last executing test programs: 3m14.045189842s ago: executing program 3 (id=530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 3m13.297259933s ago: executing program 3 (id=534): sync_file_range(0xffffffffffffffff, 0x883, 0xfffffffffffffe00, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103"], 0x0) 3m12.530658065s ago: executing program 3 (id=536): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703836352c73686f72746e616d653d77696e39352c636f6465706167653d3836392c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d6d697865642c757466383d312c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c696f636861727365743d6d61636761656c69632c009fe7a64148646d78b2352fb82c3564f8d2296b6f8512835d329176768472a65dd4d0804d842d71bb377c"], 0x25, 0x34c, &(0x7f0000001740)="$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") ftruncate(0xffffffffffffffff, 0xc17d) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee01) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000740), 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x5000) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000040)={0x2a55}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futex(&(0x7f0000000100)=0x1, 0x0, 0x0, &(0x7f0000000340)={r6, r7+60000000}, &(0x7f0000000380)=0x2, 0x1) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$eJzsmb2LE0EYxp+Z3eydhyg2FjYWHniit9ndqFxzxQmWgnCKWgZvPU73LpKskAQEg42NpYVga2NpYWFl4V9gq4UKgoUp7YSR+djdyWYT4gdG9P3BzT7z9c68L9yzsAFBEP8tHz98ff/w3NqlUwD2YxkLZvyzo5/i4Oj6d4/vnHy0fv7J87dPX+8duPuyHI/JPWL28z0ArzYcpGCuOXFk93IRNtO4DI4TRl8Bg6/lN6HQnRgM18yam5Zu7TMiif3rrWTrxk4SB7IJZRPJpmGfLy81HDBsAVhUtxOCWfOdXv9WM0nidlnURHbO2NSPimn1U/fb4FhHVj0hOICrD+4PZN/UBgF4Xr8QHKHRDTBsGr2GBfi+X5TEyv+IW8R3Zsl/vuKZEodW/9Sh4Locf0Pu/7Co/ZY4rDwi/6HzkcPDzAPtNZ/mnvvPC2VcAMam3iwlyYVfiOxVFCoXhT9JZz9u+ZMLN/ePerp7u97p9Vd3dpvb8Xa8F0WNs8HpIDgT1ZUR6XaK/y0qf1qy4tcmrPWYh24zTdthF0jbYd6PdGs57uaL1he1hyv/41g5pmMw887KX5QlmPnj6inVilO98t7EnAiCIAiCIAiCIAiCIAiCIKo5Cgb9S5hg5oNoFdFF9YXyewAAAP//L0Rm/Q==") bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r8, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x80, 0x0, 0xf}) 3m8.02389097s ago: executing program 3 (id=545): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) close(0x3) 3m7.213466666s ago: executing program 3 (id=548): setitimer(0x1, &(0x7f00000001c0)={{0x0, 0xea60}, {0x77359400}}, &(0x7f0000000340)) 3m7.128491593s ago: executing program 3 (id=550): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m50.842028132s ago: executing program 32 (id=550): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m12.070066112s ago: executing program 4 (id=688): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = io_uring_setup(0x58e1, 0x0) syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 2m7.589517975s ago: executing program 4 (id=696): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0xd0}, &(0x7f0000000b00)=0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2m3.027868544s ago: executing program 4 (id=700): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07906706000007000000170300000ee60060bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xffffffffffffff9a) recvmmsg(r3, &(0x7f0000000400)=[{{&(0x7f0000000300)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f00000004c0)=""/161, 0xa1}, {&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)}, {&(0x7f0000000780)=""/138, 0x8a}, {0x0}, {0x0}, {&(0x7f00000019c0)=""/161, 0xa1}, {&(0x7f0000001a80)=""/161, 0xa1}], 0x9, &(0x7f0000000640)=""/119, 0x77}, 0xfffffffb}], 0x1, 0x10010, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20000080, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2044, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc9, &(0x7f0000000200)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000740)='kmem_cache_free\x00', r5}, 0x10) dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 1m59.311718195s ago: executing program 4 (id=710): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000023c0)=ANY=[@ANYBLOB="3c020000170000032dbd7000fbdbdf25100000007d00e680282cb228339a830bd10a47fe4a65a26b47e9aab75eafb2db016735d9daf583b4c582cfc3012513f3de7a4f361d9206220bf0703f29a886fdb0a0dc37594a2ccff717c1767f2eef7c09043561c9336acd9a40436260ac8ec1ed6efaf40abcd5bfb45f40208f246caedd7a66741ce591ab9c05d681a8bc814b2500000007000e00277b00000df87ce0ef90b033587c00fb6f7c5df9401cdd3cab6d71bb3f547d97e9ae45cea49eb717d8b98f10ec3788a25281baea6dedbf60a93a9ea3b77b907ecb63158835a613457834eb9daf403d3fcbfd77aca279c44ca791846531ba4bb740aacbcb304f022e9e161b4125d45603b01d1b5120413968e20fb340341f8f7379b7ee27dcb5bbd7111eb9848333bbdbae79e2c10bc52944c8bc90baa05c9c7cf5787114cbc62f1c94c82239bad43be92a0585ba2e6d046ac9259124451b5f4f5c533eb2fd90d9c990a542d60032800800ef00", @ANYRES32=0x0, @ANYBLOB="04007b000400bc80e35bc4585fbb93870bbd870a3d61cae74df5fa206668fce221f48d97a1750441f8160be40d02ad177ee4c2876cbbec020aef5309cafb9d556fb5aae0e3f94d4ee6a7ade68dd4b0a5193e9440377b25a9209ded00a38a96060810bbb2697acdbcf74f8a6e9eaaad0e817373bf420f19f7b607247fc74fbf58f2396f8c94e16871701529c442742da25bc8d0d765e837727d1d47cc8305c4e13628ab24813abf41529c2b4271db300719d95bc6a3d0662b0c794d2522b25b5f150e3b3cdac58a0f8ed2"], 0x23c}, 0x1, 0x0, 0x0, 0x100}, 0x20000050) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38) r4 = socket$inet6(0xa, 0x800000000080008, 0x0) sendmmsg$inet6(r4, &(0x7f00000060c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x7, @empty, 0xb}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x4078, @rand_addr=' \x01\x00', 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x84}}}, @hopopts={{0x18, 0x29, 0x36, {0x32}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x88}}}], 0x48}}], 0x2, 0x40880) syz_usb_control_io(r0, 0x0, 0x0) 1m58.121095772s ago: executing program 5 (id=711): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='ata_tf_load\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) open(&(0x7f0000000040)='./file1\x00', 0x14927e, 0x81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff0000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 1m56.462866137s ago: executing program 5 (id=714): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = io_uring_setup(0x58e1, 0x0) syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 1m55.601685286s ago: executing program 4 (id=720): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m49.932822115s ago: executing program 4 (id=732): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getxattr(0x0, &(0x7f0000000840)=@random={'os2.', '\x00'}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x2, 0x1e6, 0xa}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 1m49.560045666s ago: executing program 5 (id=734): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000042, &(0x7f0000002240)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@mblk_io_submit}, {@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1m47.886497331s ago: executing program 5 (id=741): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xb}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) 1m45.17882493s ago: executing program 5 (id=746): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x800) socket$kcm(0x10, 0x2, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x4084) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'caif0\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0xc, 0x57, 0x0, 0x4, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd]}}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1m42.920827063s ago: executing program 5 (id=748): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000380), &(0x7f0000000ac0)}, 0x20) r5 = open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000200)=0x40) 1m33.905066964s ago: executing program 33 (id=732): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getxattr(0x0, &(0x7f0000000840)=@random={'os2.', '\x00'}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x2, 0x1e6, 0xa}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 1m27.834335035s ago: executing program 34 (id=748): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000380), &(0x7f0000000ac0)}, 0x20) r5 = open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000200)=0x40) 9.909602517s ago: executing program 1 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0xa0000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000340)={0xa000001c}) 9.693329095s ago: executing program 1 (id=1022): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r4, &(0x7f00000002c0), 0x220, 0x100, 0x0) 7.27897078s ago: executing program 1 (id=1029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 7.229406014s ago: executing program 1 (id=1030): write(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000480), 0x0, 0xffffffffffffffff) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x420001, 0x187) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000040f8030003000040"]) write$vhost_msg_v2(r2, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) 6.177295919s ago: executing program 6 (id=1032): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x4, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 6.029264921s ago: executing program 1 (id=1034): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 5.984284315s ago: executing program 6 (id=1036): connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2886000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x2, 0x5002) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) read$FUSE(r0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 5.966595277s ago: executing program 7 (id=1037): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, 0x0, &(0x7f0000000280)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') read$msr(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r5 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f00000000c0)={0x0, 0x0, 0x7}) 5.857175365s ago: executing program 1 (id=1038): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) 4.269496264s ago: executing program 7 (id=1039): syz_open_dev$loop(0x0, 0x5, 0x800400) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) restart_syscall() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000180)={0x100002000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x24) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x2, 0x8b, 0x6, 0x0, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x11, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x248982, 0x84) read$char_usb(r5, &(0x7f0000001980)=""/165, 0xa5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, 0x0) 4.263879634s ago: executing program 0 (id=1040): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0x14, 0x0, &(0x7f0000000740)="f8ad48cc02cb29dcc8007f5b08004e412daa8f4e", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.005249135s ago: executing program 0 (id=1041): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/89) 3.918144732s ago: executing program 6 (id=1042): openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000e00)={@broadcast, @remote, @void, {@llc={0x4, {@llc={0x80, 0x0, "e0"}}}}}, 0x0) getgid() r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x80) 3.264668755s ago: executing program 0 (id=1044): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.217631919s ago: executing program 7 (id=1045): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) 2.336209961s ago: executing program 6 (id=1046): ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000}) 1.741269999s ago: executing program 0 (id=1047): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x78, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fc, r0}, 0x38) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="98a591c63a6efdecc4194d99634ff4eb90c266e83fff7dfbd3568c030612b423a3", 0x21}, {&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b7932af43ba88cd499a6c421696d57ff38d5231dc712a114aaeae76812b1375a1b59f2b669bcf1f5a", 0x74}, {&(0x7f0000000100)="8d25ca2a98879e57578c3d652f5cf57f904b471f18c14b4d786c4ae155bee597b14455173e5580fb3f", 0x29}], 0x3, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 1.72871676s ago: executing program 2 (id=1048): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000240)='percpu_alloc_percpu\x00', r1}, 0x66) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.72444977s ago: executing program 7 (id=1049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 1.672251514s ago: executing program 2 (id=1050): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 1.504773868s ago: executing program 2 (id=1051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f1080003400000000308"], 0xa8}}, 0x0) 1.466869801s ago: executing program 7 (id=1052): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 1.395508377s ago: executing program 2 (id=1053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x90, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x72, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0x2}}, @void, @val={0x5, 0x3, {0x0, 0x37, 0x2}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0xf34, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xfc, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x9, 0x28}}, @void, [{0xdd, 0x6, "7d1bf50528ba"}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x40181) ioctl$VIDIOC_SUBDEV_S_CROP(r7, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x1, 0xfff, 0x8001}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000024c0)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.097177191s ago: executing program 0 (id=1054): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/89) 1.096796781s ago: executing program 7 (id=1055): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x10, 0x2}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2}, 0x10) sendmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)}], 0x1, 0x0, 0x0, 0x188}, 0x191) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getpeername$inet6(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r1, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.095743581s ago: executing program 6 (id=1056): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x800) socket$kcm(0x10, 0x2, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x4084) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'caif0\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0xc, 0x57, 0x0, 0x4, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd]}}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 263.823539ms ago: executing program 2 (id=1057): ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f000063b000/0x4000)=nil, 0x4000}}) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883", 0x4}], 0x1}}], 0x1, 0x0) 126.6836ms ago: executing program 0 (id=1058): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = io_uring_setup(0x58e1, 0x0) syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r8 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 103.950912ms ago: executing program 6 (id=1059): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'vlan0\x00', 0x0}) 0s ago: executing program 2 (id=1060): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={0xffffffffffffffff, 0x0}, 0x20) kernel console output (not intermixed with test programs): [ 70.960138][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.970364][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.980650][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.991230][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.000955][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.010586][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.020304][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.029337][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.038861][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.047682][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.057495][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.069031][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.082107][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.109526][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.121301][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.140144][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.161832][ T4189] device veth0_vlan entered promiscuous mode [ 