last executing test programs: 47.30627048s ago: executing program 4 (id=55): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0x6e, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/206, 0xce}], 0x3, &(0x7f0000000200)=[@cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x6c}, 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r4, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe000000}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 45.659067018s ago: executing program 4 (id=62): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x3631564e, 0x0, 0x0, [], 0x20}}) 44.947946091s ago: executing program 4 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000740)={0x79, 0x0, 0xc}) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000080)) 44.174541465s ago: executing program 4 (id=65): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000400)="80006466d3805699", 0x8, 0x20050008, &(0x7f0000000080)={0xa, 0x6e26, 0x805, @mcast1, 0x2000000}, 0x1c) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2d, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x10, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) sendmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="440a5a10", 0x4}], 0x1}}], 0x1, 0x0) chdir(&(0x7f0000001080)='./file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 43.075255831s ago: executing program 4 (id=69): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@migrate={0x140, 0x26, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}}, [@policy={0xa8, 0x7, {{@in=@multicast2, @in=@empty}, {0x7ff}}}, @algo_auth={0x48, 0x1, {{'wp256-generic\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r1, &(0x7f0000002e40)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) openat$ptp0(0xffffff9c, &(0x7f0000000840), 0x2206c0, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f00000003c0)='./file1\x00'}, 0x14) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6cd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x32, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xf8e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x1, 0x7, 0xb, 0xe, 0x30, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x1, 0x3, 0x3, 0x7, 0x1, 0x4, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfccf}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f0000000280)='GPL\x00', 0xe48, 0x0, &(0x7f00000002c0), 0x41100, 0x48, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x2, 0x1, 0x3ff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000700)=[r6, r7], &(0x7f0000000740)=[{0x4, 0x1, 0x10, 0x3}, {0x5, 0x3, 0xc, 0x9}, {0x4, 0x1, 0x2, 0x7}, {0x5, 0x1, 0x4, 0x4}], 0x10, 0x7}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@migrate={0x140, 0x26, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}}, [@policy={0xa8, 0x7, {{@in=@multicast2, @in=@empty}, {0x7ff}}}, @algo_auth={0x48, 0x1, {{'wp256-generic\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) read$FUSE(r1, &(0x7f0000002e40)={0x2020}, 0x2020) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) (async) close(r2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) (async) openat$ptp0(0xffffff9c, &(0x7f0000000840), 0x2206c0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f00000003c0)='./file1\x00'}, 0x14) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6cd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x32, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xf8e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x1, 0x7, 0xb, 0xe, 0x30, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x1, 0x3, 0x3, 0x7, 0x1, 0x4, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfccf}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f0000000280)='GPL\x00', 0xe48, 0x0, &(0x7f00000002c0), 0x41100, 0x48, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x2, 0x1, 0x3ff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000700)=[r6, r7], &(0x7f0000000740)=[{0x4, 0x1, 0x10, 0x3}, {0x5, 0x3, 0xc, 0x9}, {0x4, 0x1, 0x2, 0x7}, {0x5, 0x1, 0x4, 0x4}], 0x10, 0x7}, 0x94) (async) 42.246066459s ago: executing program 4 (id=72): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102000921000500012200000905", @ANYRES32], 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async, rerun: 32) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r0) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) (rerun: 32) 39.700929365s ago: executing program 32 (id=72): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102000921000500012200000905", @ANYRES32], 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async, rerun: 32) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r0) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) (rerun: 32) 30.121279451s ago: executing program 1 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, 0x0, 0xb, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0xf, 0x1, 'veth0_vlan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r3, @ANYBLOB="32a0000000000000080025000200000008001c00", @ANYRES32, @ANYRES64=r0], 0x110}, 0x1, 0x0, 0x0, 0x20009010}, 0x0) 29.552042658s ago: executing program 1 (id=107): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, r1, 0xee00) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000ff8500b702000014007c00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.770096343s ago: executing program 1 (id=109): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16], 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d34, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x2, 0xf, 0x1, {0x22, 0x8ee}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x3, 0x5}}}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xff, 0x1, 0x4, 0x8, 0x81}, 0x126, &(0x7f0000000280)={0x5, 0xf, 0x126, 0x5, [@generic={0x8d, 0x10, 0x4, "b260e25fbbce363b9c29adb1db9578bccce4bf325fe4b9da75ddffeaeb86eb6496ec82d5bcd2fbad40b544b63e353e3ad914b143a04cd72a0b858005511a443fdb640a12929d6cf642d26b3af8338b3ebde36060aeda824c3d1e775658143fbb27db9ef55586b6f0d35354cfd5ad5ab14458830e32a84340883f43a3c7774f9210f52bc7045d14198cce"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf4, "e2be365117d392c3e0987117fb0c5bec"}, @generic={0x72, 0x10, 0x3, "3717b77b9663da29165de994bdf3a756ffa155b4b9714ce65c7abed9431754d573952ca362451fce431274cef343e56545231b1723fac6fb5812bbc9a88cabb77411a0bb7d4ca8dbd8fae363e6ed5d325349bf77187fae546ebd2f42b8babcebad216570350e03695fcd037f2155ae"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xaa, 0x4, 0xb731, 0xd9}]}}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16], 0x0) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d34, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x2, 0xf, 0x1, {0x22, 0x8ee}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x3, 0x5}}}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xff, 0x1, 0x4, 0x8, 0x81}, 0x126, &(0x7f0000000280)={0x5, 0xf, 0x126, 0x5, [@generic={0x8d, 0x10, 0x4, "b260e25fbbce363b9c29adb1db9578bccce4bf325fe4b9da75ddffeaeb86eb6496ec82d5bcd2fbad40b544b63e353e3ad914b143a04cd72a0b858005511a443fdb640a12929d6cf642d26b3af8338b3ebde36060aeda824c3d1e775658143fbb27db9ef55586b6f0d35354cfd5ad5ab14458830e32a84340883f43a3c7774f9210f52bc7045d14198cce"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf4, "e2be365117d392c3e0987117fb0c5bec"}, @generic={0x72, 0x10, 0x3, "3717b77b9663da29165de994bdf3a756ffa155b4b9714ce65c7abed9431754d573952ca362451fce431274cef343e56545231b1723fac6fb5812bbc9a88cabb77411a0bb7d4ca8dbd8fae363e6ed5d325349bf77187fae546ebd2f42b8babcebad216570350e03695fcd037f2155ae"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xaa, 0x4, 0xb731, 0xd9}]}}) (async) 26.272745276s ago: executing program 1 (id=114): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x101c02, 0x26) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) close_range(r1, 0xffffffffffffffff, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761", @ANYRES64=0x0, @ANYRES8], 0x1, 0x550b, &(0x7f0000000540)="$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") setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)={0x5, 0x9, 0x5, 0x101}, 0x8) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0f0900", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xab}, 0x18) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8ab78fc979fd1e50d960720e601cc132c0ba9b80000e60080b8785d960001000000000000000000000000000007000000000000000000001000", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}}, 0x10) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r6 = getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1, r6}}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000240)=0x1) open(&(0x7f0000000200)='./file0\x00', 0x108843, 0x98) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r9, 0x0, 0x2d, &(0x7f00000000c0)={0x0, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) 23.462465953s ago: executing program 1 (id=117): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) 20.573706613s ago: executing program 1 (id=123): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.38174553s ago: executing program 33 (id=123): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.181356594s ago: executing program 3 (id=148): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "e3baf3ca"}]}}, 0x0}, 0x0) 10.901675665s ago: executing program 2 (id=149): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000010000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.46127125s ago: executing program 2 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@x={0x94, 0x1, "cceed2b912d6"}) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff1b59ee5355b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0003311b51130000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000fc191466e0794ad5e56f77eafb29e96333d1671cc4bb77d0de10608b20e68e8929fb70929b302994e2ff2f8030bd0d78372e7b115124254c780d0e84a12822dc82e9437cebdea7715b994e81a49f6b868cc73e425a12b8c05e7c3e4d437274f71bd4f7abde475eb47eaa23c09fef4c1163f7c8db155320369f879aa9cb68869dd03330c2022ca15185dffad8f1ead3fa700c27d7e67c7f07a1d8508dadcfb920a242f0854c4a46d32045baa1dc9b3df56a07dd6870a8c402841bed1b0cb72a86bb37ba6fd093c4e2a7e7be3a5b308b"], 