 273.313022][ T7245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.380370][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.387662][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.412471][ T7245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.628179][ T7245] team0: Port device team_slave_0 added [ 274.761219][ T6910] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 274.788980][ T7332] loop1: detected capacity change from 0 to 32768 [ 274.799616][ T6910] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 274.820759][ T7332] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.310 (7332) [ 274.876597][ T7245] team0: Port device team_slave_1 added [ 274.922241][ T7332] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.966890][ T6910] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 274.987212][ T7332] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 275.010877][ T7332] BTRFS info (device loop1): using free-space-tree [ 275.033268][ T6910] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.208073][ T6881] bridge_slave_1: left allmulticast mode [ 275.213792][ T6881] bridge_slave_1: left promiscuous mode [ 275.254544][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.279389][ T6881] bridge_slave_0: left allmulticast mode [ 275.292347][ T6881] bridge_slave_0: left promiscuous mode [ 275.299531][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.353424][ T5833] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 276.354325][ T836] usb 5-1: USB disconnect, device number 3 [ 276.401070][ T7362] kvm: emulating exchange as write [ 276.863746][ T7367] loop1: detected capacity change from 0 to 1024 [ 277.016173][ T7367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.251185][ T29] audit: type=1800 audit(1738832612.749:57): pid=7367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.312" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 277.332782][ T7366] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 277.397307][ T7366] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 277.411659][ T7366] EXT4-fs (loop1): This should not happen!! Data will be lost [ 277.411659][ T7366] [ 277.422130][ T7366] EXT4-fs (loop1): Total free blocks count 0 [ 277.429027][ T7366] EXT4-fs (loop1): Free/Dirty block details [ 277.435552][ T7366] EXT4-fs (loop1): free_blocks=68451041280 [ 277.441463][ T7366] EXT4-fs (loop1): dirty_blocks=64 [ 277.447798][ T7366] EXT4-fs (loop1): Block reservation details [ 277.453992][ T7366] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 277.640374][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.757591][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.778335][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.789132][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.800214][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.809679][ T5840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.830982][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.063545][ T7388] sctp: [Deprecated]: syz.4.316 (pid 7388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.063545][ T7388] Use struct sctp_sack_info instead [ 278.180789][ T6881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.272685][ T6881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.369280][ T6881] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 278.586295][ T6881] bond0 (unregistering): Released all slaves [ 278.970977][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.991316][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.067366][ T7245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.197350][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.210496][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.296863][ T7245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.887693][ T5840] Bluetooth: hci5: command tx timeout [ 280.053625][ T7245] hsr_slave_0: entered promiscuous mode [ 280.080987][ T7245] hsr_slave_1: entered promiscuous mode [ 280.087656][ T7245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.103937][ T7245] Cannot create hsr debugfs directory [ 280.181466][ T6881] hsr_slave_0: left promiscuous mode [ 280.221394][ T6881] hsr_slave_1: left promiscuous mode [ 280.232956][ T6881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.258543][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.298742][ T6881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.316160][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.377800][ T7412] loop4: detected capacity change from 0 to 16 [ 280.386714][ T6881] veth1_macvtap: left promiscuous mode [ 280.392340][ T6881] veth0_macvtap: left promiscuous mode [ 280.400449][ T29] audit: type=1326 audit(1738832615.929:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.1.319" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05adb8cde9 code=0x0 [ 280.407148][ T6881] veth1_vlan: left promiscuous mode [ 280.438115][ T7412] erofs (device loop4): mounted with root inode @ nid 36. [ 280.467943][ T6881] veth0_vlan: left promiscuous mode [ 281.721497][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.747709][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.758900][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.767452][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.775980][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.783537][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.965039][ T5843] Bluetooth: hci5: command tx timeout [ 281.977628][ T6881] team0 (unregistering): Port device team_slave_1 removed [ 282.050135][ T6881] team0 (unregistering): Port device team_slave_0 removed [ 282.621320][ T7428] xt_TPROXY: Can be used only with -p tcp or -p udp [ 283.885025][ T5843] Bluetooth: hci1: command tx timeout [ 283.929480][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.051172][ T5843] Bluetooth: hci5: command tx timeout [ 284.501585][ T7437] loop1: detected capacity change from 0 to 8192 [ 284.623944][ T29] audit: type=1804 audit(1738832620.149:59): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.324" name="/newroot/98/file2/bus" dev="loop1" ino=138 res=1 errno=0 [ 284.860086][ T7380] chnl_net:caif_netlink_parms(): no params data found [ 285.037581][ T7442] syzkaller0: entered allmulticast mode [ 285.984309][ T5843] Bluetooth: hci1: command tx timeout [ 286.134096][ T5843] Bluetooth: hci5: command tx timeout [ 286.372416][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.390649][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.398631][ T7380] bridge_slave_0: entered allmulticast mode [ 286.423065][ T7380] bridge_slave_0: entered promiscuous mode [ 286.446015][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.453392][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.468978][ T7380] bridge_slave_1: entered allmulticast mode [ 286.487913][ T7380] bridge_slave_1: entered promiscuous mode [ 287.772051][ T7481] loop4: detected capacity change from 0 to 512 [ 287.864809][ T7481] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 288.044661][ T5843] Bluetooth: hci1: command tx timeout [ 288.078118][ T7481] EXT4-fs (loop4): 1 orphan inode deleted [ 288.084070][ T7481] EXT4-fs (loop4): 1 truncate cleaned up [ 288.189213][ T7481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.297405][ T7481] input: syz1 as /devices/virtual/input/input5 [ 288.403297][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.443372][ T7380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.320483][ T7380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.514704][ T7245] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 290.124132][ T5843] Bluetooth: hci1: command tx timeout [ 290.164928][ T7424] chnl_net:caif_netlink_parms(): no params data found [ 290.236173][ T7380] team0: Port device team_slave_0 added [ 290.260399][ T7380] team0: Port device team_slave_1 added [ 290.293779][ T7245] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 290.746425][ T7245] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 290.880424][ T7245] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 291.075615][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.119564][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.145674][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.266903][ T7380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.715133][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.722147][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.748150][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.816512][ T7380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.983191][ T7533] loop4: detected capacity change from 0 to 512 [ 292.037566][ T7533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.116756][ T7533] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.495862][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.530488][ T7542] loop4: detected capacity change from 512 to 0 [ 292.534274][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.571017][ T7424] bridge_slave_0: entered allmulticast mode [ 292.665967][ T7424] bridge_slave_0: entered promiscuous mode [ 292.866150][ T7533] syz.4.341: attempt to access beyond end of device [ 292.866150][ T7533] loop4: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 292.902269][ T7533] syz.4.341: attempt to access beyond end of device [ 292.902269][ T7533] loop4: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 292.932842][ T7533] syz.4.341: attempt to access beyond end of device [ 292.932842][ T7533] loop4: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 292.946456][ T7533] syz.4.341: attempt to access beyond end of device [ 292.946456][ T7533] loop4: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 292.979323][ T7533] EXT4-fs error (device loop4): ext4_get_inode_loc:4561: inode #2: block 34: comm syz.4.341: unable to read itable block [ 293.016562][ T7533] syz.4.341: attempt to access beyond end of device [ 293.016562][ T7533] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 293.045589][ T7380] hsr_slave_0: entered promiscuous mode [ 293.052374][ T7533] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 293.064220][ T7380] hsr_slave_1: entered promiscuous mode [ 293.072628][ T7533] EXT4-fs (loop4): I/O error while writing superblock [ 293.082063][ T7380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.084375][ T7533] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5826: IO failure [ 293.090261][ T7380] Cannot create hsr debugfs directory [ 293.106323][ T7533] syz.4.341: attempt to access beyond end of device [ 293.106323][ T7533] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 293.121788][ T7533] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 293.130817][ T7533] EXT4-fs (loop4): I/O error while writing superblock [ 293.138383][ T7533] EXT4-fs error (device loop4): ext4_dirty_inode:6030: inode #2: comm syz.4.341: mark_inode_dirty error [ 293.152320][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.160856][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.168569][ T7424] bridge_slave_1: entered allmulticast mode [ 293.184178][ T7533] syz.4.341: attempt to access beyond end of device [ 293.184178][ T7533] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 293.201344][ T7424] bridge_slave_1: entered promiscuous mode [ 293.233962][ T7533] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 293.263148][ T7533] EXT4-fs (loop4): I/O error while writing superblock [ 293.374708][ T5830] syz-executor: attempt to access beyond end of device [ 293.374708][ T5830] loop4: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 293.422527][ T7424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.464522][ T62] kworker/u8:4: attempt to access beyond end of device [ 293.464522][ T62] loop4: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 293.502742][ T62] kworker/u8:4: attempt to access beyond end of device [ 293.502742][ T62] loop4: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 293.555658][ T62] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4546: inode #2: block 34: comm kworker/u8:4: unable to read itable block [ 293.559830][ T7424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.589330][ T62] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 293.622538][ T62] EXT4-fs (loop4): I/O error while writing superblock [ 293.646718][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.704496][ T5830] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 293.725076][ T5830] EXT4-fs (loop4): I/O error while writing superblock [ 293.769814][ T7534] Buffer