71.183204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.207195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.221308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.230185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.261152][ T4189] device veth1_vlan entered promiscuous mode [ 71.290109][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.306331][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.327346][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.362296][ T4193] device veth0_vlan entered promiscuous mode [ 71.403786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.414339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.424665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.437011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.446844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.469915][ T4194] device veth0_vlan entered promiscuous mode [ 71.482951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.493611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.501847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.512092][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.512630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.519411][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.533430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.543453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.554289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.564904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.580602][ T4189] device veth0_macvtap entered promiscuous mode [ 71.591395][ T4193] device veth1_vlan entered promiscuous mode [ 71.608881][ T4194] device veth1_vlan entered promiscuous mode [ 71.619228][ T4189] device veth1_macvtap entered promiscuous mode [ 71.640828][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.652748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.663020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.676354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.685424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.694325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.703418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.711560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.759274][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.775416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.792726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.809901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.819973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.830337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.850779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.863473][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.880196][ T4193] device veth0_macvtap entered promiscuous mode [ 71.902740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.923735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.940051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.955932][ T4194] device veth0_macvtap entered promiscuous mode [ 71.964655][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.978135][ T4193] device veth1_macvtap entered promiscuous mode [ 71.993429][ T4182] device veth0_vlan entered promiscuous mode [ 72.001175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.013112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.023064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.032273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.041809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.051868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.066203][ T4194] device veth1_macvtap entered promiscuous mode [ 72.077805][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.088646][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.099018][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.111784][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.133608][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.146604][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.161854][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.176971][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.188235][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.201386][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.210723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.220530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.230389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.238632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.248090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.257624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.266646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.299542][ T4182] device veth1_vlan entered promiscuous mode [ 72.310404][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.321312][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.331732][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.342225][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.354477][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.363500][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.373740][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.397447][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.409372][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.413000][ T4226] Bluetooth: hci3: command 0x040f tx timeout [ 72.420659][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.432171][ T4226] Bluetooth: hci0: command 0x040f tx timeout [ 72.439565][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.452199][ T4226] Bluetooth: hci1: command 0x040f tx timeout [ 72.459275][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.475655][ T4226] Bluetooth: hci2: command 0x040f tx timeout [ 72.486782][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.498136][ T4226] Bluetooth: hci4: command 0x040f tx timeout [ 72.498852][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.517469][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.528733][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.542332][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.566546][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.576410][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.589091][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.599155][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.610456][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.620494][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.631301][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.640832][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.649673][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.659904][ T4181] device veth0_vlan entered promiscuous mode [ 72.670280][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.680078][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.690457][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.699833][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.731931][ T4181] device veth1_vlan entered promiscuous mode [ 72.801668][ T4182] device veth0_macvtap entered promiscuous mode [ 72.817518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.827085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.836403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.872548][ T4182] device veth1_macvtap entered promiscuous mode [ 72.940265][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.947266][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.961140][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.973244][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.977688][ T4181] device veth0_macvtap entered promiscuous mode [ 72.992259][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.001352][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.011807][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.020503][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.032601][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.042373][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.059620][ T4181] device veth1_macvtap entered promiscuous mode [ 73.079808][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.091576][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.103315][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.117404][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.128751][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.142081][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.154696][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.194445][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.195718][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.212756][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.213939][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.233675][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.249886][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.260669][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.272886][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.284487][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.296443][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.307073][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.318985][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.330809][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.354462][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.364611][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.381700][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.393565][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.406802][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.418510][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.429949][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.440820][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.451705][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.463637][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.475943][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.486529][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.500088][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.511915][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.523364][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.533861][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.545557][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.559037][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.570985][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.583853][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.593823][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.604406][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.615301][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.627852][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.661524][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.671936][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.681470][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.692009][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.706845][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.718774][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.735169][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.744812][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.784097][ T4297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.790669][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.817982][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.841430][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.898855][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.938360][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.006712][ T4301] kvm: apic: phys broadcast and lowest prio [ 74.014902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.063031][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.084021][ T4300] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 74.102154][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.143035][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.145669][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.191309][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.223545][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.251873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.256727][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.284949][ T445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.311483][ T445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.355981][ T4222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.361204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.364773][ T4222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.379463][ T4306] loop3: detected capacity change from 0 to 16 [ 74.402398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.439458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.475558][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 74.484009][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 74.502235][ T4306] erofs: (device loop3): mounted with root inode @ nid 36. [ 74.565852][ T4312] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 74.622652][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 74.633997][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 74.688774][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 74.785891][ T4226] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.864243][ T4309] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 74.920357][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.930035][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.940109][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.950097][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.960408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.969990][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.992964][ T4309] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 75.097687][ T4226] usb 3-1: Using ep0 maxpacket: 32 [ 75.734063][ T4226] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.748874][ T4226] usb 3-1: config 1 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.763370][ T4226] usb 3-1: config 1 interface 0 has no altsetting 0 [ 75.905305][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.914894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.924413][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.934223][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 75.956635][ T4226] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.966866][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 75.975428][ T4226] usb 3-1: SerialNumber: syz [ 76.876831][ T4226] usb 3-1: bad CDC descriptors [ 77.052474][ T4226] usb 3-1: USB disconnect, device number 2 [ 77.753271][ T4340] delete_channel: no stack [ 79.851786][ T4343] loop2: detected capacity change from 0 to 4096 [ 79.901860][ T4349] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 80.337423][ T4343] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 81.436738][ T4356] loop1: detected capacity change from 0 to 1024 [ 82.495836][ T1325] cfg80211: failed to load regulatory.db [ 82.668731][ T26] audit: type=1800 audit(1755214112.055:2): pid=4356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 83.037269][ T4247] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.362239][ T26] audit: type=1800 audit(1755214112.205:3): pid=4356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 83.466111][ T4247] usb 3-1: config 0 has no interfaces? [ 83.473582][ T4247] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 83.572754][ T4247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.906080][ T4247] usb 3-1: config 0 descriptor?? [ 84.196330][ T4247] usb 3-1: USB disconnect, device number 3 [ 84.462901][ T4390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'. [ 84.494889][ T4390] netlink: 'syz.0.28': attribute type 2 has an invalid length. [ 84.504165][ T4390] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.28'. [ 84.651542][ T4390] Zero length message leads to an empty skb [ 84.849687][ T4398] loop4: detected capacity change from 0 to 1024 [ 84.950992][ T4398] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.202444][ T4398] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 86.075305][ T4261] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.325086][ T4261] usb 1-1: Using ep0 maxpacket: 16 [ 86.694147][ T4428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 86.894944][ T4433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.42'. [ 86.968029][ T4433] netlink: 'syz.2.42': attribute type 2 has an invalid length. [ 86.979824][ T4433] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.42'. [ 87.437577][ T4450] loop4: detected capacity change from 0 to 128 [ 87.470760][ T4450] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.075924][ T4450] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.775287][ T4261] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.733861][ T4444] sched: RT throttling activated [ 90.734868][ T4261] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 91.143818][ T4261] usb 1-1: can't read configurations, error -71 [ 91.575273][ T4262] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.605987][ T4458] loop1: detected capacity change from 0 to 4096 [ 91.659794][ T4466] loop4: detected capacity change from 0 to 512 [ 91.753109][ T4466] ======================================================= [ 91.753109][ T4466] WARNING: The mand mount option has been deprecated and [ 91.753109][ T4466] and is ignored by this kernel. Remove the mand [ 91.753109][ T4466] option from the mount to silence this warning. [ 91.753109][ T4466] ======================================================= [ 91.885410][ T4458] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 91.962447][ T4458] ntfs3: loop1: Failed to load $Extend. [ 92.066196][ T4262] usb 4-1: device not accepting address 2, error -71 [ 92.072269][ T4468] loop3: detected capacity change from 0 to 40427 [ 92.154391][ T4466] EXT4-fs (loop4): Ignoring removed oldalloc option [ 92.183094][ T4468] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 92.193122][ T4468] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 92.204122][ T4466] EXT4-fs (loop4): inline encryption not supported [ 92.215094][ T4468] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 92.228836][ T4468] F2FS-fs (loop3): invalid crc value [ 92.251082][ T4466] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 92.277530][ T4468] F2FS-fs (loop3): Found nat_bits in checkpoint [ 92.305216][ T4466] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.351428][ T4468] F2FS-fs (loop3): Start checkpoint disabled! [ 92.395948][ T4468] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 92.405196][ T4468] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 92.518521][ T4466] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.55: bg 0: block 64: padding at end of block bitmap is not set [ 92.653887][ T4466] Quota error (device loop4): write_blk: dquota write failed [ 92.756562][ T4466] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 92.767046][ T4272] attempt to access beyond end of device [ 92.767046][ T4272] loop3: rw=2049, want=40976, limit=40427 [ 92.805920][ T4466] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.55: Failed to acquire dquot type 0 [ 92.866489][ T4466] EXT4-fs (loop4): 1 truncate cleaned up [ 92.873328][ T4466] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,oldalloc,inlinecrypt,delalloc,mblk_io_submit,delalloc,noload,mb_optimize_scan=0x0000000000000001,lazytime,,errors=continue. Quota mode: writeback. [ 93.134825][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.515110][ T4466] syz.4.55 (4466) used greatest stack depth: 20560 bytes left [ 93.525654][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 93.857306][ T4490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 94.024390][ T4492] tipc: Enabling of bearer rejected, failed to enable media [ 95.692221][ T4513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.66'. [ 95.870163][ T4513] netlink: 'syz.3.66': attribute type 2 has an invalid length. [ 95.952188][ T4513] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.66'. [ 96.453613][ T4522] loop2: detected capacity change from 0 to 4096 [ 96.754107][ T4526] loop1: detected capacity change from 0 to 8192 [ 96.825098][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.913884][ T4528] loop4: detected capacity change from 0 to 512 [ 96.923323][ T1108] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 96.935941][ T1108] usb 2-1: can't read configurations, error -71 [ 97.149170][ T4194] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 97.177118][ T4528] EXT4-fs (loop4): Ignoring removed oldalloc option [ 97.261510][ T4534] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 97.271395][ T4534] FAT-fs (loop1): Filesystem has been set read-only [ 97.290021][ T4534] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 97.316249][ T4528] EXT4-fs (loop4): inline encryption not supported [ 97.324500][ T4528] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 97.407789][ T4194] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 97.686117][ T4528] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.989436][ T4528] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.72: bg 0: block 64: padding at end of block bitmap is not set [ 98.059718][ T4539] tipc: Enabling of bearer rejected, failed to enable media [ 98.097384][ T4528] Quota error (device loop4): write_blk: dquota write failed [ 98.107984][ T4528] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 98.119728][ T4528] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.72: Failed to acquire dquot type 0 [ 98.152052][ T4528] EXT4-fs (loop4): 1 truncate cleaned up [ 98.184061][ T4528] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,oldalloc,inlinecrypt,delalloc,mblk_io_submit,delalloc,noload,mb_optimize_scan=0x0000000000000001,lazytime,,errors=continue. Quota mode: writeback. [ 98.785144][ T4261] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.833683][ T4566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 99.493725][ T4261] usb 3-1: Using ep0 maxpacket: 16 [ 100.561968][ T4580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'. [ 100.763616][ T4583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.84'. [ 100.781044][ T4583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.84'. [ 101.526243][ T4590] tipc: Enabling of bearer rejected, failed to enable media [ 101.726562][ T4261] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.825204][ T4261] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 101.829910][ T4606] loop3: detected capacity change from 0 to 64 [ 102.005654][ T4261] usb 3-1: can't read configurations, error -71 [ 103.260628][ T4622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.97'. [ 103.313279][ T4626] netlink: 'syz.4.97': attribute type 2 has an invalid length. [ 103.336889][ T4626] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.97'. [ 105.545363][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.855339][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 106.377023][ T4638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 106.408359][ T4641] netlink: 'syz.2.103': attribute type 10 has an invalid length. [ 106.460923][ T26] audit: type=1326 audit(1755214135.845:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4640 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca22d3be9 code=0x7ffc0000 [ 106.520316][ T4641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.569511][ T4641] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 106.581043][ T26] audit: type=1326 audit(1755214135.845:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4640 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f9ca22d3be9 code=0x7ffc0000 [ 106.676247][ T26] audit: type=1326 audit(1755214135.845:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4640 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca22d3be9 code=0x7ffc0000 [ 106.710415][ T26] audit: type=1326 audit(1755214135.845:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4640 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9ca22d3be9 code=0x7ffc0000 [ 106.739021][ T4644] device bond0 entered promiscuous mode [ 106.745747][ T4644] device bond_slave_0 entered promiscuous mode [ 106.753191][ T4644] device bond_slave_1 entered promiscuous mode [ 107.457455][ T4644] device batadv0 entered promiscuous mode [ 107.631077][ T4647] tipc: Started in network mode [ 107.643832][ T26] audit: type=1326 audit(1755214137.025:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4640 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca22d3be9 code=0x7ffc0000 [ 107.665312][ T4647] tipc: Node identity a6c496ad5a7f, cluster identity 4711 [ 107.678729][ T4647] tipc: Enabled bearer , priority 0 [ 107.693214][ T4642] tipc: Disabling bearer [ 107.739082][ T26] audit: type=1326 audit(1755214137.075:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4640 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca22d3be9 code=0x7ffc0000 [ 107.903476][ T4663] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.916342][ T4641] syz.2.103 (4641) used greatest stack depth: 19456 bytes left [ 107.957812][ T4666] loop2: detected capacity change from 0 to 64 [ 108.195235][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.875974][ T4672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'. [ 108.905211][ T13] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 108.922674][ T4672] netlink: 'syz.1.112': attribute type 2 has an invalid length. [ 108.931628][ T13] usb 2-1: can't read configurations, error -71 [ 108.985190][ T4672] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.112'. [ 109.327505][ T4681] loop1: detected capacity change from 0 to 128 [ 109.366351][ T4681] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.406965][ T4681] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.468640][ T4336] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.538396][ T4682] loop2: detected capacity change from 0 to 2048 [ 111.716406][ T4682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.762083][ T4686] loop1: detected capacity change from 0 to 512 [ 111.854024][ T26] audit: type=1800 audit(1755214141.235:10): pid=4682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.113" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 111.925178][ T4686] EXT4-fs (loop1): Ignoring removed oldalloc option [ 111.985301][ T4686] EXT4-fs (loop1): inline encryption not supported [ 111.993238][ T4686] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 112.005340][ T4686] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.158130][ T4686] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.116: bg 0: block 64: padding at end of block bitmap is not set [ 112.312274][ T4686] Quota error (device loop1): write_blk: dquota write failed [ 112.342241][ T4686] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 112.389492][ T4686] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.116: Failed to acquire dquot type 0 [ 112.440896][ T4694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.117'. [ 112.465606][ T4694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.117'. [ 112.586345][ T4686] EXT4-fs (loop1): 1 truncate cleaned up [ 112.612220][ T4686] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,oldalloc,inlinecrypt,delalloc,mblk_io_submit,delalloc,noload,mb_optimize_scan=0x0000000000000001,lazytime,,errors=continue. Quota mode: writeback. [ 113.379759][ T4694] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 113.626796][ T4694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.643639][ T4700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 113.841823][ T4708] tipc: Enabled bearer , priority 0 [ 113.974933][ T4708] tipc: Resetting bearer [ 114.225200][ T4247] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.275305][ T4707] tipc: Disabling bearer [ 114.443901][ T4716] loop3: detected capacity change from 0 to 64 [ 114.935602][ T4247] usb 3-1: config 0 has no interfaces? [ 115.094158][ T4718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.124'. [ 115.181363][ T4720] netlink: 'syz.0.124': attribute type 2 has an invalid length. [ 115.222885][ T4720] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.124'. [ 115.665532][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.833189][ T4737] syz.2.131 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.959168][ T4247] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 115.971026][ T4247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.981862][ T4247] usb 3-1: config 0 descriptor?? [ 116.005150][ T4247] usb 3-1: can't set config #0, error -71 [ 116.005187][ T4295] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.025131][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 116.031890][ T4247] usb 3-1: USB disconnect, device number 6 [ 116.205286][ T1108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.370666][ T4295] usb 2-1: Using ep0 maxpacket: 16 [ 116.405400][ T1108] usb 1-1: config 7 has an invalid interface number: 6 but max is 0 [ 116.425194][ T1108] usb 1-1: config 7 has no interface number 0 [ 116.543061][ T1108] usb 1-1: config 7 interface 6 altsetting 254 endpoint 0xF has invalid wMaxPacketSize 0 [ 116.555199][ T1108] usb 1-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.573109][ T1108] usb 1-1: config 7 interface 6 has no altsetting 0 [ 116.627162][ T4743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'. [ 117.665488][ T4295] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.745556][ T1108] usb 1-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e [ 117.775255][ T4295] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 117.793918][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.802465][ T4295] usb 2-1: can't read configurations, error -71 [ 117.819639][ T1108] usb 1-1: Product: syz [ 117.835423][ T1108] usb 1-1: Manufacturer: syz [ 117.863971][ T1108] usb 1-1: SerialNumber: syz [ 118.184899][ T4748] tipc: Started in network mode [ 118.196335][ T1108] option 1-1:7.6: GSM modem (1-port) converter detected [ 118.220345][ T4748] tipc: Node identity 569f3f8b2853, cluster identity 4711 [ 118.250430][ T4748] tipc: Enabled bearer , priority 0 [ 118.258370][ T1108] usb 1-1: USB disconnect, device number 4 [ 118.286204][ T1108] option 1-1:7.6: device disconnected [ 118.312091][ T4749] tipc: Resetting bearer [ 118.376929][ T4747] tipc: Disabling bearer [ 118.415992][ T4753] loop1: detected capacity change from 0 to 512 [ 118.477381][ T4753] EXT4-fs (loop1): Ignoring removed oldalloc option [ 118.530649][ T4753] EXT4-fs (loop1): inline encryption not supported [ 118.575188][ T4753] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 118.603227][ T4753] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.777345][ T4753] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.135: bg 0: block 64: padding at end of block bitmap is not set [ 118.873043][ T4753] Quota error (device loop1): write_blk: dquota write failed [ 118.895752][ T4764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.137'. [ 118.929703][ T4753] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 119.011645][ T4753] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.135: Failed to acquire dquot type 0 [ 119.032982][ T4767] netlink: 'syz.0.137': attribute type 2 has an invalid length. [ 119.033446][ T4766] program syz.2.139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.061427][ T4767] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.137'. [ 119.072685][ T4753] EXT4-fs (loop1): 1 truncate cleaned up [ 119.082617][ T4753] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,oldalloc,inlinecrypt,delalloc,mblk_io_submit,delalloc,noload,mb_optimize_scan=0x0000000000000001,lazytime,,errors=continue. Quota mode: writeback. [ 119.212335][ T4770] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.586937][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.684232][ T4778] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 119.945295][ T4247] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.005175][ T1108] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.025254][ T1108] usb 3-1: config 0 has no interface number 0 [ 120.195168][ T4247] usb 4-1: Using ep0 maxpacket: 16 [ 120.205335][ T1108] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 120.224730][ T26] audit: type=1326 audit(1755214149.605:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4784 comm="syz.4.