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000240001052dbd7000fedbdf2500300000060003000000000006000400f6"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x800) (rerun: 32) 9.670861489s ago: executing program 2 (id=153): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x80000, 0xfffffffe], [0x0, 0x0, 0x3, 0x800], [0x0, 0x0, 0x5, 0x1]}) 9.154216876s ago: executing program 0 (id=154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xb05, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) setreuid(0xee01, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4f}, 0x1, 0x0, 0x0, 0x20004000}, 0x4880) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x0) ioprio_set$uid(0x3, 0xee01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@deltfilter={0x2c, 0x2d, 0x300, 0x70bd26, 0x27dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x10}, {0x7, 0x4}, {0x5, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000200010000000500140003007866726d3000"/64], 0x58}}, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) r10 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0) getdents(r10, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x4, 0x80, 0x5, '\x00', 0xf}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', r7, 0x4, 0x95, 0xf, 0x1, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x20, 0x7, 0x5, 0x100}}) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@dax_always}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 9.09511695s ago: executing program 2 (id=155): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7a, 0x10, 0xbe, 0x40, 0x733, 0x430, 0xce72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x0, 0xc, 0xef, 0x20}}]}}]}}, 0x0) syz_read_part_table(0x5d5, &(0x7f0000000600)="$eJzs3DtrfEUUAPBzX/uAaPwIC0EQBSPYCYtpNKYLgpWFthYJEgu1kN2AIPj4AGKrhVEJCdhZKEgQ7axECFqI2FuYwjByn7ug2GxQ/vD7FTnnnpk5M5c77Sa4t6XtiJRFVGu1bMh+7eILn0XE80WdVmuTnjt76umD2WE2Hmp1ddmNjlcdR10sY9ZlX5Tx3tn+W02+jCwWbXkSUX06irKem9qDvP/3Q99kUTRz+J+VX6b2Q4zi+7iMiKOsiKz53KfxUcQDMYn62uxGRJFSaj7zMmIaUQy3YgPn86vTJ7t8Gt1Nq9qnxdtZeqwbqyKllPJY7PQriw9ei9g9+aemVXv85r52UkrVVr82Xw0c3Y769PFvfl7E6aTrXq/JVy2vpxEvXz/7aHOSrO1Rbf76AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcsYdeefirvH/Ya/5mQ/7Mx5Gvpi4j/uzz2eSO9j+fX22Xb57k8fr8pR+O3/hl/7f4PSKK2N3fihgP815sw8U7TSi7arHx/ke3+eiTD7+eDoUy+lf7dufHm9TvcN3FV59YWzzPN94fAAAAAAAAAAAAAAAAAAAAahdxMDt8cPj5e/eD9tHnl8d1rJqndjSllP5IjcnwXwLu79Z991NdSBEpW+++F7F9X0Qav/tIs2DSdyrrENl/8or8i78CAAD//zHbYMg=") (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) unshare(0x62000000) (async) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="41080000000029c0184ecbbf75f62c01ce6407e71fc9d50f484d8c9597aaed77affcc19041e9c993ba37d74c7ad7d3e44cea3e78906b6dafe01d4100d06a8cd5d9b315742b5bcf8c6b2d27492eaacc8854c2b9860f3530c3e14d03526e819b68ed9799dede87ca1b0a667a8592dafd467b86285fd2869f7e6957777972b7b2c344e39fa7305a51ed701df8677c5f5218d0a7a7887db0d2b2a0ce1a9575023482452ac53abd5c96f46458359807c712d045685437bdded96bd4677feb54fc3a6a8afadbacd525242a8ee9a8eab7ad3655c8621cf87835aea5e0f5401aeacabcf8406195c30d1ac92e23df3ddb"], 0x1, 0x11a3, &(0x7f0000001280)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) (async) syz_usb_connect$cdc_ncm(0x2, 0x85, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x2, 0xa0, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c7c04d5f8f"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x3, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x1ff, 0x7}, @acm={0x4, 0x24, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0xe, 0x3ff}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xc6, 0x9b, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xf6, 0x6, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xd}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x9, 0x9, 0x6, 0x20, 0x8}, 0x1d, &(0x7f00000002c0)={0x5, 0xf, 0x1d, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x83, 0x6, 0x0, 0x7fff, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x3, 0x7, 0x97c5}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2401}}]}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x420000, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x3) 8.513500609s ago: executing program 3 (id=156): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket(0x18, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffd10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f, 0x2000}]}, 0x98}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e24, @empty=0xe00}}) bind$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@nombcache}, {@lazytime}, {@init_itable}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51c, &(0x7f0000001300)="$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") 7.186717815s ago: executing program 5 (id=75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000740)={0x79, 0x0, 0xc}) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000080)) 7.126892489s ago: executing program 0 (id=157): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4, &(0x7f0000000000)=ANY=[], 0x2, 0x1b8, &(0x7f0000000240)="$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") llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfe, @multicast1}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2f}, {&(0x7f0000000800)="08003b117c123a3d4d", 0x9}, {&(0x7f0000000100)="ee720eb06981ea2aba091b1a9fb4be33fd9efc24b6d878b398400c5483c8bc0c1df8f780e6f9dc55729fcd12113afff782055a11f6083accc6078c9861d332fc91968875758566b00cadd7b3d9e733d7e05e06e8c31c8bffb38f82edc8a746b4fdb880334b84328f2263f37c330cbb55c55ca22a73cf08cde8278d2eab647ffd2d5be3bc10d85a01467ad6a9c31ba95b4d227737f65a3ce0a97170", 0x9b}], 0x3}, 0x20008890) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdf07}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@usrquota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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") r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x19) ioctl$TCFLSH(r4, 0x40305829, 0x0) timer_settime(r3, 0x0, &(0x7f0000000400), &(0x7f0000000440)) r5 = eventfd2(0x7, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x82481, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x24001, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x3, r5}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r5}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x3, 0xffffffffffffffff, 0x1}) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc044560f, &(0x7f0000000100)=@multiplanar_userptr={0x7, 0x3, 0x4, 0x100, 0x3, {0x77359400}, {0x5, 0x2, 0x2, 0x8, 0x2, 0x2, "6c63e48e"}, 0x5, 0x2, {0x0}, 0xf64b}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 6.545840159s ago: executing program 3 (id=158): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x54, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x8, 0x2, "9f2b57f6"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x282, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x6, 0x2, 0x4, 0x6b}, {0x8, 0xf7, 0x9, 0x4}, {0x784, 0x2, 0xa8, 0x1}, {0x7, 0x4, 0x40, 0xffff}, {0x2, 0x8, 0x7f, 0x80000000}]}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x4, 0x4) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f0000000200)={0x1, @pix_mp={0x3, 0x0, 0x3631564e, 0x0, 0x0, [{0x2926}, {0x0, 0x2}, {}, {}, {0xe}], 0x20}}) 6.361194294s ago: executing program 5 (id=159): setreuid(0x0, 0xee01) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x49) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x2023, 0x2, 0x17, 0x870}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000010c0)={0xfffffe21, &(0x7f00000001c0)=ANY=[@ANYRES64=r5, @ANYRES32=r3, @ANYRES16, @ANYRES16=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRES64=r5, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000600dfffff07001e"], 0x30}}, 0x4010) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="200c4900000050efb7a08fe990120e93479bfd2bfb1f23e269061d93481cdd60ce8f325dcfca78940cf0ced6ce894305000061989b83a56089fafa4b000d512d4a81713216197bc1076a014e21d21904fdca3a191428b0d86f57f370ce12c5094540f282"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001380)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bc21, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x3, 0x74755763afbf7d88}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0xfffffffffffffe5f, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x491c}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8008}, 0x20004804) 5.750747929s ago: executing program 3 (id=160): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x31b}) r2 = eventfd2(0x8, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r3, 0x8910, &(0x7f0000000100)={0xfffffffc, 0x0, 0x80, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000001c0)={0x4, 0x8000000000000001, 0x5, 0x0, 0x0, [{{r0}, 0x3}, {{r0}, 0xff}, {{r0}, 0x4}, {{r1}, 0x2}, {{r1}, 0xffffffff}]}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000040)=0x6, 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a000905040200ff00000009058102ff"], 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x31b}) (async) eventfd2(0x8, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x1) (async) ioctl$TCSETS(r3, 0x8910, &(0x7f0000000100)={0xfffffffc, 0x0, 0x80, 0x7ff, 0x0, "5dee0000005940000000000f00"}) (async) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000001c0)={0x4, 0x8000000000000001, 0x5, 0x0, 0x0, [{{r0}, 0x3}, {{r0}, 0xff}, {{r0}, 0x4}, {{r1}, 0x2}, {{r1}, 0xffffffff}]}) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) (async) write$eventfd(r2, &(0x7f0000000040)=0x6, 0x8) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}], 0x10) (async) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a000905040200ff00000009058102ff"], 