I/O error on dev loop4, logical block 12, lost sync page write [ 294.080726][ T7424] team0: Port device team_slave_0 added [ 294.173044][ T7424] team0: Port device team_slave_1 added [ 294.409527][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.440534][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.524275][ T7424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.566953][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.588742][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.626867][ T7424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.149191][ T7424] hsr_slave_0: entered promiscuous mode [ 295.173662][ T7424] hsr_slave_1: entered promiscuous mode [ 295.194520][ T7424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.212402][ T7424] Cannot create hsr debugfs directory [ 295.518565][ T7245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.532291][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 295.596085][ T5884] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 295.636970][ T7563] loop1: detected capacity change from 0 to 1024 [ 295.670322][ T7563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.714604][ T7563] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 295.793761][ T7563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.899496][ T836] kernel write not supported for file /uhid (pid: 836 comm: kworker/0:2) [ 295.909317][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.920639][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.930372][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.952378][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.966949][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 295.976038][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.031857][ T6881] bridge_slave_1: left allmulticast mode [ 296.039308][ T6881] bridge_slave_1: left promiscuous mode [ 296.047854][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.070476][ T6881] bridge_slave_0: left allmulticast mode [ 296.091153][ T6881] bridge_slave_0: left promiscuous mode [ 296.101459][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.130133][ T6881] bridge_slave_1: left allmulticast mode [ 296.136155][ T6881] bridge_slave_1: left promiscuous mode [ 296.141995][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.161654][ T6881] bridge_slave_0: left allmulticast mode [ 296.173938][ T6881] bridge_slave_0: left promiscuous mode [ 296.179805][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.252435][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.377593][ T7571] loop1: detected capacity change from 0 to 64 [ 297.734686][ T6881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.747941][ T6881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.796846][ T6881] bond0 (unregistering): Released all slaves [ 298.017127][ T6881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.044542][ T5843] Bluetooth: hci0: command tx timeout [ 298.045119][ T6881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.077345][ T6881] bond0 (unregistering): Released all slaves [ 298.119633][ T7577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.351'. [ 298.217434][ T7245] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.378084][ T7580] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.461177][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.468479][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.519127][ T6881] hsr_slave_0: left promiscuous mode [ 298.529375][ T6881] hsr_slave_1: left promiscuous mode [ 298.541295][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.550661][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.563266][ T6881] hsr_slave_0: left promiscuous mode [ 298.575658][ T6881] hsr_slave_1: left promiscuous mode [ 298.581710][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.590671][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.630164][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807abe1400: rx timeout, send abort [ 298.677226][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 298.880705][ T6881] team0 (unregistering): Port device team_slave_1 removed [ 298.890994][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 298.918651][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.939363][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.953302][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 298.966462][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.977742][ T6881] team0 (unregistering): Port device team_slave_0 removed [ 299.014582][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 299.023024][ T9] usb 2-1: invalid MIDI out EP 0 [ 299.141353][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807abe1400: abort rx timeout. Force session deactivation [ 299.283114][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 299.323253][ T9] usb 2-1: USB disconnect, device number 3 [ 299.540976][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.693802][ T6881] team0 (unregistering): Port device team_slave_1 removed [ 299.758201][ T6881] team0 (unregistering): Port device team_slave_0 removed [ 300.124137][ T5843] Bluetooth: hci0: command tx timeout [ 301.933542][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.940884][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.291776][ T5843] Bluetooth: hci0: command tx timeout [ 303.198955][ T7598] dccp_close: ABORT with 52 bytes unread [ 303.223682][ T7568] chnl_net:caif_netlink_parms(): no params data found [ 303.452414][ T7245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.463311][ T7245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.179011][ T7380] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.193207][ T7380] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.315168][ T7568] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.329101][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.336661][ T7568] bridge_slave_0: entered allmulticast mode [ 304.344084][ T7568] bridge_slave_0: entered promiscuous mode [ 304.380467][ T5843] Bluetooth: hci0: command tx timeout [ 304.420527][ T7380] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.438536][ T7380] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 304.476247][ T7568] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.490569][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.498228][ T7568] bridge_slave_1: entered allmulticast mode [ 304.508171][ T7568] bridge_slave_1: entered promiscuous mode [ 304.670732][ T7568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.758400][ T7568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.908714][ T7568] team0: Port device team_slave_0 added [ 304.976211][ T7568] team0: Port device team_slave_1 added [ 304.989403][ T7245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.217644][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.250608][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.282796][ T7568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.440338][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.462242][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.573398][ T7568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.841221][ T7424] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 305.918755][ T7424] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.002748][ T7568] hsr_slave_0: entered promiscuous mode [ 306.055533][ T7568] hsr_slave_1: entered promiscuous mode [ 306.061827][ T7568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.113950][ T7568] Cannot create hsr debugfs directory [ 306.155600][ T7424] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.764193][ T7424] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 307.141784][ T7245] veth0_vlan: entered promiscuous mode [ 307.165516][ T7380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.278510][ T7380] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.312422][ T7245] veth1_vlan: entered promiscuous mode [ 307.350554][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.357883][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.532024][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.539222][ T6881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.615411][ T7245] veth0_macvtap: entered promiscuous mode [ 307.622810][ T7568] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 307.730359][ T7568] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 307.773760][ T7568] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 308.054519][ T7245] veth1_macvtap: entered promiscuous mode [ 308.080595][ T7568] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 309.042506][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.053989][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.072209][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.091375][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.135543][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.220689][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.232320][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.247474][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.294744][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.363089][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.861350][ T7245] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.913612][ T7245] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.967078][ T7245] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.084355][ T7245] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.160010][ T7424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.505621][ T7424] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.501534][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.509329][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.621605][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.628923][ T6881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.784201][ T6192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.792101][ T6192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.837955][ T7380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.997996][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.010235][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.018735][ T7424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.196705][ T7568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.318098][ T7568] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.392966][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.400310][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.522358][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.529630][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.759650][ T7568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.771804][ T5840] Bluetooth: hci0: command 0x0405 tx timeout [ 314.115373][ T7380] veth0_vlan: entered promiscuous mode [ 314.177761][ T7380] veth1_vlan: entered promiscuous mode [ 314.460274][ T7380] veth0_macvtap: entered promiscuous mode [ 314.542612][ T7380] veth1_macvtap: entered promiscuous mode [ 314.650662][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.662531][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.673303][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.686265][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.706460][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.718969][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.735797][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.779683][ T7424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.861263][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.882392][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.934454][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.949405][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.970904][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.012437][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.056198][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.120438][ T7380] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.159324][ T7380] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.200717][ T7380] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.273939][ T7380] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.420711][ T7568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.801455][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.847071][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.980956][ T6192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.999229][ T6192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.129815][ T7424] veth0_vlan: entered promiscuous mode [ 316.238395][ T7424] veth1_vlan: entered promiscuous mode [ 316.428357][ T7704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.195491][ T7424] veth0_macvtap: entered promiscuous mode [ 317.514422][ T7424] veth1_macvtap: entered promiscuous mode [ 317.852911][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.874809][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.903933][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.915018][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.925352][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.938727][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.949127][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.968515][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.991659][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.066335][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.082939][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.104534][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.130769][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.147991][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.180616][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.206901][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.230823][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.245437][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.258696][ T7568] veth0_vlan: entered promiscuous mode [ 318.295390][ T7424] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.311050][ T7424] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.322558][ T7424] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.348527][ T7424] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.377981][ T7568] veth1_vlan: entered promiscuous mode [ 318.464426][ T7715] netlink: 36 bytes leftover after parsing attributes in process `syz.1.376'. [ 318.488051][ T7715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.376'. [ 318.503764][ T7715] netlink: 36 bytes leftover after parsing attributes in process `syz.1.376'. [ 318.521764][ T7715] netlink: 36 bytes leftover after parsing attributes in process `syz.1.376'. [ 318.531258][ T7568] veth0_macvtap: entered promiscuous mode [ 318.579747][ T7568] veth1_macvtap: entered promiscuous mode [ 318.650879][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.668756][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.698061][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.712380][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.726731][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.737580][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.753913][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.770385][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.780502][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.800276][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.812046][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.825593][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.842836][ T7568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.916184][ T6194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.924389][ T6194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.939875][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.962487][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.983966][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.994651][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.023109][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.041055][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.052478][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.070305][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.081713][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.103433][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.118587][ T7568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.165998][ T7568] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.182798][ T7568] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.199939][ T7568] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.220294][ T7568] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.453119][ T6182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.486200][ T6182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.068578][ T6192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.229296][ T6192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.676462][ T7733] loop6: detected capacity change from 0 to 1024 [ 320.705722][ T7733] EXT4-fs: Ignoring removed oldalloc option [ 320.730241][ T7733] EXT4-fs: Mount option(s) incompatible with ext3 [ 321.597213][ T7744] Unsupported ieee802154 address type: 0 [ 322.851527][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.861886][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.807450][ T7763] loop5: detected capacity change from 0 to 256 [ 324.602122][ T7763] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 324.917127][ T29] audit: type=1800 audit(1738832660.439:60): pid=7763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.387" name="file7" dev="loop5" ino=144 res=0 errno=0 [ 325.034444][ T7771] xt_CT: No such helper "syz0" [ 325.329981][ T29] audit: type=1800 audit(1738832660.849:61): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.392" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 325.456779][ T5843] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 326.399418][ T7791] netlink: 'syz.6.395': attribute type 4 has an invalid length. [ 326.574368][ T7791] netlink: 'syz.6.395': attribute type 4 has an invalid length. [ 326.621539][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.798467][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 326.885457][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 327.160363][ T7813] cgroup: noprefix used incorrectly [ 328.521790][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 331.766912][ T7863] loop5: detected capacity change from 0 to 512 [ 331.882462][ T7863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 331.946146][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.8.415'. [ 332.071828][ T7380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.461417][ T7881] ipt_REJECT: TCP_RESET invalid for non-tcp [ 333.980759][ T7875] loop1: detected capacity change from 0 to 512 [ 334.028130][ T7875] EXT4-fs: Ignoring removed orlov option [ 334.077200][ T7875] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 334.222544][ T7875] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.419: casefold flag without casefold feature [ 334.354313][ T7875] EXT4-fs (loop1): Remounting filesystem read-only [ 334.452567][ T7875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.411289][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.422'. [ 335.426839][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.675376][ C0] vcan0: j1939_session_tx_dat: 0xffff888059432c00: queue data error: -100 [ 335.707859][ T7899] process 'syz.8.425' launched './file0' with NULL argv: empty string added [ 336.077784][ T6182] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.441647][ T6182] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.842299][ T6182] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.944783][ T29] audit: type=1800 audit(1738832673.469:62): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.433" name="/" dev="9p" ino=2 res=0 errno=0 [ 337.968006][ T7936] netfs: Couldn't get user pages (rc=-14) [ 337.995851][ T7938] 9pnet_fd: Insufficient options for proto=fd [ 338.058886][ T7936] netfs: Zero-sized read [R=8] [ 338.247167][ T6182] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.263388][ T7945] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1738832673 (3477665346 ns) > initial count (12 ns). Using initial count to start timer. [ 338.820011][ T7955] netlink: 56 bytes leftover after parsing attributes in process `syz.1.436'. [ 339.267328][ T6182] bridge_slave_1: left allmulticast mode [ 339.311823][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.332386][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.362276][ T6182] bridge_slave_1: left promiscuous mode [ 339.378126][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.403022][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.411201][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.419296][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.461546][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.218590][ T6182] bridge_slave_0: left allmulticast mode [ 340.270845][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.8.438'. [ 340.323981][ T6182] bridge_slave_0: left promiscuous mode [ 340.329877][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.564775][ T5840] Bluetooth: hci3: command tx timeout [ 342.757107][ T7975] loop1: detected capacity change from 0 to 4096 [ 342.920420][ T7979] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.015677][ T29] audit: type=1804 audit(1738832678.539:63): pid=7975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.440" name="/newroot/152/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 343.075622][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.7.442'. [ 343.096031][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.7.442'. [ 343.172636][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069731800: rx timeout, send abort [ 343.190508][ T29] audit: type=1804 audit(1738832678.559:64): pid=7975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.440" name="/newroot/152/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 343.311022][ T29] audit: type=1804 audit(1738832678.559:65): pid=7975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.440" name="/newroot/152/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 343.369562][ T29] audit: type=1804 audit(1738832678.559:66): pid=7975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.440" name="/newroot/152/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 343.644311][ T5840] Bluetooth: hci3: command tx timeout [ 343.682407][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069731800: abort rx timeout. Force session deactivation [ 344.304988][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.444'. [ 344.596412][ T6182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.623383][ T6182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.640206][ T6182] bond0 (unregistering): Released all slaves [ 347.031474][ T5840] Bluetooth: hci3: command tx timeout [ 349.943366][ T5840] Bluetooth: hci3: command tx timeout [ 350.463977][ T6182] hsr_slave_0: left promiscuous mode [ 350.566791][ T6182] hsr_slave_1: left promiscuous mode [ 350.573169][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.602392][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.608677][ T8033] loop7: detected capacity change from 0 to 4096 [ 350.626500][ T8037] loop1: detected capacity change from 0 to 512 [ 350.834372][ T5884] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 351.012868][ T8037] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 351.386812][ T8037] EXT4-fs (loop1): mount failed [ 351.396029][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.465029][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.615591][ T5884] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.642057][ T6182] veth1_macvtap: left promiscuous mode [ 351.672920][ T5884] usb 7-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 351.683513][ T6182] veth0_macvtap: left promiscuous mode [ 351.699090][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.711622][ T6182] veth1_vlan: left promiscuous mode [ 351.740971][ T6182] veth0_vlan: left promiscuous mode [ 351.747923][ T8048] netlink: 'syz.1.454': attribute type 4 has an invalid length. [ 351.846552][ T5884] usb 7-1: config 0 descriptor?? [ 352.457569][ T8036] serio: Serial port ptm0 [ 352.520525][ T5884] usb 7-1: USB disconnect, device number 2 [ 354.263414][ T8059] loop7: detected capacity change from 0 to 1024 [ 354.296325][ T8059] EXT4-fs: Ignoring removed oldalloc option [ 354.321612][ T8059] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 354.407804][ T8059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.474920][ T5840] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 354.488680][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: kworker/u9:3 Not tainted 6.14.0-rc1-next-20250206-syzkaller #0 [ 