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc55a144be9 code=0x0 [ 120.264543][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.285102][ T1108] usb 3-1: Product: syz [ 120.432776][ T1108] usb 3-1: Manufacturer: syz [ 120.439199][ T1108] usb 3-1: SerialNumber: syz [ 120.504580][ T4786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'. [ 121.435402][ T1108] usb 3-1: config 0 descriptor?? [ 121.515102][ T4247] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.570331][ T4790] device syzkaller0 entered promiscuous mode [ 121.575305][ T4247] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 121.595249][ T4247] usb 4-1: can't read configurations, error -71 [ 121.695253][ T1108] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 121.748211][ T1108] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.809214][ T1108] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 121.851370][ T1108] usb 3-1: media controller created [ 121.912496][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.164719][ T1108] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 122.242376][ T26] audit: type=1326 audit(1755214151.625:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 122.330604][ T1108] usb 3-1: USB disconnect, device number 7 [ 122.376652][ T4801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.150'. [ 122.401714][ T26] audit: type=1326 audit(1755214151.645:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 122.438541][ T26] audit: type=1326 audit(1755214151.645:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 122.606687][ T26] audit: type=1326 audit(1755214151.645:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 122.725224][ T4233] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.055232][ T26] audit: type=1326 audit(1755214151.645:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 123.139162][ T4822] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.195474][ T4233] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 123.245043][ T4233] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 123.275158][ T4233] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 123.320866][ T4233] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 123.416986][ T4824] device syzkaller0 entered promiscuous mode [ 123.458725][ T4233] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 123.626219][ T4233] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 123.636449][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 123.648211][ T4233] usb 1-1: Product: syz [ 123.655331][ T4233] usb 1-1: Manufacturer: syz [ 123.716155][ T4233] cdc_wdm 1-1:1.0: skipping garbage [ 123.722734][ T4233] cdc_wdm 1-1:1.0: skipping garbage [ 123.819805][ T4233] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 123.874478][ T4233] cdc_wdm 1-1:1.0: Unknown control protocol [ 123.910269][ T4827] loop4: detected capacity change from 0 to 512 [ 123.995051][ T4827] EXT4-fs (loop4): Ignoring removed oldalloc option [ 124.002527][ T4827] EXT4-fs (loop4): inline encryption not supported [ 124.061653][ T4827] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 124.084239][ T4827] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.188987][ T4827] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.158: bg 0: block 64: padding at end of block bitmap is not set [ 124.206445][ T4827] Quota error (device loop4): write_blk: dquota write failed [ 124.214234][ T4827] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 124.231271][ T4827] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.158: Failed to acquire dquot type 0 [ 124.255178][ T4827] EXT4-fs (loop4): 1 truncate cleaned up [ 124.265301][ T4827] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,oldalloc,inlinecrypt,delalloc,mblk_io_submit,delalloc,noload,mb_optimize_scan=0x0000000000000001,lazytime,,errors=continue. Quota mode: writeback. [ 124.358149][ T4233] usb 1-1: USB disconnect, device number 5 [ 125.063034][ T1325] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.326260][ T1325] usb 3-1: Using ep0 maxpacket: 16 [ 125.584512][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 126.645235][ T1325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.705264][ T1325] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 126.727373][ T1325] usb 3-1: can't read configurations, error -71 [ 127.213660][ T4872] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.334717][ T4875] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 127.684022][ T4878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.761658][ T4878] bond2: (slave bond3): making interface the new active one [ 127.806296][ T4878] bond2: (slave bond3): Enslaving as an active interface with an up link [ 129.412927][ T4892] loop2: detected capacity change from 0 to 32768 [ 130.760185][ T4922] loop2: detected capacity change from 0 to 32768 [ 130.883672][ T4924] loop1: detected capacity change from 0 to 64 [ 133.175631][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.178794][ T4934] loop3: detected capacity change from 0 to 32768 [ 133.182443][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.351392][ T4969] loop3: detected capacity change from 0 to 64 [ 135.639498][ T4975] loop2: detected capacity change from 0 to 32768 [ 139.328472][ T5018] loop3: detected capacity change from 0 to 32768 [ 139.509159][ T5024] loop4: detected capacity change from 0 to 512 [ 139.600133][ T5024] EXT4-fs (loop4): Ignoring removed oldalloc option [ 139.608169][ T5024] EXT4-fs (loop4): inline encryption not supported [ 139.618003][ T5024] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 139.695809][ T5024] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.717590][ T5031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.225'. [ 139.763973][ T5031] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.773323][ T5031] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.827591][ T5024] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.222: bg 0: block 64: padding at end of block bitmap is not set [ 139.899772][ T5024] Quota error (device loop4): write_blk: dquota write failed [ 139.911935][ T5024] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 139.919610][ T5038] netlink: 44 bytes leftover after parsing attributes in process `syz.2.225'. [ 139.923516][ T5024] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.222: Failed to acquire dquot type 0 [ 139.944601][ T5024] EXT4-fs (loop4): 1 truncate cleaned up [ 139.950570][ T5024] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,oldalloc,inlinecrypt,delalloc,mblk_io_submit,delalloc,noload,mb_optimize_scan=0x0000000000000001,lazytime,,errors=continue. Quota mode: writeback. [ 141.205261][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 141.585268][ T23] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.622428][ T23] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.734310][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.835159][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 141.915040][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 142.215644][ T23] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.233105][ T23] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.242326][ T23] usb 5-1: Product: syz [ 142.247076][ T23] usb 5-1: Manufacturer: syz [ 143.261926][ T5072] loop1: detected capacity change from 0 to 32768 [ 143.276064][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 143.282221][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 143.372719][ T23] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 143.432398][ T23] cdc_wdm 5-1:1.0: Unknown control protocol [ 143.890222][ T1325] usb 5-1: USB disconnect, device number 2 [ 144.250555][ T5091] loop3: detected capacity change from 0 to 512 [ 144.368230][ T5091] EXT4-fs (loop3): Ignoring removed oldalloc option [ 144.395279][ T5091] EXT4-fs (loop3): inline encryption not supported [ 144.430043][ T5091] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 144.451382][ T5091] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.601019][ T5091] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.242: bg 0: block 64: padding at end of block bitmap is not set [ 144.633758][ T5091] Quota error (device loop3): write_blk: dquota write failed [ 144.682075][ T5091] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 144.716043][ T5091] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.242: Failed to acquire dquot type 0 [ 144.743254][ T5091] EXT4-fs (loop3): 1 truncate cleaned up [ 144.755268][ T5091] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,oldalloc,inlinecrypt,delalloc,mblk_io_submit,delalloc,noload,mb_optimize_scan=0x0000000000000001,lazytime,,errors=continue. Quota mode: writeback. [ 144.835013][ T5111] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 145.779239][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.818973][ T26] audit: type=1326 audit(1755214175.205:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 145.905182][ T26] audit: type=1326 audit(1755214175.245:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 145.999833][ T26] audit: type=1326 audit(1755214175.245:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 146.195088][ T26] audit: type=1326 audit(1755214175.245:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 146.227549][ T5126] program syz.1.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.600845][ T5141] loop4: detected capacity change from 0 to 512 [ 147.681078][ T5141] EXT4-fs (loop4): Ignoring removed oldalloc option [ 147.719499][ T5141] EXT4-fs (loop4): inline encryption not supported [ 147.754864][ T5141] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 147.775546][ T5141] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.922546][ T5141] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.257: bg 0: block 64: padding at end of block bitmap is not set [ 147.981124][ T5141] Quota error (device loop4): write_blk: dquota write failed [ 148.065236][ T5141] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 148.085322][ T5141] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.257: Failed to acquire dquot type 0 [ 148.109803][ T5141] EXT4-fs (loop4): 1 truncate cleaned up [ 148.124143][ T5141] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,oldalloc,inlinecrypt,delalloc,mblk_io_submit,delalloc,noload,mb_optimize_scan=0x0000000000000001,lazytime,,errors=continue. Quota mode: writeback. [ 149.056055][ T5159] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.013498][ T5184] overlayfs: missing 'lowerdir' [ 152.652458][ T5219] overlayfs: missing 'lowerdir' [ 154.405095][ T4183] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 154.705211][ T4183] usb 5-1: Using ep0 maxpacket: 8 [ 155.045354][ T4183] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 155.073558][ T4183] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 155.086717][ T4183] usb 5-1: Product: syz [ 155.093551][ T4183] usb 5-1: Manufacturer: syz [ 155.101845][ T4183] usb 5-1: SerialNumber: syz [ 155.135911][ T4183] usb 5-1: config 0 descriptor?? [ 155.257247][ T4183] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 156.235169][ T4183] gspca_zc3xx: reg_w_i err -110 [ 156.240874][ T4183] gspca_zc3xx: probe of 5-1:0.0 failed with error -110 [ 156.529187][ T13] usb 5-1: USB disconnect, device number 3 [ 156.754448][ T5267] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 156.797784][ T5267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.040893][ T5271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.070826][ T5271] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.135824][ T5271] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 157.260430][ T5267] device macvlan2 entered promiscuous mode [ 157.299308][ T5267] device bond1 entered promiscuous mode [ 157.334454][ T5267] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.382408][ T5267] device bond1 left promiscuous mode [ 158.578888][ T5307] process 'syz.2.307' launched './file1' with NULL argv: empty string added [ 159.515154][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 159.712026][ T5319] loop1: detected capacity change from 0 to 16 [ 160.015117][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 160.678817][ T5319] erofs: (device loop1): mounted with root inode @ nid 36. [ 160.698217][ T5316] attempt to access beyond end of device [ 160.698217][ T5316] loop1: rw=0, want=34359738368, limit=16 [ 162.095107][ T5342] netlink: 399 bytes leftover after parsing attributes in process `syz.3.322'. [ 162.233136][ T5345] loop1: detected capacity change from 0 to 64 [ 163.931630][ T5326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.312'. [ 165.755310][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 165.838480][ T13] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 165.860416][ T13] usb 5-1: chopping to 0 config(s) [ 165.911984][ T13] usb 5-1: can't read configurations, error -32 [ 166.085071][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 166.275010][ T13] usb 5-1: device descriptor read/64, error -32 [ 166.395229][ T13] usb usb5-port1: attempt power cycle [ 166.443932][ T5359] loop1: detected capacity change from 0 to 40427 [ 166.618298][ T5359] F2FS-fs (loop1): invalid crc value [ 166.686040][ T5359] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.805160][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 166.895155][ T13] usb 5-1: device descriptor read/8, error -32 [ 166.932403][ T5359] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 167.165284][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.245196][ T13] usb 5-1: device descriptor read/8, error -32 [ 167.365369][ T13] usb usb5-port1: unable to enumerate USB device [ 167.535247][ T5417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.350'. [ 167.805128][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 169.153147][ T26] audit: type=1800 audit(1755214198.535:21): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.346" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 169.153291][ T5431] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 169.187913][ T5431] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 169.198181][ T5431] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 170.155211][ T5444] loop1: detected capacity change from 0 to 512 [ 170.737335][ T5444] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 170.773467][ T5444] EXT4-fs (loop1): Ignoring removed bh option [ 171.419490][ T5444] EXT4-fs (loop1): Test dummy encryption mode enabled [ 171.429576][ T5444] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 171.446996][ T5444] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 171.618668][ T5463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.362'. [ 171.869936][ T5444] EXT4-fs (loop1): 1 truncate cleaned up [ 171.878719][ T5444] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 172.103858][ T5438] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 173.230327][ T5487] loop4: detected capacity change from 0 to 8192 [ 173.584821][ T5495] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 173.595901][ T5495] FAT-fs (loop4): Filesystem has been set read-only [ 173.607036][ T5495] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 173.670113][ T5500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.373'. [ 173.693244][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 178.049045][ T5563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.389'. [ 179.206977][ T5579] loop4: detected capacity change from 0 to 64 [ 180.139808][ T5586] xt_hashlimit: max too large, truncated to 1048576 [ 180.877321][ T5589] loop4: detected capacity change from 0 to 8192 [ 181.248625][ T5602] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 181.258348][ T5602] FAT-fs (loop4): Filesystem has been set read-only [ 181.266857][ T5602] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 184.371452][ T26] audit: type=1326 audit(1755214213.755:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a206d4be9 code=0x7ffc0000 [ 184.438060][ T26] audit: type=1326 audit(1755214213.755:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a206d4be9 code=0x7ffc0000 [ 184.614828][ T26] audit: type=1326 audit(1755214213.755:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a206d4be9 code=0x7ffc0000 [ 184.673600][ T26] audit: type=1326 audit(1755214213.755:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a206d4be9 code=0x7ffc0000 [ 185.418759][ T26] audit: type=1326 audit(1755214213.755:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a206d4be9 code=0x7ffc0000 [ 185.495150][ T26] audit: type=1326 audit(1755214213.755:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5637 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a206d4be9 code=0x7ffc0000 [ 186.097002][ T4226] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 186.824711][ T5665] device wg2 entered promiscuous mode [ 186.945253][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.155048][ T4226] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 187.166250][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.186133][ T4226] usb 2-1: config 0 descriptor?? [ 187.227561][ T4226] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 189.616854][ T4226] usb 2-1: USB disconnect, device number 8 [ 190.065182][ T4226] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 190.345330][ T4226] usb 2-1: Using ep0 maxpacket: 8 [ 190.476016][ T4226] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.520898][ T4226] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 190.692308][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.883728][ T4226] usb 2-1: config 0 descriptor?? [ 191.767059][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 191.794605][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 192.033063][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 192.039815][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 192.046585][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 192.466899][ T5709] loop4: detected capacity change from 0 to 32768 [ 192.477652][ T4226] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 192.494678][ T4226] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 192.578811][ T4226] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 192.927473][ T4226] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 193.225096][ T4226] elecom 0003:056E:00E6.0001: unknown main item tag 0x0 [ 193.321562][ T4226] elecom 0003:056E:00E6.0001: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.1-1/input0 [ 193.452906][ T4226] usb 2-1: USB disconnect, device number 9 [ 193.684494][ T5724] fido_id[5724]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 194.078586][ T5733] netlink: 364 bytes leftover after parsing attributes in process `syz.3.444'. [ 194.415915][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.467168][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.423857][ T5817] netlink: 44 bytes leftover after parsing attributes in process `syz.3.468'. [ 205.447474][ T5817] netlink: 44 bytes leftover after parsing attributes in process `syz.3.468'. [ 210.151259][ T5842] overlayfs: failed to clone upperpath [ 212.005684][ T5870] tipc: Enabling of bearer rejected, failed to enable media [ 212.061559][ T5873] capability: warning: `syz.0.484' uses 32-bit capabilities (legacy support in use) [ 213.722530][ T5874] device syzkaller0 entered promiscuous mode [ 219.727473][ T5912] loop4: detected capacity change from 0 to 40427 [ 219.895560][ T5912] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 219.903777][ T5912] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 219.959535][ T5912] F2FS-fs (loop4): invalid crc value [ 220.795343][ T5934] tipc: Enabling of bearer rejected, failed to enable media [ 220.805415][ T5912] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 221.074733][ T5934] device syzkaller0 entered promiscuous mode [ 221.383191][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 221.497618][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 221.529788][ T5954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.769866][ T5964] overlayfs: failed to clone upperpath [ 224.759080][ T5985] loop4: detected capacity change from 0 to 256 [ 224.941520][ T5985] FAT-fs (loop4): Directory bread(block 64) failed [ 224.964636][ T5985] FAT-fs (loop4): Directory bread(block 65) failed [ 225.004158][ T5985] FAT-fs (loop4): Directory bread(block 66) failed [ 225.025619][ T5985] FAT-fs (loop4): Directory bread(block 67) failed [ 225.055479][ T5985] FAT-fs (loop4): Directory bread(block 68) failed [ 225.062461][ T5985] FAT-fs (loop4): Directory bread(block 69) failed [ 225.155279][ T5985] FAT-fs (loop4): Directory bread(block 70) failed [ 225.169165][ T5988] tipc: Enabling of bearer rejected, failed to enable media [ 225.189574][ T5985] FAT-fs (loop4): Directory bread(block 71) failed [ 225.225383][ T5985] FAT-fs (loop4): Directory bread(block 72) failed [ 225.250789][ T5985] FAT-fs (loop4): Directory bread(block 73) failed [ 225.462325][ T6002] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 232.372497][ T6054] tipc: Enabling of bearer rejected, failed to enable media [ 233.397719][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.540'. [ 235.669750][ T6072] overlayfs: failed to clone upperpath [ 237.528540][ T6092] tipc: Enabling of bearer rejected, failed to enable media [ 237.605600][ T6096] xt_hashlimit: size too large, truncated to 1048576 [ 240.686911][ T6125] overlayfs: failed to clone upperpath [ 244.376371][ T6137] tipc: Enabling of bearer rejected, failed to enable media [ 247.685844][ T6155] device wg2 entered promiscuous mode [ 249.615848][ T6182] tipc: Enabling of bearer rejected, failed to enable media [ 249.684759][ T6185] device veth0_to_hsr entered promiscuous mode [ 249.767442][ T1325] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 249.842679][ T6160] device veth0_to_hsr left promiscuous mode [ 250.969032][ T1325] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.985289][ T1325] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.075140][ T1325] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 251.105379][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 251.145098][ T1325] usb 2-1: SerialNumber: syz [ 251.528898][ T1325] usb 2-1: 0:2 : does not exist [ 252.586868][ T1325] usb 2-1: USB disconnect, device number 10 [ 252.768991][ T6175] udevd[6175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.912994][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.920612][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.299384][ T6217] chnl_net:caif_netlink_parms(): no params data found [ 256.634241][ T6236] netlink: 96 bytes leftover after parsing attributes in process `syz.4.592'. [ 257.948605][ T4234] Bluetooth: hci5: command 0x0409 tx timeout [ 260.000650][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.014840][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.160567][ T4262] Bluetooth: hci5: command 0x041b tx timeout [ 260.198871][ T6217] device bridge_slave_0 entered promiscuous mode [ 260.218563][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.250968][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.280303][ T6217] device bridge_slave_1 entered promiscuous mode [ 260.392631][ T6217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.439395][ T6217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.567711][ T6217] team0: Port device team_slave_0 added [ 260.600717][ T6217] team0: Port device team_slave_1 added [ 260.700081][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.726488][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.817494][ T6217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.859046][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.890359][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.970483][ T6217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.127348][ T6217] device hsr_slave_0 entered promiscuous mode [ 261.162940][ T6217] device hsr_slave_1 entered promiscuous mode [ 261.183124][ T6217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.206607][ T6217] Cannot create hsr debugfs directory [ 261.547370][ T6217] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 261.567737][ T6217] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 261.587536][ T6217] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.608777][ T6217] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 261.707553][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.715630][ T6217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.799865][ T6261] device wg2 left promiscuous mode [ 261.843315][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.969040][ T6217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.095506][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.115498][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.147640][ T6217] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.204790][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.224572][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.247153][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.254666][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.466119][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.532405][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.714048][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.721743][ T4222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.129348][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.789800][ T4262] Bluetooth: hci5: command 0x040f tx timeout [ 263.866119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.929287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.022171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.031979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.042191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.055698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.084397][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.106472][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.146418][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.296782][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.327221][ T6217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.000393][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.038149][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.069421][ T6217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.253684][ T4234] Bluetooth: hci5: command 0x0419 tx timeout [ 269.180533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.201442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.536496][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.572524][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.597370][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.732905][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.347080][ T6217] device veth0_vlan entered promiscuous mode [ 270.413992][ T6217] device veth1_vlan entered promiscuous mode [ 270.459817][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.686199][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.714432][ T6217] device veth0_macvtap entered promiscuous mode [ 272.150641][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.196572][ T6217] device veth1_macvtap entered promiscuous mode [ 272.270753][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.445140][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.515214][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.551129][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.589681][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.631205][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.678721][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.725517][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.769340][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.794794][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.818535][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.854114][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.879436][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.139739][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.192305][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.610745][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.787429][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.628881][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.642608][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.687071][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.688742][ T6418] overlayfs: failed to clone upperpath [ 274.698899][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.715491][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.726993][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.741887][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.833264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.843476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.891761][ T6217] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.912525][ T6217] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.938025][ T6217] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.983565][ T6217] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.446624][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.495342][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.543643][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.557962][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 276.585733][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.658228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.744709][ T6448] loop5: detected capacity change from 0 to 4096 [ 277.909437][ T6448] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 283.669439][ T6516] loop5: detected capacity change from 0 to 256 [ 283.678089][ T6516] exfat: Unknown parameter 'fsmagic' [ 283.685967][ T6516] xt_hashlimit: max too large, truncated to 1048576 [ 283.718800][ T6516] hub 8-0:1.0: USB hub found [ 283.725699][ T6516] hub 8-0:1.0: 1 port detected [ 291.365076][ T21] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 292.025096][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.091765][ T21] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 292.126912][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.205155][ T21] usb 2-1: config 0 descriptor?? [ 293.940804][ T21] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 296.405253][ T21] lenovo 0003:17EF:6047.0002: Failed to switch F7/9/11 mode: -71 [ 296.440168][ T6596] netlink: 16 bytes leftover after parsing attributes in process `syz.5.690'. [ 296.457737][ T21] lenovo 0003:17EF:6047.0002: Failed to switch middle button: -71 [ 296.488487][ T21] lenovo 0003:17EF:6047.0002: Fn-lock setting failed: -71 [ 296.616306][ T6596] netlink: 16 bytes leftover after parsing attributes in process `syz.5.690'. [ 296.617381][ T21] lenovo 0003:17EF:6047.0002: Sensitivity setting failed: -71 [ 296.665360][ T21] usb 2-1: USB disconnect, device number 11 [ 296.704224][ T6601] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.886305][ T6605] fido_id[6605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 298.018854][ T6613] syz.2.695 (6613) used greatest stack depth: 17448 bytes left [ 300.183448][ T6627] loop5: detected capacity change from 0 to 256 [ 302.100414][ T6627] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 302.113039][ T6627] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 302.182445][ T6627] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 303.046086][ T6632] netlink: 40 bytes leftover after parsing attributes in process `syz.5.701'. [ 303.249833][ T6637] loop5: detected capacity change from 0 to 64 [ 303.293407][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'. [ 303.380383][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'. [ 306.629288][ T6663] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.560092][ T6679] tipc: Started in network mode [ 308.587475][ T6679] tipc: Node identity ac14140f, cluster identity 4711 [ 308.606262][ T6679] tipc: New replicast peer: 255.255.255.255 [ 308.645301][ T6679] tipc: Enabled bearer , priority 10 [ 308.663916][ T6681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.716'. [ 308.681272][ T6681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.716'. [ 309.658350][ T13] tipc: Node number set to 2886997007 [ 311.831883][ T6719] xt_hashlimit: max too large, truncated to 1048576 [ 314.873837][ T6733] device syzkaller0 entered promiscuous mode [ 315.208337][ T6740] loop5: detected capacity change from 0 to 512 [ 315.250823][ T6740] EXT4-fs (loop5): Ignoring removed oldalloc option [ 315.263574][ T6740] EXT4-fs (loop5): inline encryption not supported [ 315.280263][ T6740] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 315.301085][ T6740] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 315.386571][ T6740] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.734: bg 0: block 64: padding at end of block bitmap is not set [ 315.439725][ T6740] Quota error (device loop5): write_blk: dquota write failed [ 315.467444][ T6740] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 315.500806][ T6740] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.734: Failed to acquire dquot type 0 [ 315.563558][ T6740] EXT4-fs (loop5): 1 truncate cleaned up [ 315.585080][ T6740] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,oldalloc,inlinecrypt,delalloc,mblk_io_submit,delalloc,noload,mb_optimize_scan=0x0000000000000001,lazytime,,errors=continue. Quota mode: writeback. [ 316.620481][ T6758] bridge_slave_0: default FDB implementation only supports local addresses [ 317.267175][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.273777][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.143541][ T6773] device syzkaller0 entered promiscuous mode [ 323.102091][ T6802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'. [ 324.436226][ T6817] syz.5.748[6817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.436337][ T6817] syz.5.748[6817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.452688][ T26] audit: type=1326 audit(1755214353.835:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.5.748" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba005acbe9 code=0x0 [ 333.954775][ T6862] chnl_net:caif_netlink_parms(): no params data found [ 334.808579][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.865207][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 334.894994][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.935754][ T6862] device bridge_slave_0 entered promiscuous mode [ 334.977150][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.009742][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.032879][ T6862] device bridge_slave_1 entered promiscuous mode [ 335.100213][ T6862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.134227][ T6862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.203275][ T6862] team0: Port device team_slave_0 added [ 335.244093][ T6862] team0: Port device team_slave_1 added [ 336.631322][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.644565][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.734049][ T6862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.791251][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.811304][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.945036][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 336.956736][ T6862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.067462][ T6862] device hsr_slave_0 entered promiscuous mode [ 337.107008][ T6862] device hsr_slave_1 entered promiscuous mode [ 337.130177][ T6862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.192654][ T6862] Cannot create hsr debugfs directory [ 340.246663][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 340.681342][ T4325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.028006][ T4325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.095446][ T6919] overlayfs: failed to clone upperpath [ 341.184486][ T4325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.907173][ T6931] xt_hashlimit: max too large, truncated to 1048576 [ 342.315457][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 343.161508][ T6907] chnl_net:caif_netlink_parms(): no params data found [ 343.211273][ T6862] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 343.331291][ T6862] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 343.433073][ T4325] tipc: Left network mode [ 343.438796][ T6862] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 343.468376][ T4234] Bluetooth: hci0: command 0x0409 tx timeout [ 343.613717][ T6862] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 345.418248][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.435239][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.456356][ T6907] device bridge_slave_0 entered promiscuous mode [ 345.505528][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 345.512478][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.533417][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.553865][ T6907] device bridge_slave_1 entered promiscuous mode [ 345.587765][ T6967] overlayfs: failed to clone upperpath [ 345.676899][ T6907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.722433][ T6907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.773643][ T6862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.893163][ T6862] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.039084][ T6907] team0: Port device team_slave_0 added [ 346.051918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 346.071919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.085246][ T6981] syz.0.798[6981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.085432][ T6981] syz.0.798[6981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.246502][ T6907] team0: Port device team_slave_1 added [ 346.345234][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.361084][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.666480][ T6907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.271777][ T6862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.284166][ T6862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.373408][ T4234] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 347.402560][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.422473][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.449195][ T6997] overlayfs: failed to clone upperpath [ 347.454060][ T445] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.462965][ T445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.473079][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.485594][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.494557][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.502049][ T445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.511247][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.520800][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.540381][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.552558][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.562761][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.579462][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.585684][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 347.597278][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.607670][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.616998][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.627988][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.648469][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.659821][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.668625][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.780206][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.794179][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.829932][ T6907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.844199][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.863252][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.877674][ T4234] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 347.898412][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.934008][ T4234] usb 2-1: config 0 descriptor?? [ 348.136185][ T6907] device hsr_slave_0 entered promiscuous mode [ 348.214105][ T6907] device hsr_slave_1 entered promiscuous mode [ 348.434616][ T6907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.448859][ T6907] Cannot create hsr debugfs directory [ 349.450848][ T6862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.589188][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.605475][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.795383][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 351.215243][ T4234] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 351.715085][ T4234] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 351.905152][ T4234] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 351.972391][ T4234] usb 2-1: USB disconnect, device number 12 [ 352.277241][ T4325] device hsr_slave_0 left promiscuous mode [ 352.340750][ T4325] device hsr_slave_1 left promiscuous mode [ 352.396958][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.437824][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.486119][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.541068][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.617432][ T4325] device bridge_slave_1 left promiscuous mode [ 352.627111][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.650259][ T4325] device bridge_slave_0 left promiscuous mode [ 352.685343][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.743078][ T4325] device veth1_macvtap left promiscuous mode [ 352.764821][ T4325] device veth0_macvtap left promiscuous mode [ 352.779356][ T4325] device veth1_vlan left promiscuous mode [ 352.814201][ T4325] device veth0_vlan left promiscuous mode [ 353.973410][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 353.991358][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 354.011821][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.037626][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.180095][ T4325] bond0 (unregistering): Released all slaves [ 354.270638][ T6907] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 354.305154][ T6907] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 354.336194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 354.358661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.395845][ T6907] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 354.502699][ T6907] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 354.648939][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.660320][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.674398][ T6862] device veth0_vlan entered promiscuous mode [ 354.698483][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.716123][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.733397][ T6862] device veth1_vlan entered promiscuous mode [ 354.864537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 354.889391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 354.911755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.044604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.078211][ T6862] device veth0_macvtap entered promiscuous mode [ 355.104787][ T6862] device veth1_macvtap entered promiscuous mode [ 355.222768][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.288407][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.311392][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.343534][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.360042][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.376884][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.388746][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.403002][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.416918][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.465775][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.483238][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.506333][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 355.566041][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 355.576636][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 355.589059][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 355.601857][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 355.635545][ T7099] device team0 entered promiscuous mode [ 355.642635][ T7099] device team_slave_0 entered promiscuous mode [ 355.654540][ T7099] device team_slave_1 entered promiscuous mode [ 355.669125][ T7099] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 355.679986][ T7099] bridge0: port 3(macvlan2) entered blocking state [ 355.697525][ T7099] bridge0: port 3(macvlan2) entered disabled state [ 355.718804][ T7099] device macvlan2 entered promiscuous mode [ 355.761394][ T7099] bridge0: port 3(macvlan2) entered blocking state [ 355.768637][ T7099] bridge0: port 3(macvlan2) entered forwarding state [ 355.811688][ T6907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.935227][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.960897][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.992989][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.054950][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.095098][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.125658][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.157680][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.190779][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.223631][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.264914][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.296329][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.346433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 356.381985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 356.450712][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 356.525464][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.598366][ T6862] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.656965][ T6862] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.685834][ T6862] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.723733][ T6862] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.869244][ T6907] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.937327][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 357.031911][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.145186][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.153893][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.247784][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 357.282142][ T7117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.826'. [ 357.363828][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 357.387417][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.414794][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.422890][ T445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.520787][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 357.636227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 357.767448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 357.828830][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.939021][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.141437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 358.914546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.007418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.095540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.157341][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 359.168399][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.179141][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 359.260310][ T6907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.384144][ T6907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.416497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.882093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.965443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.987067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 360.035692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 360.085835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 360.203120][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.245465][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.312349][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 361.842957][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 361.868134][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 361.937477][ T6907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.156121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.195808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.379483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.446623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.855198][ T6907] device veth0_vlan entered promiscuous mode [ 363.925163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.008332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.342420][ T7202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.837'. [ 364.440408][ T6907] device veth1_vlan entered promiscuous mode [ 364.540650][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 364.590116][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.632803][ T6907] device veth0_macvtap entered promiscuous mode [ 364.711323][ T6907] device veth1_macvtap entered promiscuous mode [ 364.806227][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.835057][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.876731][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.959707][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.015037][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.081593][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.155070][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.235307][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.283886][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.322915][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.373757][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.405125][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.456951][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.613209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 365.629063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 365.646804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 365.659887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.721259][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.764056][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.777764][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.790231][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.803024][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.817386][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.833034][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.857265][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.881114][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.924395][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.945329][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.987817][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.011284][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.021577][ T4233] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 366.040868][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 366.063026][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.090218][ T6907] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.128390][ T6907] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.158781][ T6907] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.236159][ T6907] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.416261][ T4233] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.453089][ T4233] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.495230][ T4233] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 366.534945][ T4233] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.595305][ T4233] usb 7-1: config 0 descriptor?? [ 366.736697][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.768553][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.855246][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 366.881897][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.922619][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.939427][ T4325] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.000750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 367.078303][ T4325] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.297702][ T4325] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.407031][ T4325] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.615142][ T4233] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 368.673332][ T4233] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 368.738570][ T4233] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 368.769254][ T4233] usb 7-1: USB disconnect, device number 2 [ 369.145518][ T1325] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 369.705379][ T1325] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.735634][ T1325] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 369.865931][ T1325] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 370.024502][ T1325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.268142][ T1325] usb 8-1: config 0 descriptor?? [ 370.788016][ T7259] netlink: 'syz.7.847': attribute type 7 has an invalid length. [ 370.815449][ T7259] netlink: 'syz.7.847': attribute type 8 has an invalid length. [ 371.031925][ T7283] tipc: Enabling of bearer rejected, failed to enable media [ 371.142777][ T4325] device hsr_slave_0 left promiscuous mode [ 371.175381][ T4325] device hsr_slave_1 left promiscuous mode [ 371.207948][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.276478][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.332815][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.407237][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.452645][ T4325] device bridge_slave_1 left promiscuous mode [ 371.462897][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.504467][ T4325] device bridge_slave_0 left promiscuous mode [ 371.522010][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.596160][ T4325] device veth1_macvtap left promiscuous mode [ 371.612240][ T4325] device veth0_macvtap left promiscuous mode [ 371.622822][ T4325] device veth1_vlan left promiscuous mode [ 371.650217][ T4325] device veth0_vlan left promiscuous mode [ 372.511846][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 372.583206][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 372.621549][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.712765][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.157867][ T4325] bond0 (unregistering): Released all slaves [ 373.404696][ T4262] usb 8-1: USB disconnect, device number 2 [ 377.696680][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 377.815840][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 377.873118][ T7350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.707906][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.714694][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.514740][ T7378] netlink: 44 bytes leftover after parsing attributes in process `syz.6.867'. [ 380.988291][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.871'. [ 382.211479][ T7424] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.248262][ T7424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.300687][ T7424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.344356][ T7424] device bridge_slave_0 left promiscuous mode [ 382.429155][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.531315][ T7424] device bridge_slave_1 left promiscuous mode [ 382.601577][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.698860][ T7424] bond0: (slave bond_slave_0): Releasing backup interface [ 382.775033][ T7424] bond0: (slave bond_slave_1): Releasing backup interface [ 383.261476][ T7424] team0: Port device team_slave_0 removed [ 383.390919][ T7424] team0: Port device team_slave_1 removed [ 383.406290][ T7424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.439041][ T7424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.526608][ T7424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.547909][ T7424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.106374][ T4261] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 384.575195][ T4261] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.602017][ T4261] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.619921][ T4261] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 384.635251][ T4261] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.665630][ T4261] usb 8-1: config 0 descriptor?? [ 385.371151][ T4261] usb 8-1: language id specifier not provided by device, defaulting to English [ 385.845219][ T4261] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 386.047494][ T4261] usb 8-1: USB disconnect, device number 3 [ 393.403653][ T7630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.412750][ T7630] IPv6: NLM_F_CREATE should be set when creating new route [ 393.525120][ T1111] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 393.543283][ T7637] netlink: 'syz.0.920': attribute type 3 has an invalid length. [ 393.846499][ T1111] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 393.955385][ T1111] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.974745][ T1111] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.997371][ T1111] usb 7-1: config 0 interface 0 has no altsetting 0 [ 394.108189][ T1111] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.147534][ T1111] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.207714][ T1111] usb 7-1: config 0 interface 0 has no altsetting 0 [ 394.343618][ T1111] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.394310][ T1111] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.465898][ T1111] usb 7-1: config 0 interface 0 has no altsetting 0 [ 395.422273][ T1111] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.467016][ T26] audit: type=1326 audit(1755214424.855:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 395.510722][ T1111] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.540913][ T26] audit: type=1326 audit(1755214424.895:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 395.744575][ T1111] usb 7-1: config 0 interface 0 has no altsetting 0 [ 395.833312][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 397.863598][ T26] audit: type=1326 audit(1755214424.905:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 397.897680][ T26] audit: type=1326 audit(1755214424.905:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 397.922113][ T1111] usb 7-1: unable to read config index 4 descriptor/start: -71 [ 397.935264][ T1111] usb 7-1: can't read configurations, error -71 [ 397.963135][ T26] audit: type=1326 audit(1755214424.905:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 398.093109][ T26] audit: type=1326 audit(1755214424.905:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 398.139660][ T26] audit: type=1326 audit(1755214424.915:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 398.351591][ T26] audit: type=1326 audit(1755214424.915:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 398.437829][ T26] audit: type=1326 audit(1755214424.915:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 398.465052][ T26] audit: type=1326 audit(1755214424.915:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393779be9 code=0x7ffc0000 [ 399.600145][ T7744] tmpfs: Unknown parameter 'quota' [ 400.522954][ T7766] loop7: detected capacity change from 0 to 128 [ 400.613164][ T7766] attempt to access beyond end of device [ 400.613164][ T7766] loop7: rw=2049, want=234, limit=128 [ 400.635183][ T1111] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 400.682518][ T7766] attempt to access beyond end of device [ 400.682518][ T7766] loop7: rw=2049, want=1041, limit=128 [ 400.733435][ T7766] attempt to access beyond end of device [ 400.733435][ T7766] loop7: rw=524288, want=497, limit=128 [ 400.755195][ T7766] attempt to access beyond end of device [ 400.755195][ T7766] loop7: rw=0, want=249, limit=128 [ 400.773850][ T7766] attempt to access beyond end of device [ 400.773850][ T7766] loop7: rw=0, want=249, limit=128 [ 400.795346][ T7766] attempt to access beyond end of device [ 400.795346][ T7766] loop7: rw=0, want=249, limit=128 [ 400.823265][ T7771] attempt to access beyond end of device [ 400.823265][ T7771] loop7: rw=0, want=242, limit=128 [ 400.845892][ T7766] attempt to access beyond end of device [ 400.845892][ T7766] loop7: rw=0, want=242, limit=128 [ 400.884046][ T7766] Buffer I/O error on dev loop7, logical block 241, async page read [ 400.895336][ T7766] attempt to access beyond end of device [ 400.895336][ T7766] loop7: rw=0, want=243, limit=128 [ 400.915146][ T7766] Buffer I/O error on dev loop7, logical block 242, async page read [ 400.924640][ T7766] attempt to access beyond end of device [ 400.924640][ T7766] loop7: rw=0, want=244, limit=128 [ 400.954949][ T7766] Buffer I/O error on dev loop7, logical block 243, async page read [ 400.963632][ T7766] Buffer I/O error on dev loop7, logical block 244, async page read [ 400.985014][ T7766] Buffer I/O error on dev loop7, logical block 245, async page read [ 401.021336][ T7766] Buffer I/O error on dev loop7, logical block 246, async page read [ 401.035672][ T1111] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.071470][ T1111] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.082200][ T7766] Buffer I/O error on dev loop7, logical block 247, async page read [ 401.107364][ T1111] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 401.135316][ T7766] Buffer I/O error on dev loop7, logical block 248, async page read [ 401.149063][ T7765] Buffer I/O error on dev loop7, logical block 241, async page read [ 401.161566][ T1111] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.182424][ T7765] Buffer I/O error on dev loop7, logical block 242, async page read [ 401.268920][ T1111] usb 7-1: config 0 descriptor?? [ 402.322612][ T7797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.961'. [ 402.385460][ T1111] usb 7-1: language id specifier not provided by device, defaulting to English [ 402.854766][ T7827] loop7: detected capacity change from 0 to 512 [ 402.866046][ T1111] uclogic 0003:256C:006D.0006: interface is invalid, ignoring [ 402.944369][ T7827] EXT4-fs (loop7): Ignoring removed oldalloc option [ 402.980432][ T7827] EXT4-fs (loop7): inline encryption not supported [ 403.020325][ T7827] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 403.035800][ T7827] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 403.071244][ T1111] usb 7-1: USB disconnect, device number 5 [ 403.143682][ T7827] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.968: bg 0: block 64: padding at end of block bitmap is not set [ 403.349600][ T7827] __quota_error: 4 callbacks suppressed [ 403.349622][ T7827] Quota error (device loop7): write_blk: dquota write failed [ 403.389488][ T7827] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 403.410087][ T7827] EXT4-fs error (device loop7): ext4_acquire_dquot:6207: comm syz.7.968: Failed to acquire dquot type 0 [ 403.457756][ T7827] EXT4-fs (loop7): 1 truncate cleaned up [ 403.463878][ T7827] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,oldalloc,inlinecrypt,delalloc,mblk_io_submit,delalloc,noload,mb_optimize_scan=0x0000000000000001,lazytime,,errors=continue. Quota mode: writeback. [ 404.237939][ T7850] netlink: 24 bytes leftover after parsing attributes in process `syz.6.973'. [ 404.971086][ T7869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.977'. [ 408.278093][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'. [ 411.620659][ T7989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1005'. [ 412.024940][ T1325] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 413.044988][ T1325] usb 7-1: Using ep0 maxpacket: 8 [ 413.165027][ T1325] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 413.485067][ T1325] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 413.934963][ T1325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.950523][ T1325] usb 7-1: Product: syz [ 413.957179][ T1325] usb 7-1: Manufacturer: syz [ 413.962084][ T1325] usb 7-1: SerialNumber: syz [ 414.166735][ T1325] usb 7-1: config 0 descriptor?? [ 414.270386][ T1325] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 414.304397][ T1325] usb 7-1: setting power ON [ 414.325534][ T1325] dvb-usb: bulk message failed: -22 (2/0) [ 414.425666][ T1325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 414.472930][ T7991] dvb-usb: bulk message failed: -22 (3/0) [ 414.497787][ T7991] cxusb: i2c wr: len=80 is too big! [ 414.497787][ T7991] [ 414.515640][ T1325] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 414.556993][ T1325] usb 7-1: media controller created [ 414.611676][ T1325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.735888][ T1325] usb 7-1: selecting invalid altsetting 6 [ 414.785113][ T1325] usb 7-1: digital interface selection failed (-22) [ 414.803611][ T1325] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 415.036293][ T1325] usb 7-1: setting power OFF [ 415.041941][ T1325] dvb-usb: bulk message failed: -22 (2/0) [ 415.049743][ T1325] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 415.086989][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1021'. [ 415.094959][ T1325] (NULL device *): no alternate interface [ 415.321700][ T1325] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 417.068309][ T1325] usb 7-1: USB disconnect, device number 6 [ 418.759478][ T8104] tipc: Enabling of bearer rejected, failed to enable media [ 419.247694][ T8118] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 424.383771][ T8190] loop7: detected capacity change from 0 to 128 [ 424.612942][ T8190] handle_bad_sector: 2101 callbacks suppressed [ 424.612965][ T8190] attempt to access beyond end of device [ 424.612965][ T8190] loop7: rw=2049, want=234, limit=128 [ 529.794786][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 529.802008][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8201/1:b..l [ 529.810968][ C1] (detected by 1, t=10503 jiffies, g=32149, q=464) [ 529.818065][ C1] task:syz.7.1055 state:R running task stack:25928 pid: 8201 ppid: 6907 flags:0x00004004 [ 529.830706][ C1] Call Trace: [ 529.834222][ C1] [ 529.837195][ C1] __schedule+0x11b8/0x43b0 [ 529.841924][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 529.848303][ C1] ? mark_lock+0x94/0x320 [ 529.853093][ C1] ? release_firmware_map_entry+0x190/0x190 [ 529.859709][ C1] ? mark_lock+0x94/0x320 [ 529.864427][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 529.870180][ C1] preempt_schedule_irq+0xb1/0x150 [ 529.876018][ C1] ? __cond_resched+0xb0/0xb0 [ 529.881071][ C1] ? rcu_is_watching+0x11/0xa0 [ 529.886324][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 529.892860][ C1] irqentry_exit+0x63/0x70 [ 529.897684][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 529.903869][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 529.909364][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 529.930205][ C1] RSP: 0018:ffffc9000331ef60 EFLAGS: 00000206 [ 529.936394][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 4538d3ef945bac00 [ 529.944936][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2860 RDI: ffffffff8a599340 [ 529.953440][ C1] RBP: ffffc9000331f080 R08: dffffc0000000000 R09: fffffbfff1ff6e19 [ 529.961808][ C1] R10: fffffbfff1ff6e19 R11: 1ffffffff1ff6e18 R12: ffffffff8c11c360 [ 529.970633][ C1] R13: 1ffff92000663df8 R14: 0000000000000246 R15: dffffc0000000000 [ 529.979123][ C1] ? read_lock_is_recursive+0x10/0x10 [ 529.984819][ C1] ? deref_stack_reg+0xd0/0x120 [ 529.989883][ C1] ? preempt_count_add+0x8d/0x190 [ 529.995637][ C1] rcu_lock_acquire+0x2a/0x30 [ 530.000993][ C1] ? rcu_lock_acquire+0x5/0x30 [ 530.006053][ C1] is_bpf_text_address+0x1d/0x270 [ 530.011193][ C1] __kernel_text_address+0x9a/0x100 [ 530.016803][ C1] unwind_get_return_address+0x49/0x80 [ 530.022467][ C1] ? stack_trace_save+0xe0/0xe0 [ 530.028035][ C1] arch_stack_walk+0xf2/0x140 [ 530.033117][ C1] stack_trace_save+0x98/0xe0 [ 530.037989][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 530.043492][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 530.049927][ C1] ? lock_chain_count+0x20/0x20 [ 530.054797][ C1] save_stack+0xf3/0x1e0 [ 530.059441][ C1] ? __reset_page_owner+0x180/0x180 [ 530.065887][ C1] ? get_page_from_freelist+0x1b77/0x1c60 [ 530.071800][ C1] ? __alloc_pages+0x1e1/0x470 [ 530.077060][ C1] ? __page_cache_alloc+0xd2/0x3f0 [ 530.082839][ C1] ? pagecache_get_page+0x986/0xef0 [ 530.088658][ C1] ? grab_cache_page_write_begin+0x5c/0xa0 [ 530.094838][ C1] ? cont_write_begin+0x56a/0x7b0 [ 530.100939][ C1] ? fat_write_begin+0xa2/0x170 [ 530.106091][ C1] ? generic_perform_write+0x2aa/0x530 [ 530.112012][ C1] ? __generic_file_write_iter+0x25f/0x4e0 [ 530.117940][ C1] ? generic_file_write_iter+0xa6/0x1b0 [ 530.124071][ C1] ? vfs_write+0x712/0xd00 [ 530.128783][ C1] ? ksys_write+0x14d/0x250 [ 530.133674][ C1] ? do_syscall_64+0x4c/0xa0 [ 530.138832][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 530.145990][ C1] ? lock_chain_count+0x20/0x20 [ 530.151178][ C1] ? preempt_count_add+0x8d/0x190 [ 530.157010][ C1] __set_page_owner+0x41/0x2d0 [ 530.162315][ C1] ? post_alloc_hook+0x106/0x220 [ 530.167449][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 530.173903][ C1] ? __might_sleep+0xf0/0xf0 [ 530.178957][ C1] ? __alloc_pages+0x470/0x470 [ 530.184002][ C1] ? prepare_alloc_pages+0x368/0x5f0 [ 530.189661][ C1] __alloc_pages+0x1e1/0x470 [ 530.194735][ C1] ? zone_statistics+0x170/0x170 [ 530.200038][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 530.205365][ C1] ? alloc_pages+0x438/0x550 [ 530.210091][ C1] __page_cache_alloc+0xd2/0x3f0 [ 530.215281][ C1] ? add_to_page_cache_lru+0x4a0/0x4a0 [ 530.221194][ C1] ? xas_descend+0x210/0x3b0 [ 530.225893][ C1] ? xas_load+0x127/0x140 [ 530.230239][ C1] pagecache_get_page+0x986/0xef0 [ 530.235533][ C1] ? page_cache_prev_miss+0x360/0x360 [ 530.241329][ C1] ? mark_lock+0x94/0x320 [ 530.245779][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 530.251881][ C1] ? lock_chain_count+0x20/0x20 [ 530.257145][ C1] ? do_user_addr_fault+0x694/0xc80 [ 530.262601][ C1] grab_cache_page_write_begin+0x5c/0xa0 [ 530.268299][ C1] cont_write_begin+0x56a/0x7b0 [ 530.274034][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 530.279268][ C1] ? generic_cont_expand_simple+0x190/0x190 [ 530.285463][ C1] ? __get_user_nocheck_1+0x6/0x10 [ 530.290929][ C1] fat_write_begin+0xa2/0x170 [ 530.295720][ C1] ? fat_block_truncate_page+0x50/0x50 [ 530.301385][ C1] generic_perform_write+0x2aa/0x530 [ 530.306894][ C1] ? __mark_inode_dirty+0x78b/0xc60 [ 530.312367][ C1] ? grab_cache_page_write_begin+0xa0/0xa0 [ 530.318508][ C1] ? file_remove_privs+0x590/0x590 [ 530.324613][ C1] ? read_lock_is_recursive+0x10/0x10 [ 530.330370][ C1] ? preempt_count_add+0x8d/0x190 [ 530.335688][ C1] ? rwsem_write_trylock+0x12f/0x1b0 [ 530.341271][ C1] ? clear_nonspinnable+0x60/0x60 [ 530.346784][ C1] __generic_file_write_iter+0x25f/0x4e0 [ 530.353001][ C1] generic_file_write_iter+0xa6/0x1b0 [ 530.358756][ C1] vfs_write+0x712/0xd00 [ 530.363030][ C1] ? file_end_write+0x250/0x250 [ 530.368349][ C1] ? __fget_files+0x40f/0x480 [ 530.373058][ C1] ? mutex_lock_nested+0x17/0x20 [ 530.378269][ C1] ? __fdget_pos+0x2bf/0x370 [ 530.383268][ C1] ? ksys_write+0x71/0x250 [ 530.387978][ C1] ksys_write+0x14d/0x250 [ 530.392424][ C1] ? __ia32_sys_read+0x80/0x80 [ 530.397509][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 530.402904][ C1] do_syscall_64+0x4c/0xa0 [ 530.407921][ C1] ? clear_bhb_loop+0x30/0x80 [ 530.412823][ C1] ? clear_bhb_loop+0x30/0x80 [ 530.417618][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 530.423605][ C1] RIP: 0033:0x7f936b115be9 [ 530.428210][ C1] RSP: 002b:00007f936935c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 530.437461][ C1] RAX: ffffffffffffffda RBX: 00007f936b33d090 RCX: 00007f936b115be9 [ 530.446006][ C1] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000005 [ 530.454599][ C1] RBP: 00007f936b198e19 R08: 0000000000000000 R09: 0000000000000000 [ 530.462947][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.471583][ C1] R13: 00007f936b33d128 R14: 00007f936b33d090 R15: 00007ffd1eecffd8 [ 530.479805][ C1] [ 530.482848][ C1] rcu: rcu_preempt kthread starved for 10432 jiffies! g32149 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 530.494499][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 530.504868][ C1] rcu: RCU grace-period kthread stack dump: [ 530.510941][ C1] task:rcu_preempt state:R running task stack:27904 pid: 15 ppid: 2 flags:0x00004000 [ 530.522034][ C1] Call Trace: [ 530.525337][ C1] [ 530.528545][ C1] __schedule+0x11b8/0x43b0 [ 530.533275][ C1] ? release_firmware_map_entry+0x190/0x190 [ 530.539807][ C1] schedule+0x11b/0x1e0 [ 530.544253][ C1] schedule_timeout+0x15c/0x280 [ 530.549208][ C1] ? console_conditional_schedule+0x40/0x40 [ 530.555379][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 530.561664][ C1] ? update_process_times+0x200/0x200 [ 530.567074][ C1] ? prepare_to_swait_event+0x331/0x350 [ 530.573249][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 530.578927][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 530.584777][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 530.591184][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 530.596287][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 530.601959][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 530.607698][ C1] rcu_gp_kthread+0x98/0x350 [ 530.612311][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 530.617535][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 530.624420][ C1] ? __kthread_parkme+0x157/0x1b0 [ 530.630422][ C1] kthread+0x436/0x520 [ 530.634963][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 530.640296][ C1] ? kthread_blkcg+0xd0/0xd0 [ 530.645258][ C1] ret_from_fork+0x1f/0x30 [ 530.650239][ C1] [ 530.653749][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 530.660497][ C1] Sending NMI from CPU 1 to CPUs 0: [ 530.665934][ C0] NMI backtrace for cpu 0 [ 530.665944][ C0] CPU: 0 PID: 8195 Comm: syz.0.1058 Not tainted 5.15.189-syzkaller #0 [ 530.665960][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 530.665967][ C0] RIP: 0010:__lock_acquire+0xf22/0x7c60 [ 530.665989][ C0] Code: 06 b0 01 89 44 24 60 4c 89 b4 24 c8 00 00 00 48 8b 44 24 58 42 0f b6 04 00 84 c0 0f 85 5f 5a 00 00 45 8b 24 24 48 83 7d 10 00 <0f> 84 a3 00 00 00 48 8b 84 24 88 00 00 00 42 0f b6 04 00 84 c0 0f [ 530.666002][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00000046 [ 530.666017][ C0] RAX: 0000000000000000 RBX: 00000000000600b7 RCX: ffff888020bc8af0 [ 530.666028][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ffb70c0 [ 530.666037][ C0] RBP: ffffc900000077b0 R08: dffffc0000000000 R09: fffffbfff1ff6e19 [ 530.666047][ C0] R10: fffffbfff1ff6e19 R11: 1ffffffff1ff6e18 R12: 00000000000a4015 [ 530.666058][ C0] R13: ffff888020bc8000 R14: 1ffff1100417915c R15: 1e40456c94acc51e [ 530.666068][ C0] FS: 00007f4a1e91b6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 530.666081][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.666092][ C0] CR2: 00007f4a1e91ad00 CR3: 000000004d120000 CR4: 00000000003506f0 [ 530.666107][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 530.666116][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 530.666125][ C0] Call Trace: [ 530.666130][ C0] [ 530.666134][ C0] ? arch_stack_walk+0x100/0x140 [ 530.666154][ C0] ? memset+0x1e/0x40 [ 530.666172][ C0] ? native_apic_msr_write+0x35/0x50 [ 530.666188][ C0] ? verify_lock_unused+0x140/0x140 [ 530.666203][ C0] ? stack_trace_save+0xe0/0xe0 [ 530.666216][ C0] ? arch_stack_walk+0x100/0x140 [ 530.666236][ C0] lock_acquire+0x197/0x3f0 [ 530.666250][ C0] ? rcu_lock_acquire+0x5/0x30 [ 530.666266][ C0] ? rcu_lock_release+0x5/0x20 [ 530.666279][ C0] ? read_lock_is_recursive+0x10/0x10 [ 530.666294][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 530.666319][ C0] ? deref_stack_reg+0xd0/0x120 [ 530.666336][ C0] rcu_lock_acquire+0x2a/0x30 [ 530.666348][ C0] ? rcu_lock_acquire+0x5/0x30 [ 530.666360][ C0] is_bpf_text_address+0x1d/0x270 [ 530.666377][ C0] __kernel_text_address+0x9a/0x100 [ 530.666394][ C0] unwind_get_return_address+0x49/0x80 [ 530.666409][ C0] ? stack_trace_save+0xe0/0xe0 [ 530.666421][ C0] arch_stack_walk+0xf2/0x140 [ 530.666438][ C0] stack_trace_save+0x98/0xe0 [ 530.666450][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 530.666466][ C0] ? memset+0x1e/0x40 [ 530.666480][ C0] __kasan_slab_alloc+0x9c/0xd0 [ 530.666493][ C0] ? __kasan_slab_alloc+0x9c/0xd0 [ 530.666506][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 530.666519][ C0] ? kmem_cache_alloc+0x100/0x290 [ 530.666534][ C0] ? __sigqueue_alloc+0x3a6/0x4b0 [ 530.666546][ C0] ? __send_signal+0x203/0xdb0 [ 530.666561][ C0] ? group_send_sig_info+0x1c6/0x220 [ 530.666575][ C0] ? do_bpf_send_signal+0x7b/0x150 [ 530.666587][ C0] ? irq_work_run_list+0x1bb/0x330 [ 530.666601][ C0] ? irq_work_run+0x63/0xe0 [ 530.666614][ C0] ? __sysvec_irq_work+0x98/0x240 [ 530.666629][ C0] ? sysvec_irq_work+0x98/0xc0 [ 530.666642][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 530.666654][ C0] ? native_apic_msr_write+0x35/0x50 [ 530.666668][ C0] ? arch_irq_work_raise+0x82/0xd0 [ 530.666681][ C0] ? irq_work_queue+0x95/0x140 [ 530.666695][ C0] ? bpf_send_signal_common+0x2b2/0x420 [ 530.666715][ C0] ? bpf_send_signal+0x15/0x20 [ 530.666735][ C0] ? bpf_prog_7ba5217f62dcd359+0x38/0xa3c [ 530.666747][ C0] ? bpf_trace_run2+0x15b/0x2d0 [ 530.666761][ C0] ? __bpf_trace_sys_enter+0x60/0x70 [ 530.666776][ C0] ? trace_sys_enter+0x65/0x80 [ 530.666790][ C0] ? syscall_trace_enter+0x115/0x180 [ 530.666804][ C0] ? do_syscall_64+0x24/0xa0 [ 530.666819][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 530.666845][ C0] slab_post_alloc_hook+0x4c/0x380 [ 530.666859][ C0] ? __sigqueue_alloc+0x3a6/0x4b0 [ 530.666871][ C0] kmem_cache_alloc+0x100/0x290 [ 530.666888][ C0] __sigqueue_alloc+0x3a6/0x4b0 [ 530.666901][ C0] __send_signal+0x203/0xdb0 [ 530.666918][ C0] group_send_sig_info+0x1c6/0x220 [ 530.666934][ C0] do_bpf_send_signal+0x7b/0x150 [ 530.666954][ C0] irq_work_run_list+0x1bb/0x330 [ 530.666970][ C0] ? irq_work_run+0xe0/0xe0 [ 530.666984][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 530.667000][ C0] irq_work_run+0x63/0xe0 [ 530.667020][ C0] __sysvec_irq_work+0x98/0x240 [ 530.667035][ C0] sysvec_irq_work+0x98/0xc0 [ 530.667047][ C0] [ 530.667051][ C0] [ 530.667055][ C0] asm_sysvec_irq_work+0x16/0x20 [ 530.667068][ C0] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 530.667083][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 3f 5c c7 02 66 2e 0f 1f 84 00 00 00 00 00 [ 530.667095][ C0] RSP: 0018:ffffc900040cfcb0 EFLAGS: 00000246 [ 530.667106][ C0] RAX: 00000000000000f6 RBX: ffffffff8bbbea20 RCX: 000000000000083f [ 530.667116][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 530.667125][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10172067a7 [ 530.667134][ C0] R10: ffffed10172067a7 R11: 1ffff110172067a6 R12: ffff8880b9033b01 [ 530.667145][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000020 [ 530.667160][ C0] arch_irq_work_raise+0x82/0xd0 [ 530.667174][ C0] irq_work_queue+0x95/0x140 [ 530.667189][ C0] bpf_send_signal_common+0x2b2/0x420 [ 530.667203][ C0] ? rcu_lock_release+0x20/0x20 [ 530.667215][ C0] ? __cant_sleep+0x210/0x210 [ 530.667230][ C0] ? __context_tracking_exit+0x4c/0x80 [ 530.667244][ C0] bpf_send_signal+0x15/0x20 [ 530.667259][ C0] bpf_prog_7ba5217f62dcd359+0x38/0xa3c [ 530.667271][ C0] bpf_trace_run2+0x15b/0x2d0 [ 530.667286][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 530.667300][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 530.667317][ C0] ? lock_chain_count+0x20/0x20 [ 530.667332][ C0] __bpf_trace_sys_enter+0x60/0x70 [ 530.667348][ C0] trace_sys_enter+0x65/0x80 [ 530.667361][ C0] syscall_trace_enter+0x115/0x180 [ 530.667377][ C0] do_syscall_64+0x24/0xa0 [ 530.667391][ C0] ? clear_bhb_loop+0x30/0x80 [ 530.667403][ C0] ? clear_bhb_loop+0x30/0x80 [ 530.667416][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 530.667431][ C0] RIP: 0033:0x7f4a20670dd9 [ 530.667444][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 530.667455][ C0] RSP: 002b:00007f4a1e91ab40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 530.667469][ C0] RAX: ffffffffffffffda RBX: 00007f4a208fc098 RCX: 00007f4a20670dd9 [ 530.667479][ C0] RDX: 00007f4a1e91ab40 RSI: 00007f4a1e91ac70 RDI: 0000000000000011 [ 530.667488][ C0] RBP: 00007f4a208fc090 R08: 0000000000000000 R09: 0000000000000000 [ 530.667497][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.667505][ C0] R13: 00007f4a208fc128 R14: 00007ffd2d07aab0 R15: 00007ffd2d07ab98 [ 530.667520][ C0]