0x0) (async) 5.689694374s ago: executing program 2 (id=161): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000880) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x1a000000}, 0x50) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00007e4000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00007e9000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000140)=0x9) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000340)={0x1, 0x0, @ioapic={0xffff1000, 0xffffff7f, 0x400, 0x9, 0x0, [{0x8, 0xd6, 0x3, '\x00', 0x2}, {0x9, 0x17, 0xfa}, {0x1, 0x2, 0x3, '\x00', 0x1}, {0x7f, 0x3, 0x6, '\x00', 0x9}, {0x8, 0x81, 0x73, '\x00', 0x3}, {0x52, 0xee, 0xfc, '\x00', 0x1}, {0x0, 0x4, 0x0, '\x00', 0xb8}, {0x9d, 0x9, 0x5, '\x00', 0xf}, {0x7, 0x4, 0x2, '\x00', 0xff}, {0x2, 0x4, 0xff, '\x00', 0x40}, {0x5, 0x6, 0x2, '\x00', 0xf4}, {0x2, 0x3, 0x5, '\x00', 0x3}, {0x7, 0x9, 0xe, '\x00', 0xe}, {0x4, 0x7, 0x7, '\x00', 0x5}, {0xf, 0x8, 0x1, '\x00', 0x5}, {0x8b, 0x3, 0x7, '\x00', 0xda}, {0x7, 0x9, 0x5, '\x00', 0xf4}, {0x30, 0x5, 0x37, '\x00', 0x3}, {0xc0, 0x8, 0x8, '\x00', 0x6}, {0xd0, 0x7, 0x7, '\x00', 0x3}, {0xb6, 0x7, 0x5, '\x00', 0xbd}, {0xff, 0x1, 0x9}, {0x3, 0x1, 0x5, '\x00', 0x1}, {0x1, 0xf3, 0x4, '\x00', 0x1}]}}) 5.317417963s ago: executing program 0 (id=162): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000000)=0x4, 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x60, 0xbb, 0x41, 0x8, 0xc2e, 0x700, 0xe13b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x1, 0x2, 0x23, 0x53, 0x83, 0x3, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x80000, 0xfffffffe], [0x0, 0x0, 0x3, 0x800], [0x0, 0x0, 0x5, 0x1]}) 4.184097271s ago: executing program 2 (id=163): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.605856989s ago: executing program 3 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = eventfd2(0x0, 0x800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r4) socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$sg(&(0x7f0000000180), 0xfffffffffffffffa, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd701004000000030000000800090002"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) ioctl$SG_SET_COMMAND_Q(r7, 0x2271, &(0x7f0000000280)=0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r12 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r12, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x6f) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080049c000240000000000739078ac1414bbac14142c8907efe00000018608000000000502008bded58a9df094edc2e8fedb53162b1652a17861ced1ff7a1fc5259ff4379091e906c40233535ff8b1e38b951aaf0c4632ea2eda050c00000000000082b7cc2e2cadd07b5b3d9d18a33dc60d696a268929ecf27ffa6810790686a19e"], 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRESDEC=r6], 0x7c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="28b8100d440900000000000040000e0000"], 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x8040) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b04000000000000000002000003340004803000dba7b2324562305974656f726465720000001c0002800800054000000004080002400000000108000140000000080900010073797a30000000000900020073797a3200000080140000001100010000000000000000000000000a"], 0x88}}, 0x0) 2.359008735s ago: executing program 0 (id=165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000ea0000000000000000000200000000000000", @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000004"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 947.058102ms ago: executing program 0 (id=166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000030000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 54.7415ms ago: executing program 3 (id=167): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = io_uring_setup(0x4e5d, &(0x7f0000000300)={0x0, 0xfffffffc, 0x1, 0x0, 0xfffffffd}) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x44dc, 0x800, 0x3, 0x1e7}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uni_xlateno}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@numtail}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@fat=@discard}, {@shortname_win95}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0x42, 0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) fdatasync(r5) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x15}, 0x20000894) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x9, 0x0, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x2c, r0, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040006}, 0x40800) 0s ago: executing program 0 (id=168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000740)={0x79, 0x0, 0xc}) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. [ 173.161378][ T5771] cgroup: Unknown subsys name 'net' [ 173.276699][ T5771] cgroup: Unknown subsys name 'cpuset' [ 173.291853][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 179.073367][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 184.141179][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.149484][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.157791][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.165686][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.174538][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.182805][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.191395][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.200125][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.211674][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.217236][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.221655][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.227275][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.235588][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.240930][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.265101][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.273906][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.289304][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.297467][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.298645][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.315005][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.315421][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.324918][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.354244][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.399247][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.424998][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.307965][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 185.972091][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 186.260818][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.268572][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.276297][ T5789] bridge_slave_0: entered allmulticast mode [ 186.285892][ T5789] bridge_slave_0: entered promiscuous mode [ 186.343513][ T5083] Bluetooth: hci1: command tx timeout [ 186.386538][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 186.408747][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.416802][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.424803][ T5789] bridge_slave_1: entered allmulticast mode [ 186.434766][ T5789] bridge_slave_1: entered promiscuous mode [ 186.445374][ T5083] Bluetooth: hci3: command tx timeout [ 186.450954][ T5083] Bluetooth: hci2: command tx timeout [ 186.526452][ T5802] Bluetooth: hci0: command tx timeout [ 186.582783][ T5802] Bluetooth: hci4: command tx timeout [ 186.718223][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.837287][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.164375][ T5789] team0: Port device team_slave_0 added [ 187.171811][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 187.223699][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 187.245330][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.254061][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.261947][ T5791] bridge_slave_0: entered allmulticast mode [ 187.271569][ T5791] bridge_slave_0: entered promiscuous mode [ 187.288834][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.296575][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.304435][ T5791] bridge_slave_1: entered allmulticast mode [ 187.314161][ T5791] bridge_slave_1: entered promiscuous mode [ 187.334463][ T5789] team0: Port device team_slave_1 added [ 187.579055][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.617994][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.625486][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.651971][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.744968][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.799870][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.807096][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.833580][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.959440][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.967448][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.975290][ T5788] bridge_slave_0: entered allmulticast mode [ 187.985149][ T5788] bridge_slave_0: entered promiscuous mode [ 188.006575][ T5791] team0: Port device team_slave_0 added [ 188.028212][ T5791] team0: Port device team_slave_1 added [ 188.144465][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.152116][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.159904][ T5788] bridge_slave_1: entered allmulticast mode [ 188.169559][ T5788] bridge_slave_1: entered promiscuous mode [ 188.259025][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.267090][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.293705][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.427941][ T5802] Bluetooth: hci1: command tx timeout [ 188.458420][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.466657][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.493982][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.507488][ T5802] Bluetooth: hci2: command tx timeout [ 188.510227][ T5083] Bluetooth: hci3: command tx timeout [ 188.548356][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.556480][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.564178][ T5790] bridge_slave_0: entered allmulticast mode [ 188.572663][ T5790] bridge_slave_0: entered promiscuous mode [ 188.584243][ T5083] Bluetooth: hci0: command tx timeout [ 188.588066][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.597323][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.605011][ T5790] bridge_slave_1: entered allmulticast mode [ 188.614574][ T5790] bridge_slave_1: entered promiscuous mode [ 188.637726][ T5789] hsr_slave_0: entered promiscuous mode [ 188.648081][ T5789] hsr_slave_1: entered promiscuous mode [ 188.664167][ T5083] Bluetooth: hci4: command tx timeout [ 188.717888][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.836072][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.845903][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.853832][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.861404][ T5801] bridge_slave_0: entered allmulticast mode [ 188.870164][ T5801] bridge_slave_0: entered promiscuous mode [ 188.891654][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.901378][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.909109][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.916959][ T5801] bridge_slave_1: entered allmulticast mode [ 188.926649][ T5801] bridge_slave_1: entered promiscuous mode [ 189.029795][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.220095][ T5788] team0: Port device team_slave_0 added [ 189.341958][ T5788] team0: Port device team_slave_1 added [ 189.396206][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.417865][ T5791] hsr_slave_0: entered promiscuous mode [ 189.428370][ T5791] hsr_slave_1: entered promiscuous mode [ 189.436704][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 189.442713][ T5791] Cannot create hsr debugfs directory [ 189.474656][ T5790] team0: Port device team_slave_0 added [ 189.534130][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.606986][ T5790] team0: Port device team_slave_1 added [ 189.633426][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.640610][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.668392][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.685137][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.692237][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.718731][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.879877][ T5801] team0: Port device team_slave_0 added [ 189.971553][ T5801] team0: Port device team_slave_1 added [ 190.035799][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.043187][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.069466][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.089326][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.096769][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.123202][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.401891][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.409324][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.436001][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.462063][ T5788] hsr_slave_0: entered promiscuous mode [ 190.472297][ T5788] hsr_slave_1: entered promiscuous mode [ 190.481181][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 190.487243][ T5788] Cannot create hsr debugfs directory [ 190.512989][ T5083] Bluetooth: hci1: command tx timeout [ 190.586024][ T5083] Bluetooth: hci2: command tx timeout [ 190.591619][ T5083] Bluetooth: hci3: command tx timeout [ 190.608530][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.615860][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.642400][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.662809][ T5083] Bluetooth: hci0: command tx timeout [ 190.743825][ T5083] Bluetooth: hci4: command tx timeout [ 190.911194][ T5790] hsr_slave_0: entered promiscuous mode [ 190.920242][ T5790] hsr_slave_1: entered promiscuous mode [ 190.928519][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 190.934494][ T5790] Cannot create hsr debugfs directory [ 191.201485][ T5801] hsr_slave_0: entered promiscuous mode [ 191.211634][ T5801] hsr_slave_1: entered promiscuous mode [ 191.219972][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 191.225958][ T5801] Cannot create hsr debugfs directory [ 191.326423][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.346176][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.381345][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.518155][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.942750][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.966841][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.044565][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.081830][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.383996][ T5790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.404978][ T5790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.438233][ T5790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.497490][ T5790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.603175][ T5083] Bluetooth: hci1: command tx timeout [ 192.663508][ T5083] Bluetooth: hci3: command tx timeout [ 192.665040][ T5802] Bluetooth: hci2: command tx timeout [ 192.760239][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.762655][ T5802] Bluetooth: hci0: command tx timeout [ 192.827526][ T5802] Bluetooth: hci4: command tx timeout [ 192.853590][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.914401][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.945760][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.969715][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.009623][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.036943][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.074446][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.333599][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.522061][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.649568][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.657208][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.756041][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.805096][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.812862][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.890512][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.951033][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.095427][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.103009][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.166384][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.174026][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.243632][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.325860][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.410744][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.418535][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.537320][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.545037][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.677509][ T5791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.688988][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.774236][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.829232][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.836992][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.853244][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.861150][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.935840][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.159134][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.228204][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.235783][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.336169][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.343755][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.010918][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.590592][ T5789] veth0_vlan: entered promiscuous mode [ 196.677542][ T5789] veth1_vlan: entered promiscuous mode [ 196.874042][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.010158][ T5789] veth0_macvtap: entered promiscuous mode [ 197.091936][ T5789] veth1_macvtap: entered promiscuous mode [ 197.123869][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.316774][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.350517][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.473982][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.516398][ T5791] veth0_vlan: entered promiscuous mode [ 197.595857][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.614768][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.627376][ T1150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.655046][ T1150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.742045][ T5791] veth1_vlan: entered promiscuous mode [ 197.776841][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.058208][ T5788] veth0_vlan: entered promiscuous mode [ 198.184349][ T5791] veth0_macvtap: entered promiscuous mode [ 198.270473][ T5788] veth1_vlan: entered promiscuous mode [ 198.289551][ T5791] veth1_macvtap: entered promiscuous mode [ 198.401940][ T5801] veth0_vlan: entered promiscuous mode [ 198.538594][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.618196][ T5801] veth1_vlan: entered promiscuous mode [ 198.654463][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.700685][ T5788] veth0_macvtap: entered promiscuous mode [ 198.771017][ T5788] veth1_macvtap: entered promiscuous mode [ 198.785665][ T1102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.815844][ T1102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.870255][ T1102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.925919][ T1837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.013842][ T5801] veth0_macvtap: entered promiscuous mode [ 199.038842][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.116516][ T5801] veth1_macvtap: entered promiscuous mode [ 199.166998][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.327678][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.348194][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.405084][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.475050][ T1102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.504133][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.533025][ T1102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.664568][ T1119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.723061][ T1119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.767494][ T1102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.813631][ T1102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.835123][ T5790] veth0_vlan: entered promiscuous mode [ 199.962971][ T5790] veth1_vlan: entered promiscuous mode [ 200.245362][ T5790] veth0_macvtap: entered promiscuous mode [ 200.348013][ T5790] veth1_macvtap: entered promiscuous mode [ 200.529359][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.630286][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.728838][ T1150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.797623][ T1150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.826404][ T1150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.896737][ T1150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.010115][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.018985][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.198177][ T1837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.208986][ T1837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.586934][ T5789] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 204.978019][ T5972] loop3: detected capacity change from 0 to 128 [ 205.013844][ T5972] ======================================================= [ 205.013844][ T5972] WARNING: The mand mount option has been deprecated and [ 205.013844][ T5972] and is ignored by this kernel. Remove the mand [ 205.013844][ T5972] option from the mount to silence this warning. [ 205.013844][ T5972] ======================================================= [ 205.049659][ T5972] hpfs: Bad value for 'timeshift' [ 205.553154][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.561167][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.677701][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.687293][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.818541][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.829285][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.843174][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.851168][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.918492][ T5972] loop3: detected capacity change from 0 to 4096 [ 206.105962][ T4133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.116046][ T4133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.218649][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.227915][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.903514][ T5988] loop2: detected capacity change from 0 to 128 [ 206.933680][ T5988] EXT4-fs (loop2): Test dummy encryption mode enabled [ 206.959370][ T5988] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.986037][ T5988] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.142628][ T5989] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 207.326405][ T4133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.337043][ T4133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.648403][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.656566][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.953397][ T5999] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2971187873 (5942375746 ns) > initial count (2670045518 ns). Using initial count to start timer. [ 208.997000][ T5988] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))" [ 209.009565][ T6010] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2971187873 (5942375746 ns) > initial count (2670045518 ns). Using initial count to start timer. [ 209.242351][ T6015] loop3: detected capacity change from 0 to 128 [ 209.738939][ T5993] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 210.203956][ T5788] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.530162][ T6032] loop3: detected capacity change from 0 to 512 [ 210.550750][ T6033] loop4: detected capacity change from 0 to 128 [ 210.645030][ T6033] hpfs: Bad value for 'timeshift' [ 210.664308][ T6032] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 210.678080][ T6032] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.876937][ T6032] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 210.998189][ T6032] EXT4-fs (loop3): 1 truncate cleaned up [ 211.006423][ T6032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.652973][ T1878] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 211.747165][ T6033] loop4: detected capacity change from 0 to 4096 [ 211.788687][ T6049] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2971187873 (5942375746 ns) > initial count (2670045518 ns). Using initial count to start timer. [ 211.873394][ T1878] usb 2-1: device descriptor read/64, error -71 [ 212.146789][ T1878] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 212.232822][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.361936][ T1878] usb 2-1: device descriptor read/64, error -71 [ 212.511616][ T1878] usb usb2-port1: attempt power cycle [ 212.885877][ T1878] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 212.965723][ T1878] usb 2-1: device descriptor read/8, error -71 [ 213.150551][ T6062] loop0: detected capacity change from 0 to 128 [ 213.253415][ T1878] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 213.358851][ T1878] usb 2-1: device descriptor read/8, error -71 [ 213.483797][ T1878] usb usb2-port1: unable to enumerate USB device [ 215.511137][ T6093] loop2: detected capacity change from 0 to 512 [ 215.580449][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 215.646234][ T6093] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.742403][ T6093] EXT4-fs (loop2): 1 truncate cleaned up [ 215.750923][ T6093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.293786][ T6100] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2971187873 (5942375746 ns) > initial count (2670045518 ns). Using initial count to start timer. [ 216.707356][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.017434][ T30] audit: type=1326 audit(1759720975.729:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 217.039469][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.047151][ T30] audit: type=1326 audit(1759720975.729:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 217.068906][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.080377][ T30] audit: type=1326 audit(1759720975.739:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 217.102207][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.110329][ T30] audit: type=1326 audit(1759720975.739:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 217.132796][ T30] audit: type=1326 audit(1759720975.739:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 217.154716][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.167786][ T30] audit: type=1326 audit(1759720975.749:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 217.189551][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.196251][ T30] audit: type=1326 audit(1759720975.759:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 217.218410][ T30] audit: type=1326 audit(1759720975.759:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 217.240592][ T30] audit: type=1326 audit(1759720975.779:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 217.267936][ T30] audit: type=1326 audit(1759720975.779:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 217.289788][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.569577][ T6109] netlink: 'syz.4.36': attribute type 21 has an invalid length. [ 217.577693][ T6109] netlink: 128 bytes leftover after parsing attributes in process `syz.4.36'. [ 217.587192][ T6109] netlink: 'syz.4.36': attribute type 6 has an invalid length. [ 217.595181][ T6109] netlink: 3 bytes leftover after parsing attributes in process `syz.4.36'. [ 218.230172][ T6121] netlink: 128 bytes leftover after parsing attributes in process `syz.0.49'. [ 218.239653][ T6121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.49'. [ 218.644601][ T6127] input: syz1 as /devices/virtual/input/input6 [ 218.938640][ T1878] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 219.131905][ T1878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.136059][ T6134] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 219.143456][ T1878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.255663][ T1878] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 219.265249][ T1878] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 219.273712][ T1878] usb 4-1: Manufacturer: syz [ 219.316306][ T1878] usb 4-1: config 0 descriptor?? [ 219.668243][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.678355][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.118201][ T6129] loop3: detected capacity change from 0 to 1024 [ 220.316433][ T6129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.436890][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 220.612250][ T1878] usbhid 4-1:0.0: can't add hid device: -71 [ 220.619641][ T1878] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 220.705077][ T1878] usb 4-1: USB disconnect, device number 2 [ 221.089495][ T6153] loop4: detected capacity change from 0 to 16 [ 221.165974][ T5956] udevd[5956]: incorrect