354.488714][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 354.488728][ T5840] Workqueue: hci4 hci_rx_work [ 354.488785][ T5840] Call Trace: [ 354.488794][ T5840] [ 354.488805][ T5840] dump_stack_lvl+0x241/0x360 [ 354.488840][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.488877][ T5840] ? __pfx__printk+0x10/0x10 [ 354.488922][ T5840] ? __kmalloc_cache_noprof+0x243/0x390 [ 354.488948][ T5840] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 354.488990][ T5840] sysfs_create_dir_ns+0x2ce/0x3a0 [ 354.489031][ T5840] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 354.489083][ T5840] kobject_add_internal+0x435/0x8d0 [ 354.489130][ T5840] kobject_add+0x152/0x220 [ 354.489160][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 354.489186][ T5840] ? device_add+0x3e7/0xbf0 [ 354.489218][ T5840] ? __pfx_kobject_add+0x10/0x10 [ 354.489249][ T5840] ? _raw_spin_unlock+0x28/0x50 [ 354.489278][ T5840] ? get_device_parent+0x165/0x410 [ 354.489317][ T5840] device_add+0x4e5/0xbf0 [ 354.489363][ T5840] hci_conn_add_sysfs+0xe8/0x200 [ 354.489399][ T5840] le_conn_complete_evt+0xc9f/0x12e0 [ 354.489448][ T5840] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 354.489471][ T5840] ? __mutex_unlock_slowpath+0x227/0x800 [ 354.489514][ T5840] ? skb_pull_data+0x112/0x230 [ 354.489547][ T5840] hci_le_enh_conn_complete_evt+0x185/0x420 [ 354.489588][ T5840] hci_event_packet+0xa55/0x1540 [ 354.489639][ T5840] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 354.489675][ T5840] ? __pfx_hci_event_packet+0x10/0x10 [ 354.489707][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 354.489746][ T5840] ? hci_send_to_monitor+0xd8/0x7f0 [ 354.489773][ T5840] ? kcov_remote_start+0x97/0x7d0 [ 354.489808][ T5840] hci_rx_work+0x3f3/0xdb0 [ 354.489856][ T5840] ? process_scheduled_works+0x976/0x1840 [ 354.489885][ T5840] process_scheduled_works+0xa66/0x1840 [ 354.489965][ T5840] ? __pfx_process_scheduled_works+0x10/0x10 [ 354.490011][ T5840] ? assign_work+0x364/0x3d0 [ 354.490048][ T5840] worker_thread+0x870/0xd30 [ 354.490102][ T5840] ? __kthread_parkme+0x169/0x1d0 [ 354.490139][ T5840] ? __pfx_worker_thread+0x10/0x10 [ 354.490167][ T5840] kthread+0x7a9/0x920 [ 354.490195][ T5840] ? __pfx_kthread+0x10/0x10 [ 354.490231][ T5840] ? __pfx_worker_thread+0x10/0x10 [ 354.490259][ T5840] ? __pfx_kthread+0x10/0x10 [ 354.490286][ T5840] ? __pfx_kthread+0x10/0x10 [ 354.490324][ T5840] ? __pfx_kthread+0x10/0x10 [ 354.490352][ T5840] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.490374][ T5840] ? lockdep_hardirqs_on+0x99/0x150 [ 354.490397][ T5840] ? __pfx_kthread+0x10/0x10 [ 354.490431][ T5840] ret_from_fork+0x4b/0x80 [ 354.490458][ T5840] ? __pfx_kthread+0x10/0x10 [ 354.490490][ T5840] ret_from_fork_asm+0x1a/0x30 [ 354.490544][ T5840] [ 354.490582][ T5840] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 355.107778][ T7245] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.373386][ T5840] Bluetooth: hci4: failed to register connection device [ 355.523452][ T8071] Bluetooth: MGMT ver 1.23 [ 357.412876][ T5843] Bluetooth: hci4: command tx timeout [ 357.514368][ T8083] loop8: detected capacity change from 0 to 47 [ 357.781470][ T6182] team0 (unregistering): Port device team_slave_1 removed [ 357.983082][ T6182] team0 (unregistering): Port device team_slave_0 removed [ 358.869785][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.8.469'. [ 359.343383][ T8099] loop6: detected capacity change from 0 to 2048 [ 359.485590][ T8099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.640155][ T7961] chnl_net:caif_netlink_parms(): no params data found [ 361.416750][ T8127] IPVS: length: 198 != 24 [ 364.362092][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.421553][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.439598][ T8138] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 364.450647][ T7961] bridge_slave_0: entered allmulticast mode [ 364.473761][ T8138] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 364.497224][ T8138] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 364.520568][ T7961] bridge_slave_0: entered promiscuous mode [ 364.552061][ T8146] netlink: 'syz.6.482': attribute type 3 has an invalid length. [ 364.603513][ T8138] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 364.624899][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.6.482'. [ 364.636949][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.658326][ T8138] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 364.690837][ T8138] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 364.715217][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.727760][ T8138] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 364.750783][ T7961] bridge_slave_1: entered allmulticast mode [ 364.772331][ T8138] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 364.786800][ T7961] bridge_slave_1: entered promiscuous mode [ 364.829748][ T8138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.848930][ T8138] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 364.912428][ T8138] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 364.969664][ T8138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 364.994828][ T8138] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 365.042123][ T8138] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 365.289647][ T7961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.264741][ T7961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.450126][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 366.524095][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 366.824750][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.856941][ T5843] Bluetooth: hci0: command 0x0405 tx timeout [ 367.873966][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.975391][ T7961] team0: Port device team_slave_0 added [ 368.011058][ T7961] team0: Port device team_slave_1 added [ 368.428492][ T8174] block device autoloading is deprecated and will be removed. [ 368.512270][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.557679][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.623394][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 368.711962][ T7961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.746852][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.764107][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 369.772578][ T5843] Bluetooth: hci0: command 0x0405 tx timeout [ 369.886536][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 369.994660][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.054040][ T7961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.761190][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 372.122378][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 372.122399][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 372.136687][ T5843] Bluetooth: hci0: command 0x0405 tx timeout [ 372.608970][ T7961] hsr_slave_0: entered promiscuous mode [ 372.624890][ T7961] hsr_slave_1: entered promiscuous mode [ 372.985786][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 373.004824][ T7961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.012802][ T7961] Cannot create hsr debugfs directory [ 374.419663][ T8218] loop8: detected capacity change from 0 to 2048 [ 374.674038][ T8226] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.803601][ T29] audit: type=1804 audit(1738832710.319:67): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.496" name="/newroot/29/bus/file1" dev="loop8" ino=18 res=1 errno=0 [ 375.091724][ T8226] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 375.166668][ T8226] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 375.271710][ T8226] Remounting filesystem read-only [ 375.512886][ T7568] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 376.591293][ T7961] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 377.083188][ T7961] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 377.564904][ T7961] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 377.679209][ T7961] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 378.453603][ T7961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.591528][ T7961] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.657124][ T6188] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.664454][ T6188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.929474][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.936743][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.770939][ T7961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.322353][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.329178][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.497096][ T8320] loop6: detected capacity change from 0 to 512 [ 385.538975][ T8320] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 385.652848][ T8320] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.514: casefold flag without casefold feature [ 385.741806][ T8320] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.514: couldn't read orphan inode 15 (err -117) [ 385.921927][ T8330] bio_check_eod: 4 callbacks suppressed [ 385.921975][ T8330] syz.7.515: attempt to access beyond end of device [ 385.921975][ T8330] nbd7: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 385.941306][ T8330] gfs2: error -5 reading superblock [ 386.666310][ T8320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.732011][ T8329] gtp0: entered promiscuous mode [ 386.830145][ T7961] veth0_vlan: entered promiscuous mode [ 386.986036][ T7961] veth1_vlan: entered promiscuous mode [ 387.148222][ T7961] veth0_macvtap: entered promiscuous mode [ 387.173665][ T7961] veth1_macvtap: entered promiscuous mode [ 387.257402][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.268062][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.279448][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.300292][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.124388][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.135594][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.146231][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.234019][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.256649][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.270433][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.289966][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.330409][ T7424] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.349524][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.398906][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.410901][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.456680][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.503949][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.582788][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.799168][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.985989][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.120710][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.322626][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.350534][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.400099][ T8355] netlink: 830 bytes leftover after parsing attributes in process `syz.7.522'. [ 389.509207][ T7961] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.538869][ T7961] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.557650][ T7961] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.588491][ T7961] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.516361][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.551477][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.610180][ T8385] syz.1.529 uses obsolete (PF_INET,SOCK_PACKET) [ 390.672581][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.710377][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.788409][ T8387] loop6: detected capacity change from 0 to 4096 [ 390.867885][ T8387] NILFS (loop6): invalid segment: Checksum error in segment payload [ 390.895354][ T8387] NILFS (loop6): trying rollback from an earlier position [ 391.031352][ T8387] NILFS (loop6): recovery complete [ 391.066046][ T8394] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 393.100615][ T8412] loop6: detected capacity change from 0 to 512 [ 393.170919][ T8412] EXT4-fs: Ignoring removed orlov option [ 393.217067][ T8412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 393.297584][ T8412] EXT4-fs (loop6): orphan cleanup on readonly fs [ 393.408221][ T8412] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.533: bg 0: block 248: padding at end of block bitmap is not set [ 393.532053][ T8412] Quota error (device loop6): write_blk: dquota write failed [ 393.563472][ T8430] trusted_key: encrypted_key: insufficient parameters specified [ 393.601714][ T8412] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 393.683676][ T8412] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.533: Failed to acquire dquot type 1 [ 393.736608][ T8412] EXT4-fs (loop6): 1 truncate cleaned up [ 393.864952][ T8412] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 394.007588][ T8433] loop1: detected capacity change from 0 to 8 [ 394.716003][ T8435] loop7: detected capacity change from 0 to 4096 [ 395.067733][ T8447] loop1: detected capacity change from 0 to 512 [ 395.114732][ T8447] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 395.211640][ T8447] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 395.275982][ T8447] EXT4-fs (loop1): 1 truncate cleaned up [ 395.310635][ T8447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.487708][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 395.785404][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.838393][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.849877][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.869012][ T8463] delete_channel: no stack [ 395.876414][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 395.925748][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.957153][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.993551][ T9] usb 9-1: config 0 descriptor?? [ 397.653458][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 397.766786][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 397.856045][ T7424] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.874512][ T8481] loop1: detected capacity change from 0 to 512 [ 398.220195][ T54] Bluetooth: hci3: unexpected event for opcode 0x041a [ 400.014807][ T25] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 400.072621][ T8485] loop9: detected capacity change from 0 to 1024 [ 400.087553][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 400.255127][ T8485] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.287356][ T8485] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.809863][ T8515] loop8: detected capacity change from 0 to 256 [ 400.918323][ T5908] usb 9-1: USB disconnect, device number 2 [ 400.966749][ T8515] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 401.280383][ T7961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.520475][ T8515] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff) [ 402.489958][ T8535] loop9: detected capacity change from 0 to 128 [ 404.901589][ T8562] loop6: detected capacity change from 0 to 128 [ 404.948250][ T8562] netlink: 24 bytes leftover after parsing attributes in process `syz.6.562'. [ 406.053107][ T8581] Process accounting resumed [ 406.080669][ T29] audit: type=1804 audit(1738832741.609:68): pid=8581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.566" name="/newroot/42/bus/bus" dev="overlay" ino=256 res=1 errno=0 [ 411.363624][ T8607] loop6: detected capacity change from 0 to 1024 [ 411.496209][ T8607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.663071][ T8616] loop1: detected capacity change from 0 to 512 [ 411.709314][ T8616] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 411.741961][ T8616] EXT4-fs (loop1): invalid journal inode [ 411.763349][ T8616] EXT4-fs (loop1): can't get journal size [ 411.843251][ T8616] EXT4-fs (loop1): 1 truncate cleaned up [ 411.878710][ T8616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.136075][ T8639] EXT4-fs (loop1): shut down requested (2) [ 412.146477][ T5844] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 412.229854][ T29] audit: type=1800 audit(1738832747.759:69): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.573" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 412.258190][ T7424] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.336564][ T5844] usb 10-1: Using ep0 maxpacket: 16 [ 412.369791][ T5844] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 412.383952][ T5844] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.414793][ T5844] usb 10-1: config 0 has no interface number 0 [ 412.461053][ T5844] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 412.518597][ T5844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.558252][ T5844] usb 10-1: Product: syz [ 412.584634][ T5844] usb 10-1: Manufacturer: syz [ 412.589452][ T5844] usb 10-1: SerialNumber: syz [ 412.603112][ T5844] usb 10-1: config 0 descriptor?? [ 412.625965][ T5844] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 412.646094][ T5844] usb 10-1: No valid video chain found. [ 412.829191][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.860373][ T5844] usb 10-1: USB disconnect, device number 2 [ 413.057061][ T8664] loop1: detected capacity change from 0 to 8 [ 413.079279][ T8664] SQUASHFS error: Unknown LZ4 version [ 413.107798][ T8664] squashfs image failed sanity check [ 413.129393][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802425e000: rx timeout, send abort [ 413.138053][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802425e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 413.536208][ T8671] loop7: detected capacity change from 0 to 2048 [ 413.636697][ T8675] netlink: 36 bytes leftover after parsing attributes in process `syz.9.581'. [ 413.668124][ T8675] netlink: 16 bytes leftover after parsing attributes in process `syz.9.581'. [ 413.809475][ T8675] netlink: 36 bytes leftover after parsing attributes in process `syz.9.581'. [ 413.832374][ T8675] netlink: 36 bytes leftover after parsing attributes in process `syz.9.581'. [ 413.888035][ T8679] loop6: detected capacity change from 0 to 8 [ 414.578670][ T8678] netlink: 32 bytes leftover after parsing attributes in process `syz.7.580'. [ 415.216546][ T29] audit: type=1326 audit(1738832750.719:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 415.306551][ T29] audit: type=1326 audit(1738832750.719:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 415.551191][ T29] audit: type=1326 audit(1738832750.729:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 415.574972][ T29] audit: type=1326 audit(1738832750.729:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 416.493269][ T29] audit: type=1326 audit(1738832750.729:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 416.516650][ T29] audit: type=1326 audit(1738832750.729:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 416.709998][ T29] audit: type=1326 audit(1738832750.729:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 416.823322][ T29] audit: type=1326 audit(1738832750.729:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 416.943946][ T29] audit: type=1326 audit(1738832750.729:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 417.168364][ T8707] netlink: 'syz.9.588': attribute type 10 has an invalid length. [ 417.653601][ T8707] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.299879][ T8707] bond0: (slave team0): Enslaving as an active interface with an up link [ 419.154799][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'. [ 419.214789][ T8731] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.303604][ T8732] bond1: entered promiscuous mode [ 419.309381][ T8732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.412066][ T8735] loop9: detected capacity change from 0 to 2048 [ 419.503426][ T8735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.544063][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 420.195553][ T9] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 420.206054][ T8747] loop6: detected capacity change from 0 to 1024 [ 420.333901][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 420.340336][ T8747] hfsplus: request for non-existent node 196608 in B*Tree [ 420.398958][ T8747] hfsplus: request for non-existent node 196608 in B*Tree [ 420.496595][ T8747] hfsplus: failed to load root directory [ 420.511610][ T9] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.689594][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 420.844196][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.914897][ T8747] loop6: detected capacity change from 0 to 256 [ 420.926233][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 420.935663][ T8747] exfat: Invalid uid '0x00000000ffffffff' [ 421.002783][ T9] usb 9-1: invalid MIDI out EP 0 [ 421.119626][ T8747] loop6: detected capacity change from 0 to 2048 [ 421.230461][ T8747] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 421.278386][ T8747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.907671][ T9] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 422.174839][ T9] usb 9-1: USB disconnect, device number 3 [ 422.499850][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.660678][ T8765] loop6: detected capacity change from 0 to 16 [ 422.670594][ T8741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.705725][ T8741] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 422.716690][ T8765] erofs (device loop6): mounted with root inode @ nid 36. [ 422.753539][ T8765] tipc: Can't bind to reserved service type 1 [ 422.761377][ T8741] bond1: (slave vti0): Error -95 calling set_mac_address [ 422.854290][ T5844] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 423.864175][ T5844] usb 9-1: Using ep0 maxpacket: 8 [ 423.904852][ T5844] usb 9-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec [ 423.973993][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.529433][ T5844] usb 9-1: config 0 descriptor?? [ 424.621496][ T5844] ttusb_dec_send_command: command bulk message failed: error -22 [ 424.724352][ T5844] ttusb-dec 9-1:0.0: probe with driver ttusb-dec failed with error -22 [ 424.998188][ T8795] loop1: detected capacity change from 0 to 2048 [ 425.075679][ T8797] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 426.395568][ T8804] loop7: detected capacity change from 0 to 512 [ 426.961517][ T8804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.994704][ T976] usb 9-1: USB disconnect, device number 4 [ 427.003082][ T8804] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 428.103385][ T8819] netlink: 36 bytes leftover after parsing attributes in process `syz.8.611'. [ 428.150099][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.8.611'. [ 428.214186][ T8819] netlink: 36 bytes leftover after parsing attributes in process `syz.8.611'. [ 428.265304][ T8819] netlink: 36 bytes leftover after parsing attributes in process `syz.8.611'. [ 428.299228][ T7245] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.057681][ T8829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.000237][ T8845] loop1: detected capacity change from 0 to 2048 [ 432.297504][ T8859] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 432.649183][ T8867] ufs: You didn't specify the type of your ufs filesystem [ 432.649183][ T8867] [ 432.649183][ T8867] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 432.649183][ T8867] [ 432.649183][ T8867] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 432.694487][ T8867] ufs: ufstype=old is supported read-only [ 432.702783][ T8867] syz.7.621: attempt to access beyond end of device [ 432.702783][ T8867] nbd7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 434.023928][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 434.023949][ T29] audit: type=1800 audit(1738832768.939:86): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.616" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 434.069923][ T8859] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 434.272310][ T8859] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 434.523984][ T29] audit: type=1804 audit(1738832768.939:87): pid=8845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.616" name="/newroot/193/bus/file1" dev="loop1" ino=18 res=1 errno=0 [ 434.643168][ T8859] Remounting filesystem read-only [ 434.683389][ T5833] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 434.722086][ T8879] loop6: detected capacity change from 0 to 512 [ 434.805711][ T8879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.036932][ T8879] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 435.762205][ T7424] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.431050][ T8901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.303014][ T8907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.432469][ T8914] loop7: detected capacity change from 0 to 512 [ 437.983917][ T8914] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 438.231526][ T8914] EXT4-fs (loop7): 1 orphan inode deleted [ 438.240667][ T8914] EXT4-fs (loop7): 1 truncate cleaned up [ 438.255680][ T8914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.396163][ T8914] input: syz1 as /devices/virtual/input/input6 [ 440.659709][ T8882] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 441.134295][ T8882] EXT4-fs (loop7): Remounting filesystem read-only [ 441.155316][ T7245] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.947918][ T8966] cgroup: noprefix used incorrectly [ 445.178731][ T8969] loop9: detected capacity change from 0 to 512 [ 445.194378][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.642'. [ 445.203182][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.642'. [ 445.341596][ T8969] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.414306][ T8969] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 445.493686][ T8979] netlink: 20 bytes leftover after parsing attributes in process `syz.6.647'. [ 445.626056][ T8981] loop1: detected capacity change from 0 to 16 [ 445.656442][ T8981] erofs (device loop1): mounted with root inode @ nid 36. [ 445.717336][ T7961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.762365][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.778444][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.820099][ T8985] loop8: detected capacity change from 0 to 512 [ 445.936051][ T8985] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 446.124679][ T8985] EXT4-fs (loop8): 1 orphan inode deleted [ 446.151959][ T8985] EXT4-fs (loop8): 1 truncate cleaned up [ 447.247995][ T8985] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.442897][ T8985] input: syz1 as /devices/virtual/input/input7 [ 449.385911][ T7568] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.506526][ T9009] input: syz0 as /devices/virtual/input/input8 [ 452.473349][ T9032] netlink: 'syz.1.658': attribute type 1 has an invalid length. [ 455.905873][ T9043] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 458.073707][ T9077] loop1: detected capacity change from 0 to 128 [ 458.100872][ T9077] ufs: You didn't specify the type of your ufs filesystem [ 458.100872][ T9077] [ 458.100872][ T9077] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 458.100872][ T9077] [ 458.100872][ T9077] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 458.156493][ T9079] loop9: detected capacity change from 0 to 512 [ 458.186721][ T9079] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 458.233132][ T9079] EXT4-fs (loop9): 1 orphan inode deleted [ 458.270150][ T9079] EXT4-fs (loop9): 1 truncate cleaned up [ 458.335251][ T9077] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 458.355479][ T9079] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.495234][ T9079] input: syz1 as /devices/virtual/input/input9 [ 459.468768][ T7961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.935277][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.259232][ T9109] loop9: detected capacity change from 0 to 2048 [ 460.310906][ T9109] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.137400][ T9187] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 470.040004][ T9207] loop6: detected capacity change from 0 to 2048 [ 470.105131][ T9207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.452284][ T25] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 473.378261][ T25] usb 9-1: Using ep0 maxpacket: 32 [ 473.409075][ T25] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.440903][ T25] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 473.492969][ T25] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 473.592041][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.834556][ T25] usb 9-1: config 0 descriptor?? [ 474.963978][ T25] usb 9-1: can't set config #0, error -71 [ 474.997680][ T25] usb 9-1: USB disconnect, device number 5 [ 477.188524][ T9259] xt_nat: multiple ranges no longer supported [ 481.394048][ T25] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 481.416159][ T9290] netlink: 168 bytes leftover after parsing attributes in process `syz.1.720'. [ 482.583449][ T9300] loop6: detected capacity change from 0 to 8 [ 482.823892][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 482.863977][ T25] usb 10-1: config 0 has an invalid interface number: 147 but max is 0 [ 482.872970][ T25] usb 10-1: config 0 has no interface number 0 [ 483.621418][ T9300] SQUASHFS error: Unable to read inode 0x11f [ 484.099595][ T25] usb 10-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=55.dc [ 484.114475][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.122618][ T25] usb 10-1: Product: syz [ 484.136938][ T25] usb 10-1: config 0 descriptor?? [ 484.142626][ T25] usb 10-1: can't set config #0, error -71 [ 484.155402][ T25] usb 10-1: USB disconnect, device number 3 [ 484.399392][ T9310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.430204][ T9312] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 484.448473][ T9312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.829819][ T9328] loop8: detected capacity change from 0 to 1764 [ 493.125382][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.147450][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 493.184113][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 493.213571][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 493.237540][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 493.280490][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.511980][ T9398] loop6: detected capacity change from 0 to 2048 [ 494.699680][ T9398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.142740][ T9409] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 496.144491][ T54] Bluetooth: hci5: command tx timeout [ 496.766980][ T25] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 496.820947][ T7424] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.912157][ T9387] chnl_net:caif_netlink_parms(): no params data found [ 496.973326][ T25] usb 9-1: config 0 has an invalid interface number: 182 but max is 0 [ 497.009211][ T25] usb 9-1: config 0 has no interface number 0 [ 497.042874][ T25] usb 9-1: New USB device found, idVendor=19d2, idProduct=0038, bcdDevice=65.86 [ 497.083902][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.143112][ T25] usb 9-1: Product: syz [ 497.159822][ T25] usb 9-1: Manufacturer: syz [ 497.181530][ T25] usb 9-1: SerialNumber: syz [ 497.255460][ T25] usb 9-1: config 0 descriptor?? [ 498.311109][ T54] Bluetooth: hci5: command tx timeout [ 499.071846][ T25] usb 9-1: can't set config #0, error -71 [ 499.222145][ T25] usb 9-1: USB disconnect, device number 6 [ 500.463865][ T54] Bluetooth: hci5: command tx timeout [ 501.068214][ T9463] netlink: 16 bytes leftover after parsing attributes in process `syz.6.755'. [ 502.074162][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.081406][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.113071][ T9387] bridge_slave_0: entered allmulticast mode [ 502.132378][ T9387] bridge_slave_0: entered promiscuous mode [ 502.169342][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.207160][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.229787][ T9387] bridge_slave_1: entered allmulticast mode [ 502.284713][ T9387] bridge_slave_1: entered promiscuous mode [ 502.525590][ T54] Bluetooth: hci5: command tx timeout [ 502.977669][ T9387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.087181][ T9387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.463657][ T9387] team0: Port device team_slave_0 added [ 503.502403][ T9387] team0: Port device team_slave_1 added [ 503.574505][ T5844] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 504.397029][ T5844] usb 10-1: config index 0 descriptor too short (expected 9318, got 36) [ 504.481395][ T5844] usb 10-1: config 82 has too many interfaces: 201, using maximum allowed: 32 [ 504.516658][ T5844] usb 10-1: config 82 has 1 interface, different from the descriptor's value: 201 [ 504.563199][ T5844] usb 10-1: config 82 has no interface number 0 [ 504.598642][ T5844] usb 10-1: config 82 interface 113 has no altsetting 0 [ 504.668466][ T5844] usb 10-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 504.685052][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.692055][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.693701][ T5844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.803892][ T9387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.844189][ T5844] usb 10-1: Product: syz [ 504.848516][ T5844] usb 10-1: Manufacturer: syz [ 504.853231][ T5844] usb 10-1: SerialNumber: syz [ 504.856905][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.911839][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.996988][ T9387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.142502][ C1] usb 10-1: NFC: Urb failure (status -71) [ 505.191379][ C1] usb 10-1: NFC: Urb failure (status -71) [ 505.304002][ T5844] usb 10-1: NFC: Unable to get FW version [ 505.853050][ T5844] pn533_usb 10-1:82.113: probe with driver pn533_usb failed with error -71 [ 506.026841][ T5844] usb 10-1: USB disconnect, device number 4 [ 506.301709][ T9387] hsr_slave_0: entered promiscuous mode [ 506.309327][ T9387] hsr_slave_1: entered promiscuous mode [ 506.317736][ T9387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.336717][ T9387] Cannot create hsr debugfs directory [ 506.603134][ T9539] loop1: detected capacity change from 0 to 1024 [ 506.758912][ T9542] ipt_REJECT: TCP_RESET invalid for non-tcp [ 507.017460][ T9539] hfsplus: failed to load attributes file [ 507.555620][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.562089][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.289421][ T54] block nbd9: Receive control failed (result -32) [ 510.310666][ T54] block nbd9: Receive control failed (result -32) [ 510.317529][ T5843] block nbd9: Receive control failed (result -32) [ 510.367343][ T5882] block nbd9: shutting down sockets [ 510.423087][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.8.780'. [ 512.024322][ T9584] netlink: 45 bytes leftover after parsing attributes in process `syz.9.782'. [ 512.606349][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.9.784'. [ 512.610662][ T9595] overlayfs: upper fs does not support tmpfile. [ 512.624547][ T9598] netlink: 32 bytes leftover after parsing attributes in process `syz.9.784'. [ 513.139790][ T9602] netlink: 36 bytes leftover after parsing attributes in process `syz.6.786'. [ 513.166096][ T9597] loop1: detected capacity change from 0 to 1024 [ 513.187230][ T9602] netlink: 16 bytes leftover after parsing attributes in process `syz.6.786'. [ 513.205368][ T9602] netlink: 36 bytes leftover after parsing attributes in process `syz.6.786'. [ 513.254214][ T9602] netlink: 36 bytes leftover after parsing attributes in process `syz.6.786'. [ 513.685115][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.8.787'. [ 515.915619][ T9613] trusted_key: syz.6.789 sent an empty control message without MSG_MORE. [ 516.185665][ T9387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 516.404598][ T9387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 516.692916][ T9387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 516.959967][ T9387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 519.336242][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 521.281478][ T9663] loop8: detected capacity change from 0 to 164 [ 521.334505][ T9663] rock: directory entry would overflow storage [ 521.393203][ T9663] rock: sig=0x66, size=4, remaining=3 [ 521.398802][ T9387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.441244][ T9387] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.501263][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.508588][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.597320][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.604606][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.965593][ T9717] loop6: detected capacity change from 0 to 128 [ 525.000078][ T9692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.413686][ T9718] Bluetooth: hci4: Frame reassembly failed (-84) [ 525.456552][ T1096] Bluetooth: hci4: Frame reassembly failed (-84) [ 525.729060][ T9387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.219498][ T9387] veth0_vlan: entered promiscuous mode [ 527.554038][ T5843] Bluetooth: hci4: command 0x1003 tx timeout [ 527.562119][ T54] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 527.744453][ T9387] veth1_vlan: entered promiscuous mode [ 528.782887][ T9387] veth0_macvtap: entered promiscuous mode [ 528.882860][ T9387] veth1_macvtap: entered promiscuous mode [ 529.091687][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.168900][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.212044][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.283248][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.407270][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.569119][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.611039][ T9749] loop8: detected capacity change from 0 to 47 [ 529.613294][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.671414][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.720073][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.800414][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.820944][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.841977][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.876006][ T9387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.969757][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.002107][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.015903][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.073868][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.113835][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.148148][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.383821][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.423807][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.453958][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.934200][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.968053][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.983931][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.999327][ T9387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.236001][ T9387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.002390][ T9387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.044701][ T9387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.073918][ T9387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.173659][ T6881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.320793][ T6881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.290461][ T6182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.314368][ T6182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.189758][ T9792] tipc: Started in network mode [ 537.204778][ T9792] tipc: Node identity ba8b0a75ad02, cluster identity 4711 [ 537.212368][ T9792] tipc: Enabled bearer , priority 0 [ 537.292359][ T9797] syzkaller0: entered promiscuous mode [ 537.305705][ T9797] syzkaller0: entered allmulticast mode [ 537.375705][ T9792] tipc: Resetting bearer [ 537.440255][ T9798] loop0: detected capacity change from 0 to 1024 [ 537.450925][ T9790] tipc: Resetting bearer [ 537.508980][ T9790] tipc: Disabling bearer [ 537.540405][ T9798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.607949][ T9804] loop1: detected capacity change from 0 to 128 [ 537.616600][ T29] audit: type=1800 audit(1738832873.149:88): pid=9798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.736" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 537.648938][ T9798] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 537.664607][ T9804] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 537.712399][ T9798] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 537.787280][ T9798] EXT4-fs (loop0): This should not happen!! Data will be lost [ 537.787280][ T9798] [ 537.809695][ T9804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.845664][ T9798] EXT4-fs (loop0): Total free blocks count 0 [ 537.913944][ T9798] EXT4-fs (loop0): Free/Dirty block details [ 538.427852][ T9798] EXT4-fs (loop0): free_blocks=68451041280 [ 539.002816][ T9798] EXT4-fs (loop0): dirty_blocks=64 [ 539.039555][ T9798] EXT4-fs (loop0): Block reservation details [ 539.080708][ T9798] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 539.088890][ T9807] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 60 with error 28 [ 539.713067][ T9815] loop6: detected capacity change from 0 to 128 [ 540.567943][ T46] libceph: connect (1)[c::]:6789 error -101 [ 540.584198][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 540.757623][ T9829] netlink: 60 bytes leftover after parsing attributes in process `syz.1.839'. [ 540.768109][ T9829] unsupported nlmsg_type 40 [ 541.734396][ T9819] ceph: No mds server is up or the cluster is laggy [ 541.741845][ T46] libceph: connect (1)[c::]:6789 error -101 [ 541.776564][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 542.932318][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 543.188460][ T9] usb 10-1: config index 0 descriptor too short (expected 7768, got 18) [ 543.321461][ T9] usb 10-1: config 0 has an invalid interface number: 208 but max is 0 [ 543.530951][ T9] usb 10-1: config 0 has no interface number 0 [ 543.643974][ T9] usb 10-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 543.673559][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.698055][ T9839] orangefs_mount: mount request failed with -4 [ 543.721151][ T29] audit: type=1326 audit(1738832879.249:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 543.769234][ T9] usb 10-1: config 0 descriptor?? [ 543.869990][ T9] ftdi_sio 10-1:0.208: FTDI USB Serial Device converter detected [ 543.879833][ T29] audit: type=1326 audit(1738832879.279:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 544.111221][ T29] audit: type=1326 audit(1738832879.279:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 544.388593][ T9] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 544.412790][ T9] usb 10-1: USB disconnect, device number 5 [ 544.426243][ T9] ftdi_sio 10-1:0.208: device disconnected [ 544.436785][ T29] audit: type=1326 audit(1738832879.279:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 544.463394][ T29] audit: type=1326 audit(1738832879.279:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 544.510112][ T29] audit: type=1326 audit(1738832879.289:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 544.601299][ T29] audit: type=1326 audit(1738832879.289:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 544.700820][ T29] audit: type=1326 audit(1738832879.289:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 545.012406][ T29] audit: type=1326 audit(1738832879.289:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 545.027895][ T9855] loop6: detected capacity change from 0 to 64 [ 545.035084][ T29] audit: type=1326 audit(1738832879.289:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f05adb8cde9 code=0x7ffc0000 [ 545.405230][ T9855] hfs: unable to locate alternate MDB [ 545.537659][ T9855] hfs: continuing without an alternate MDB [ 547.834024][ T9864] loop0: detected capacity change from 0 to 8 [ 552.271784][ T9898] netlink: 28 bytes leftover after parsing attributes in process `syz.8.855'. [ 552.290158][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.9.856'. [ 554.622824][ T9926] mmap: syz.9.859 (9926) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 555.146467][ T9909] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 555.521035][ T9933] loop8: detected capacity change from 0 to 1024 [ 555.848300][ T9947] loop0: detected capacity change from 0 to 256 [ 556.906347][ T6182] hfsplus: b-tree write err: -5, ino 4 [ 557.157670][ T9956] loop6: detected capacity change from 0 to 512 [ 557.296749][ T9956] EXT4-fs (loop6): invalid first ino: 1 [ 558.097567][ T7581] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 558.289795][ T7581] usb 9-1: Using ep0 maxpacket: 16 [ 558.339091][ T7581] usb 9-1: config 2 has an invalid interface number: 78 but max is 0 [ 558.357810][ T7581] usb 9-1: config 2 has no interface number 0 [ 558.396752][ T7581] usb 9-1: config 2 interface 78 has no altsetting 0 [ 558.471682][ T7581] usb 9-1: New USB device found, idVendor=19d2, idProduct=ff70, bcdDevice=82.1b [ 558.691080][ T7581] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.566687][ T7581] usb 9-1: Product: syz [ 559.829993][ T7581] usb 9-1: Manufacturer: syz [ 559.959448][ T7581] usb 9-1: SerialNumber: syz [ 560.684212][ T7581] usb 9-1: can't set config #2, error -71 [ 560.864576][ T7581] usb 9-1: USB disconnect, device number 7 [ 562.419038][ T9999] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.428923][ T9999] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.437912][ T9999] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.446972][ T9999] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.644343][ T9999] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 564.655457][T10028] loop9: detected capacity change from 0 to 1024 [ 565.410465][T10028] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 565.493994][T10028] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 565.502357][T10028] EXT4-fs (loop9): too many log groups per flexible block group [ 565.515641][T10028] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 565.522681][T10028] EXT4-fs (loop9): mount failed [ 566.063472][T10035] loop1: detected capacity change from 0 to 128 [ 566.980864][T10044] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 567.035766][T10046] vlan2: entered promiscuous mode [ 567.062870][T10046] vlan2: entered allmulticast mode [ 567.114979][T10046] hsr_slave_1: entered allmulticast mode [ 567.145231][T10044] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 567.180408][T10049] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 567.215746][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.890'. [ 567.240200][T10052] loop8: detected capacity change from 0 to 512 [ 567.283033][T10052] EXT4-fs: Ignoring removed nobh option [ 567.347848][T10052] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 567.376681][T10049] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 567.394460][T10049] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 567.422907][T10052] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61 [ 567.503397][T10052] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #13: comm syz.8.891: casefold flag without casefold feature [ 567.796317][T10052] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.891: couldn't read orphan inode 13 (err -117) [ 568.126519][T10052] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.250983][T10046] hsr_slave_1 (unregistering): left allmulticast mode [ 568.348530][ T5908] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 568.398922][ T5908] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 568.463189][T10046] hsr_slave_1 (unregistering): left promiscuous mode [ 568.585387][T10049] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 568.599599][T10049] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 568.625886][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.632322][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.051157][ T46] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 569.653153][T10059] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 572.899946][ T46] usb 9-1: unable to get BOS descriptor or descriptor too short [ 572.914969][ T46] usb 9-1: no configurations [ 572.919647][ T46] usb 9-1: can't read configurations, error -22 [ 573.197948][ T7568] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.543095][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 575.255492][ T5886] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 575.454930][ T5886] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.533259][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.384628][ T5886] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 576.384663][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 576.384703][ T5886] usb 1-1: SerialNumber: syz [ 576.759837][ T5886] usb 1-1: 0:2 : does not exist [ 576.932994][T10127] loop8: detected capacity change from 0 to 256 [ 576.949512][ T5886] usb 1-1: USB disconnect, device number 2 [ 576.961854][T10127] vfat: Unknown parameter 'eocharset' [ 577.128850][T10127] loop8: detected capacity change from 0 to 512 [ 577.261366][T10127] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.486535][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.504086][T10127] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.050240][ T7568] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.213337][T10152] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 585.615984][T10189] netlink: 'syz.6.919': attribute type 2 has an invalid length. [ 586.545512][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 586.545534][ T29] audit: type=1800 audit(1738832922.049:112): pid=10193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.920" name="/" dev="9p" ino=2 