cramfs checksum on /dev/loop4 [ 221.425742][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.744361][ T6160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.50'. [ 221.804011][ T6160] netlink: 'syz.4.50': attribute type 11 has an invalid length. [ 222.317210][ T6160] syz.4.50 uses obsolete (PF_INET,SOCK_PACKET) [ 222.363793][ T6163] loop0: detected capacity change from 0 to 4096 [ 222.445141][ T6169] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.603661][ T6171] netlink: 128 bytes leftover after parsing attributes in process `syz.3.53'. [ 222.612972][ T6171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.53'. [ 223.161862][ T6176] netlink: 264 bytes leftover after parsing attributes in process `syz.1.54'. [ 223.548932][ T6185] loop2: detected capacity change from 0 to 8 [ 223.580179][ T5880] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 223.814403][ T5880] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 223.826697][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.882936][ T5880] usb 4-1: config 0 descriptor?? [ 224.146413][ T6189] loop0: detected capacity change from 0 to 1024 [ 224.544153][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.551021][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.846137][ T6194] syzkaller1: entered promiscuous mode [ 224.851963][ T6194] syzkaller1: entered allmulticast mode [ 225.108068][ T4133] hfsplus: b-tree write err: -5, ino 4 [ 226.039245][ T5880] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 226.049801][ T5880] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 226.069016][ T5880] asix 4-1:0.0: probe with driver asix failed with error -71 [ 226.245325][ T5880] usb 4-1: USB disconnect, device number 3 [ 226.490353][ T6210] loop4: detected capacity change from 0 to 512 [ 226.610236][ T6210] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 226.705111][ T6210] EXT4-fs (loop4): 1 truncate cleaned up [ 226.713641][ T6210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.763080][ T11] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 226.999403][ T11] usb 1-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config [ 227.010139][ T11] usb 1-1: too many endpoints for config 0 interface 0 altsetting 198: 93, using maximum allowed: 30 [ 227.021817][ T11] usb 1-1: config 0 interface 0 altsetting 198 has 0 endpoint descriptors, different from the interface descriptor's value: 93 [ 227.035466][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 227.042880][ T11] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 227.052276][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.160906][ T5790] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 227.228483][ T11] usb 1-1: config 0 descriptor?? [ 227.273672][ T5790] EXT4-fs (loop4): Remounting filesystem read-only [ 227.475805][ T11] usb 1-1: string descriptor 0 read error: -71 [ 227.540482][ T11] usb 1-1: USB disconnect, device number 2 [ 227.962197][ T5790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.149434][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.278870][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.384494][ T6231] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 228.430036][ T5883] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 228.507479][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.647863][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.684182][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 228.717574][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 228.732820][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 228.776840][ T5883] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 228.786414][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.795431][ T5883] usb 4-1: Product: syz [ 228.799871][ T5883] usb 4-1: Manufacturer: syz [ 228.804843][ T5883] usb 4-1: SerialNumber: syz [ 228.877376][ T5883] usb 4-1: config 0 descriptor?? [ 229.045808][ T5883] usb 4-1: no audio or video endpoints found [ 229.060096][ T67] bridge_slave_1: left allmulticast mode [ 229.066249][ T67] bridge_slave_1: left promiscuous mode [ 229.073168][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.094262][ T67] bridge_slave_0: left allmulticast mode [ 229.100149][ T67] bridge_slave_0: left promiscuous mode [ 229.107285][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.510678][ T6229] loop3: detected capacity change from 0 to 4096 [ 229.521813][ T6229] nilfs2: Unknown parameter '' [ 229.680351][ T5880] usb 4-1: USB disconnect, device number 4 [ 229.790894][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.843094][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.888444][ T67] bond0 (unregistering): Released all slaves [ 230.553149][ T67] hsr_slave_0: left promiscuous mode [ 230.587603][ T67] hsr_slave_1: left promiscuous mode [ 230.595761][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.603957][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.683789][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.691363][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.862369][ T67] veth1_macvtap: left promiscuous mode [ 230.868343][ T67] veth0_macvtap: left promiscuous mode [ 230.876570][ T67] veth1_vlan: left promiscuous mode [ 230.882186][ T67] veth0_vlan: left promiscuous mode [ 231.440446][ T5883] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 231.653407][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 231.688246][ T5883] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 231.699659][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 231.708882][ T5883] usb 2-1: Product: syz [ 231.713358][ T5883] usb 2-1: Manufacturer: syz [ 231.718143][ T5883] usb 2-1: SerialNumber: syz [ 231.827478][ T5883] usb 2-1: config 0 descriptor?? [ 231.939375][ T5083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.956555][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.967253][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.990127][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.009102][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.053544][ T67] team0 (unregistering): Port device team_slave_1 removed [ 232.065726][ T6243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.080002][ T6260] netlink: 264 bytes leftover after parsing attributes in process `syz.0.80'. [ 232.092385][ T67] team0 (unregistering): Port device team_slave_0 removed [ 232.180369][ T6243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.316075][ T5883] usb 2-1: USB disconnect, device number 6 [ 232.464621][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.768964][ T6275] loop1: detected capacity change from 0 to 2048 [ 234.111814][ T5083] Bluetooth: hci3: command tx timeout [ 234.402170][ T6257] chnl_net:caif_netlink_parms(): no params data found [ 234.907741][ T6297] netlink: 32 bytes leftover after parsing attributes in process `syz.0.89'. [ 234.947235][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 234.953714][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 235.158848][ T6306] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 6306 comm: syz.3.90) [ 235.213969][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 235.220475][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 235.478478][ T6302] loop3: detected capacity change from 0 to 1024 [ 235.665554][ T6302] capability: warning: `syz.3.90' uses deprecated v2 capabilities in a way that may be insecure [ 235.774115][ T1878] libceph: connect (1)[c::]:6789 error -101 [ 235.780642][ T1878] libceph: mon0 (1)[c::]:6789 connect error [ 235.827253][ T6296] ceph: No mds server is up or the cluster is laggy [ 235.873074][ T5880] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 235.905557][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.913292][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.921102][ T6257] bridge_slave_0: entered allmulticast mode [ 235.930757][ T6257] bridge_slave_0: entered promiscuous mode [ 235.978869][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.986641][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.997285][ T6257] bridge_slave_1: entered allmulticast mode [ 236.007205][ T6257] bridge_slave_1: entered promiscuous mode [ 236.089050][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 236.180798][ T5880] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 236.190498][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.203640][ T5880] usb 1-1: Product: syz [ 236.208008][ T5880] usb 1-1: Manufacturer: syz [ 236.214450][ T5880] usb 1-1: SerialNumber: syz [ 236.218081][ T5083] Bluetooth: hci3: command tx timeout [ 236.257514][ T6257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.284871][ T6257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.377466][ T5880] usb 1-1: config 0 descriptor?? [ 236.634300][ T5880] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 236.729373][ T6257] team0: Port device team_slave_0 added [ 236.810454][ T6257] team0: Port device team_slave_1 added [ 236.837461][ T6323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.93'. [ 236.960314][ T6323] loop3: detected capacity change from 0 to 256 [ 237.062264][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.069799][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.096428][ T6257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.207466][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.215601][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.247995][ T6257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.253004][ T6323] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5961d1f3, utbl_chksum : 0xe619d30d) [ 237.275652][ T6323] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 237.679654][ T5880] gspca_sunplus: reg_w_riv err -71 [ 237.689802][ T5880] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 237.705091][ T5880] usb 1-1: USB disconnect, device