res=0 errno=0 [ 587.587321][T10205] netlink: 'syz.1.924': attribute type 8 has an invalid length. [ 587.595187][T10205] netlink: 224 bytes leftover after parsing attributes in process `syz.1.924'. [ 588.621242][T10203] block nbd6: NBD_DISCONNECT [ 589.071246][T10203] block nbd6: Disconnected due to user request. [ 589.272967][T10203] block nbd6: shutting down sockets [ 590.880443][T10219] loop9: detected capacity change from 0 to 512 [ 591.093584][T10219] fscrypt (loop9, inode 2): Error -61 getting encryption context [ 591.164018][T10219] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -61 [ 591.664802][T10219] EXT4-fs warning (device loop9): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 591.844396][T10219] EXT4-fs warning (device loop9): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 591.879703][T10234] loop0: detected capacity change from 0 to 256 [ 591.914461][T10219] EXT4-fs (loop9): 1 truncate cleaned up [ 591.921165][T10219] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.268948][T10234] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 593.328256][ T7961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.260556][T10267] loop8: detected capacity change from 0 to 4096 [ 595.596659][T10276] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 595.661603][T10277] loop6: detected capacity change from 0 to 64 [ 595.672841][T10274] bridge1: entered promiscuous mode [ 595.758723][T10274] bridge1: entered allmulticast mode [ 595.884820][T10277] hfs: unable to open extent tree [ 595.934316][T10277] hfs: can't find a HFS filesystem on dev loop6 [ 596.146852][T10274] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 596.183884][T10274] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 596.206412][T10274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 596.319062][T10274] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 596.509386][T10274] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 596.943281][T10281] TCP: out of memory -- consider tuning tcp_mem [ 597.089884][T10246] ================================================================== [ 597.090022][T10274] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 597.097994][T10246] BUG: KASAN: slab-use-after-free in hci_chan_del+0x3b/0x1b0 [ 597.098036][T10246] Read of size 8 at addr ffff88805fa77218 by task khidpd_15be5886/10246 [ 597.098054][T10246] [ 597.098070][T10246] CPU: 1 UID: 0 PID: 10246 Comm: khidpd_15be5886 Not tainted 6.14.0-rc1-next-20250206-syzkaller #0 [ 597.098093][T10246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 597.098106][T10246] Call Trace: [ 597.098116][T10246] [ 597.098125][T10246] dump_stack_lvl+0x241/0x360 [ 597.098150][T10246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.098171][T10246] ? __pfx__printk+0x10/0x10 [ 597.098205][T10246] ? _printk+0xd5/0x120 [ 597.098237][T10246] ? __virt_addr_valid+0x183/0x530 [ 597.098269][T10246] ? __virt_addr_valid+0x183/0x530 [ 597.098302][T10246] print_report+0x169/0x550 [ 597.098323][T10246] ? __virt_addr_valid+0x183/0x530 [ 597.098354][T10246] ? __virt_addr_valid+0x183/0x530 [ 597.098383][T10246] ? __virt_addr_valid+0x45f/0x530 [ 597.098412][T10246] ? __phys_addr+0xba/0x170 [ 597.098442][T10246] ? hci_chan_del+0x3b/0x1b0 [ 597.098467][T10246] kasan_report+0x143/0x180 [ 597.098488][T10246] ? queue_delayed_work_on+0x267/0x390 [ 597.098519][T10246] ? hci_chan_del+0x3b/0x1b0 [ 597.098554][T10246] hci_chan_del+0x3b/0x1b0 [ 597.098584][T10246] l2cap_conn_put+0x70/0xe0 [ 597.098616][T10246] hidp_session_put+0x1e7/0x220 [ 597.098645][T10246] hidp_session_thread+0x458/0x490 [ 597.098672][T10246] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 597.098697][T10246] ? __pfx_hidp_session_thread+0x10/0x10 [ 597.098725][T10246] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 597.098744][T10246] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 597.098778][T10246] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 597.098810][T10246] ? __kthread_parkme+0x169/0x1d0 [ 597.098840][T10246] ? __pfx_hidp_session_thread+0x10/0x10 [ 597.098869][T10246] kthread+0x7a9/0x920 [ 597.098898][T10246] ? __pfx_kthread+0x10/0x10 [ 597.098929][T10246] ? __pfx_hidp_session_thread+0x10/0x10 [ 597.098957][T10246] ? __pfx_kthread+0x10/0x10 [ 597.098993][T10246] ? __pfx_kthread+0x10/0x10 [ 597.099025][T10246] ? __pfx_kthread+0x10/0x10 [ 597.099054][T10246] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.099074][T10246] ? lockdep_hardirqs_on+0x99/0x150 [ 597.099097][T10246] ? __pfx_kthread+0x10/0x10 [ 597.099128][T10246] ret_from_fork+0x4b/0x80 [ 597.099156][T10246] ? __pfx_kthread+0x10/0x10 [ 597.099185][T10246] ret_from_fork_asm+0x1a/0x30 [ 597.099220][T10246] [ 597.099228][T10246] [ 597.342526][T10246] Allocated by task 54: [ 597.346706][T10246] kasan_save_track+0x3f/0x80 [ 597.351425][T10246] __kasan_kmalloc+0x98/0xb0 [ 597.356023][T10246] __kmalloc_cache_noprof+0x243/0x390 [ 597.361452][T10246] hci_chan_create+0xc8/0x310 [ 597.366156][T10246] l2cap_conn_add+0x69/0x8e0 [ 597.370769][T10246] l2cap_connect_cfm+0x115/0x1090 [ 597.375801][T10246] hci_remote_features_evt+0x68e/0xac0 [ 597.381271][T10246] hci_event_packet+0xac2/0x1540 [ 597.386219][T10246] hci_rx_work+0x3f3/0xdb0 [ 597.390646][T10246] process_scheduled_works+0xa66/0x1840 [ 597.396304][T10246] worker_thread+0x870/0xd30 [ 597.400897][T10246] kthread+0x7a9/0x920 [ 597.404977][T10246] ret_from_fork+0x4b/0x80 [ 597.409402][T10246] ret_from_fork_asm+0x1a/0x30 [ 597.414171][T10246] [ 597.416495][T10246] Freed by task 10274: [ 597.420557][T10246] kasan_save_track+0x3f/0x80 [ 597.425244][T10246] kasan_save_free_info+0x40/0x50 [ 597.430276][T10246] __kasan_slab_free+0x59/0x70 [ 597.435176][T10246] kfree+0x196/0x430 [ 597.439083][T10246] hci_conn_del+0x4b5/0xc40 [ 597.443593][T10246] hci_conn_failed+0x319/0x400 [ 597.448367][T10246] hci_abort_conn_sync+0x56c/0x11f0 [ 597.453581][T10246] hci_disconnect_all_sync+0x264/0x460 [ 597.459049][T10246] hci_suspend_sync+0x41a/0xca0 [ 597.463902][T10246] hci_suspend_dev+0x203/0x3e0 [ 597.468675][T10246] hci_suspend_notifier+0xf2/0x2b0 [ 597.473797][T10246] notifier_call_chain+0x1a5/0x3f0 [ 597.478913][T10246] blocking_notifier_call_chain_robust+0xe8/0x1e0 [ 597.485343][T10246] pm_notifier_call_chain_robust+0x2c/0x60 [ 597.491159][T10246] snapshot_open+0x19b/0x280 [ 597.495767][T10246] misc_open+0x2cc/0x340 [ 597.500018][T10246] chrdev_open+0x521/0x600 [ 597.504436][T10246] do_dentry_open+0xdec/0x1960 [ 597.509206][T10246] vfs_open+0x3b/0x370 [ 597.513276][T10246] path_openat+0x2c81/0x3590 [ 597.517875][T10246] do_filp_open+0x27f/0x4e0 [ 597.522404][T10246] do_sys_openat2+0x13d/0x1c0 [ 597.527086][T10246] __x64_sys_openat+0x247/0x2a0 [ 597.531954][T10246] do_syscall_64+0xf3/0x230 [ 597.536466][T10246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.542369][T10246] [ 597.544696][T10246] The buggy address belongs to the object at ffff88805fa77200 [ 597.544696][T10246] which belongs to the cache kmalloc-128 of size 128 [ 597.558765][T10246] The buggy address is located 24 bytes inside of [ 597.558765][T10246] freed 128-byte region [ffff88805fa77200, ffff88805fa77280) [ 597.572475][T10246] [ 597.574830][T10246] The buggy address belongs to the physical page: [ 597.581250][T10246] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fa77 [ 597.590015][T10246] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 597.597561][T10246] page_type: f5(slab) [ 597.601542][T10246] raw: 00fff00000000000 ffff88801ac41a00 ffffea0001806b40 dead000000000005 [ 597.610124][T10246] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 597.618703][T10246] page dumped because: kasan: bad access detected [ 597.625122][T10246] page_owner tracks the page as allocated [ 597.630846][T10246] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5841, tgid 5841 (syz-executor), ts 250919085331, free_ts 250918971085 [ 597.650566][T10246] post_alloc_hook+0x1f4/0x240 [ 597.655345][T10246] get_page_from_freelist+0x365c/0x37a0 [ 597.660901][T10246] __alloc_frozen_pages_noprof+0x292/0x710 [ 597.666730][T10246] allocate_slab+0x66/0x3a0 [ 597.671244][T10246] ___slab_alloc+0xc27/0x14a0 [ 597.675927][T10246] __slab_alloc+0x58/0xa0 [ 597.680262][T10246] __kmalloc_node_noprof+0x2ee/0x4d0 [ 597.685548][T10246] alloc_slab_obj_exts+0x3a/0xa0 [ 597.690491][T10246] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 597.696396][T10246] __kmalloc_node_noprof+0x30d/0x4d0 [ 597.701686][T10246] __kvmalloc_node_noprof+0x72/0x190 [ 597.706977][T10246] xt_alloc_table_info+0x3d/0xa0 [ 597.711933][T10246] do_ip6t_set_ctl+0xba0/0x1270 [ 597.716791][T10246] nf_setsockopt+0x295/0x2c0 [ 597.721393][T10246] do_sock_setsockopt+0x3af/0x720 [ 597.726432][T10246] __x64_sys_setsockopt+0x1ee/0x280 [ 597.731637][T10246] page last free pid 5841 tgid 5841 stack trace: [ 597.737960][T10246] free_frozen_pages+0xe0d/0x10e0 [ 597.742997][T10246] vfree+0x1c3/0x360 [ 597.746903][T10246] do_ip6t_get_ctl+0x11eb/0x1820 [ 597.751844][T10246] nf_getsockopt+0x299/0x2c0 [ 597.756445][T10246] ipv6_getsockopt+0x23e/0x360 [ 597.761208][T10246] tcp_getsockopt+0x163/0x1c0 [ 597.765890][T10246] do_sock_getsockopt+0x3c4/0x7e0 [ 597.770923][T10246] __x64_sys_getsockopt+0x2a1/0x370 [ 597.776160][T10246] do_syscall_64+0xf3/0x230 [ 597.780665][T10246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.786569][T10246] [ 597.788892][T10246] Memory state around the buggy address: [ 597.794606][T10246] ffff88805fa77100: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 597.802671][T10246] ffff88805fa77180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 597.810745][T10246] >ffff88805fa77200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 597.818807][T10246] ^ [ 597.823654][T10246] ffff88805fa77280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 597.831715][T10246] ffff88805fa77300: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 597.839780][T10246] ================================================================== [ 597.906521][T10246] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 597.913785][T10246] CPU: 1 UID: 0 PID: 10246 Comm: khidpd_15be5886 Not tainted 6.14.0-rc1-next-20250206-syzkaller #0 [ 597.924494][T10246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 597.934593][T10246] Call Trace: [ 597.937910][T10246] [ 597.940875][T10246] dump_stack_lvl+0x241/0x360 [ 597.945594][T10246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.950840][T10246] ? __pfx__printk+0x10/0x10 [ 597.955481][T10246] ? preempt_schedule+0xe1/0xf0 [ 597.960378][T10246] ? vscnprintf+0x5d/0x90 [ 597.964764][T10246] panic+0x349/0x880 [ 597.968698][T10246] ? check_panic_on_warn+0x21/0xb0 [ 597.973865][T10246] ? __pfx_panic+0x10/0x10 [ 597.978341][T10246] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 597.984364][T10246] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 597.990733][T10246] ? print_report+0x502/0x550 [ 597.995450][T10246] check_panic_on_warn+0x86/0xb0 [ 598.000429][T10246] ? hci_chan_del+0x3b/0x1b0 [ 598.005067][T10246] end_report+0x77/0x160 [ 598.009361][T10246] kasan_report+0x154/0x180 [ 598.013990][T10246] ? queue_delayed_work_on+0x267/0x390 [ 598.019499][T10246] ? hci_chan_del+0x3b/0x1b0 [ 598.024158][T10246] hci_chan_del+0x3b/0x1b0 [ 598.028623][T10246] l2cap_conn_put+0x70/0xe0 [ 598.033173][T10246] hidp_session_put+0x1e7/0x220 [ 598.038069][T10246] hidp_session_thread+0x458/0x490 [ 598.043224][T10246] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 598.049156][T10246] ? __pfx_hidp_session_thread+0x10/0x10 [ 598.054843][T10246] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 598.060778][T10246] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 598.067069][T10246] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 598.073360][T10246] ? __kthread_parkme+0x169/0x1d0 [ 598.078430][T10246] ? __pfx_hidp_session_thread+0x10/0x10 [ 598.084110][T10246] kthread+0x7a9/0x920 [ 598.088224][T10246] ? __pfx_kthread+0x10/0x10 [ 598.092857][T10246] ? __pfx_hidp_session_thread+0x10/0x10 [ 598.098539][T10246] ? __pfx_kthread+0x10/0x10 [ 598.103177][T10246] ? __pfx_kthread+0x10/0x10 [ 598.107823][T10246] ? __pfx_kthread+0x10/0x10 [ 598.112453][T10246] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.117689][T10246] ? lockdep_hardirqs_on+0x99/0x150 [ 598.122931][T10246] ? __pfx_kthread+0x10/0x10 [ 598.127568][T10246] ret_from_fork+0x4b/0x80 [ 598.132024][T10246] ? __pfx_kthread+0x10/0x10 [ 598.136661][T10246] ret_from_fork_asm+0x1a/0x30 [ 598.141481][T10246] [ 598.144692][T10246] Kernel Offset: disabled [ 598.149041][T10246] Rebooting in 86400 seconds..