number 3 [ 237.757649][ T6323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 237.767765][ T6323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 237.824391][ T6257] hsr_slave_0: entered promiscuous mode [ 237.850029][ T6257] hsr_slave_1: entered promiscuous mode [ 237.859165][ T6257] debugfs: 'hsr0' already exists in 'hsr' [ 237.865341][ T6257] Cannot create hsr debugfs directory [ 238.263588][ T5083] Bluetooth: hci3: command tx timeout [ 238.722058][ T6338] netlink: 4 bytes leftover after parsing attributes in process `Tro\s'. [ 238.923680][ T5883] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 239.103362][ T5883] usb 4-1: device descriptor read/64, error -71 [ 239.353896][ T5883] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 239.512132][ T6352] random: crng reseeded on system resumption [ 239.654230][ T6257] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.668229][ T5883] usb 4-1: device descriptor read/64, error -71 [ 239.736624][ T6257] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.804222][ T5883] usb usb4-port1: attempt power cycle [ 239.843590][ T6257] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.979884][ T6257] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 240.064021][ T6361] pim6reg: entered allmulticast mode [ 240.184203][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 240.200369][ T5883] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 240.274880][ T5883] usb 4-1: device descriptor read/8, error -71 [ 240.343097][ T5083] Bluetooth: hci3: command tx timeout [ 240.405862][ T5880] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 240.524742][ T5883] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 240.589456][ T5883] usb 4-1: device descriptor read/8, error -71 [ 240.608510][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 240.639612][ T5880] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.648245][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.659802][ T5880] usb 1-1: config 0 has no interface number 0 [ 240.740422][ T5883] usb usb4-port1: unable to enumerate USB device [ 240.785576][ T5880] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 240.795777][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.804288][ T5880] usb 1-1: Product: syz [ 240.813774][ T5880] usb 1-1: Manufacturer: syz [ 240.818679][ T5880] usb 1-1: SerialNumber: syz [ 240.938022][ T5880] usb 1-1: config 0 descriptor?? [ 241.006515][ T5880] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.191171][ T6360] pim6reg: left allmulticast mode [ 241.236862][ T5880] snd-usb-audio 1-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 241.333334][ T5880] usb 1-1: USB disconnect, device number 4 [ 241.377472][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.500533][ T6379] loop2: detected capacity change from 0 to 128 [ 241.520991][ T6234] udevd[6234]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.601165][ T6257] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.745632][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.753256][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.930899][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.938620][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.065892][ T5883] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 242.271822][ T6257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.278229][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.293510][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.411044][ T5883] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.421023][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.429767][ T5883] usb 2-1: SerialNumber: syz [ 242.767297][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.778316][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.893470][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.903708][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.027771][ T6392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.040810][ T6392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.206130][ T5883] usb 2-1: 0:2 : does not exist [ 243.339907][ T5883] usb 2-1: USB disconnect, device number 7 [ 243.499940][ T6390] loop0: detected capacity change from 0 to 4096 [ 243.585572][ T6234] udevd[6234]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.853485][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 244.042900][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 244.133276][ T9] usb 1-1: config index 0 descriptor too short (expected 61476, got 36) [ 244.142126][ T9] usb 1-1: config 224 has an invalid interface number: 61 but max is -1 [ 244.151268][ T9] usb 1-1: config 224 has 1 interface, different from the descriptor's value: 0 [ 244.160763][ T9] usb 1-1: config 224 has no interface number 0 [ 244.167385][ T9] usb 1-1: config 224 interface 61 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 244.179548][ T9] usb 1-1: config 224 interface 61 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 244.855988][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.884227][ T9] usb 1-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice=1e.fa [ 244.893697][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.901893][ T9] usb 1-1: Product: syz [ 244.908002][ T9] usb 1-1: Manufacturer: syz [ 244.913758][ T9] usb 1-1: SerialNumber: syz [ 245.514854][ T6406] loop1: detected capacity change from 0 to 40427 [ 245.542648][ T6406] F2FS-fs (loop1): build fault injection rate: 771 [ 245.568309][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 245.629246][ T6406] F2FS-fs (loop1): invalid crc value [ 245.779608][ T6409] loop3: detected capacity change from 0 to 512 [ 246.022678][ T6406] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 246.053166][ T6406] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 246.150057][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 246.150129][ T30] audit: type=1804 audit(1759721004.829:57): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.114" name="/newroot/24/file1/file0" dev="loop1" ino=10 res=1 errno=0 [ 246.179351][ T6406] loop9: detected capacity change from 0 to 7 [ 246.187616][ T6406] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.195904][ T6406] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.204356][ T6406] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.212590][ T6406] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.220705][ T6406] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.228997][ T6406] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.244486][ T6406] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.254651][ T6406] ldm_validate_partition_table(): Disk read failed. [ 246.261594][ T6406] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.270872][ T6406] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.279110][ T6406] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.287300][ T6406] Dev loop9: unable to read RDB block 0 [ 246.293451][ T6406] loop9: unable to read partition table [ 246.299981][ T6406] loop9: partition table beyond EOD, truncated [ 246.307188][ T6406] loop_reread_partitions: partition scan of loop9 (x , ) failed (rc=-5) [ 246.323320][ T6409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.338673][ T6409] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.220281][ T5801] syz-executor: attempt to access beyond end of device [ 247.220281][ T5801] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 247.236640][ T5801] CPU: 0 UID: 0 PID: 5801 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 247.236779][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.236868][ T5801] Call Trace: [ 247.236923][ T5801] [ 247.236971][ T5801] __dump_stack+0x26/0x30 [ 247.237153][ T5801] dump_stack_lvl+0x1df/0x270 [ 247.237318][ T5801] dump_stack+0x1e/0x25 [ 247.237462][ T5801] f2fs_handle_critical_error+0xa6f/0xc20 [ 247.237639][ T5801] f2fs_stop_checkpoint+0x65/0x80 [ 247.237780][ T5801] f2fs_write_end_io+0x101c/0x1bc0 [ 247.237962][ T5801] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 247.238108][ T5801] bio_endio+0xeb1/0x1010 [ 247.238253][ T5801] submit_bio_noacct+0x2009/0x2930 [ 247.238454][ T5801] submit_bio+0x57c/0x630 [ 247.238604][ T5801] f2fs_submit_write_bio+0x92/0x250 [ 247.238813][ T5801] __submit_merged_bio+0x16f/0x6a0 [ 247.238990][ T5801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 247.239170][ T5801] __submit_merged_write_cond+0x458/0x9a0 [ 247.239380][ T5801] f2fs_write_data_pages+0x4bb2/0x5480 [ 247.239675][ T5801] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 247.239818][ T5801] ? __update_load_avg_se+0xd02/0x11c0 [ 247.239976][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 247.240148][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 247.240303][ T5801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 247.240464][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 247.240619][ T5801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 247.240780][ T5801] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 247.240922][ T5801] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 247.241067][ T5801] do_writepages+0x3ef/0x860 [ 247.241259][ T5801] ? _raw_spin_unlock+0x30/0x50 [ 247.241424][ T5801] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 247.241607][ T5801] filemap_fdatawrite+0x207/0x260 [ 247.241819][ T5801] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 247.242008][ T5801] f2fs_write_checkpoint+0xfe2/0x2b00 [ 247.242345][ T5801] kill_f2fs_super+0x2ff/0x970 [ 247.242520][ T5801] ? __pfx_kill_f2fs_super+0x10/0x10 [ 247.242671][ T5801] deactivate_locked_super+0xc8/0x3c0 [ 247.242831][ T5801] deactivate_super+0x12f/0x140 [ 247.242977][ T5801] cleanup_mnt+0x6fb/0x780 [ 247.243144][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 247.243306][ T5801] ? __pfx___cleanup_mnt+0x10/0x10 [ 247.243478][ T5801] __cleanup_mnt+0x22/0x30 [ 247.243646][ T5801] task_work_run+0x206/0x2b0 [ 247.243814][ T5801] do_exit+0x99d/0x3d50 [ 247.243974][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 247.244167][ T5801] do_group_exit+0x259/0x390 [ 247.244359][ T5801] __ia32_sys_exit_group+0x35/0x40 [ 247.244537][ T5801] ia32_sys_call+0x4302/0x4310 [ 247.244716][ T5801] __do_fast_syscall_32+0xb0/0x150 [ 247.244856][ T5801] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 247.245054][ T5801] do_fast_syscall_32+0x38/0x80 [ 247.245192][ T5801] do_SYSENTER_32+0x1f/0x30 [ 247.245324][ T5801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.245494][ T5801] RIP: 0023:0xf7f83539 [ 247.245608][ T5801] Code: Unable to access opcode bytes at 0xf7f8350f. [ 247.245668][ T5801] RSP: 002b:00000000ffed680c EFLAGS: 00000206 ORIG_RAX: 00000000000000fc [ 247.245793][ T5801] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffed6910 [ 247.245885][ T5801] RDX: 00000000f7196d37 RSI: 0000000000000000 RDI: 00000000f7266ac3 [ 247.245972][ T5801] RBP: 00000000ffed6868 R08: 0000000000000000 R09: 0000000000000000 [ 247.246061][ T5801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.246141][ T5801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.246255][ T5801] [ 247.607420][ T5801] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 247.616432][ T5801] CPU: 0 UID: 0 PID: 5801 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 247.616575][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.616655][ T5801] Call Trace: [ 247.616704][ T5801] [ 247.616753][ T5801] __dump_stack+0x26/0x30 [ 247.616917][ T5801] dump_stack_lvl+0x1df/0x270 [ 247.617092][ T5801] dump_stack+0x1e/0x25 [ 247.617239][ T5801] f2fs_handle_critical_error+0xa6f/0xc20 [ 247.617418][ T5801] f2fs_stop_checkpoint+0x65/0x80 [ 247.617559][ T5801] f2fs_write_end_io+0x101c/0x1bc0 [ 247.617750][ T5801] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 247.617898][ T5801] bio_endio+0xeb1/0x1010 [ 247.618058][ T5801] submit_bio_noacct+0x2009/0x2930 [ 247.618264][ T5801] submit_bio+0x57c/0x630 [ 247.618421][ T5801] f2fs_submit_write_bio+0x92/0x250 [ 247.618629][ T5801] __submit_merged_bio+0x16f/0x6a0 [ 247.618817][ T5801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 247.619002][ T5801] __submit_merged_write_cond+0x458/0x9a0 [ 247.619216][ T5801] f2fs_write_data_pages+0x4bb2/0x5480 [ 247.619515][ T5801] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 247.619654][ T5801] ? __update_load_avg_se+0xd02/0x11c0 [ 247.619805][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 247.619965][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 247.620120][ T5801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 247.620280][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 247.620433][ T5801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 247.620593][ T5801] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 247.620733][ T5801] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 247.620873][ T5801] do_writepages+0x3ef/0x860 [ 247.621070][ T5801] ? _raw_spin_unlock+0x30/0x50 [ 247.621219][ T5801] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 247.621420][ T5801] filemap_fdatawrite+0x207/0x260 [ 247.621633][ T5801] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 247.621815][ T5801] f2fs_write_checkpoint+0xfe2/0x2b00 [ 247.622103][ T5801] kill_f2fs_super+0x2ff/0x970 [ 247.622275][ T5801] ? __pfx_kill_f2fs_super+0x10/0x10 [ 247.622430][ T5801] deactivate_locked_super+0xc8/0x3c0 [ 247.622586][ T5801] deactivate_super+0x12f/0x140 [ 247.622726][ T5801] cleanup_mnt+0x6fb/0x780 [ 247.622885][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 247.623065][ T5801] ? __pfx___cleanup_mnt+0x10/0x10 [ 247.623236][ T5801] __cleanup_mnt+0x22/0x30 [ 247.623406][ T5801] task_work_run+0x206/0x2b0 [ 247.623576][ T5801] do_exit+0x99d/0x3d50 [ 247.623745][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 247.623942][ T5801] do_group_exit+0x259/0x390 [ 247.624139][ T5801] __ia32_sys_exit_group+0x35/0x40 [ 247.624321][ T5801] ia32_sys_call+0x4302/0x4310 [ 247.624512][ T5801] __do_fast_syscall_32+0xb0/0x150 [ 247.624659][ T5801] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 247.624858][ T5801] do_fast_syscall_32+0x38/0x80 [ 247.625004][ T5801] do_SYSENTER_32+0x1f/0x30 [ 247.625139][ T5801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.625309][ T5801] RIP: 0023:0xf7f83539 [ 247.625405][ T5801] Code: Unable to access opcode bytes at 0xf7f8350f. [ 247.625467][ T5801] RSP: 002b:00000000ffed680c EFLAGS: 00000206 ORIG_RAX: 00000000000000fc [ 247.625593][ T5801] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffed6910 [ 247.625684][ T5801] RDX: 00000000f7196d37 RSI: 0000000000000000 RDI: 00000000f7266ac3 [ 247.625768][ T5801] RBP: 00000000ffed6868 R08: 0000000000000000 R09: 0000000000000000 [ 247.625850][ T5801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.625934][ T5801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.626054][ T5801] [ 247.973343][ T5801] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 248.840719][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.850582][ T9] usb 1-1: USB disconnect, device number 5 [ 249.582378][ T4271] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.808022][ T4271] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.983120][ T6450] loop0: detected capacity change from 0 to 256 [ 250.073081][ T4271] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.304120][ T4271] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.447513][ T6257] veth0_vlan: entered promiscuous mode [ 250.849580][ T6257] veth1_vlan: entered promiscuous mode [ 250.892176][ T4271] bridge_slave_1: left allmulticast mode [ 250.898932][ T4271] bridge_slave_1: left promiscuous mode [ 250.905952][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.964446][ T4271] bridge_slave_0: left allmulticast mode [ 250.970305][ T4271] bridge_slave_0: left promiscuous mode [ 250.977794][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.356494][ T4271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.378042][ T4271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.402276][ T4271] bond0 (unregistering): Released all slaves [ 251.762562][ T6257] veth0_macvtap: entered promiscuous mode [ 251.875095][ T4271] hsr_slave_0: left promiscuous mode [ 251.885189][ T4271] hsr_slave_1: left promiscuous mode [ 251.895385][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.906030][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.930497][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.938908][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.008618][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 252.038375][ T4271] veth1_macvtap: left promiscuous mode [ 252.044354][ T4271] veth0_macvtap: left promiscuous mode [ 252.050238][ T4271] veth1_vlan: left promiscuous mode [ 252.055984][ T4271] veth0_vlan: left promiscuous mode [ 252.501514][ T6458] netlink: 264 bytes leftover after parsing attributes in process `syz.2.126'. [ 252.655604][ T6462] loop0: detected capacity change from 0 to 4096 [ 252.965153][ T6465] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.101785][ T4271] team0 (unregistering): Port device team_slave_1 removed [ 253.129991][ T4271] team0 (unregistering): Port device team_slave_0 removed [ 253.249859][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.287506][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.297083][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.319172][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.330559][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.497163][ T6257] veth1_macvtap: entered promiscuous mode [ 253.765253][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.868840][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.914438][ T1150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.084288][ T1837] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.172046][ T1150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.186772][ T1150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.203836][ T6496] netlink: 128 bytes leftover after parsing attributes in process `syz.3.135'. [ 255.213434][ T6496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.135'. [ 255.394168][ T5802] Bluetooth: hci4: command tx timeout [ 255.709080][ T6503] netlink: 264 bytes leftover after parsing attributes in process `syz.2.137'. [ 255.735053][ T6468] chnl_net:caif_netlink_parms(): no params data found [ 255.799014][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 256.572962][ T5883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 256.774353][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 256.785098][ T6524] overlay: Unknown parameter 'fsmagic' [ 256.820263][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.831854][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.842149][ T5883] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 256.851607][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.874437][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 256.884905][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 256.928929][ T6523] option changes via remount are deprecated (pid=6522 comm=syz.3.141) [ 256.980918][ T5883] usb 3-1: config 0 descriptor?? [ 257.462901][ T5802] Bluetooth: hci4: command tx timeout [ 257.523598][ T5883] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 257.728944][ T5883] usb 3-1: USB disconnect, device number 2 [ 257.793057][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.800683][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.810060][ T6468] bridge_slave_0: entered allmulticast mode [ 257.819866][ T6468] bridge_slave_0: entered promiscuous mode [ 258.046170][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.054171][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.062128][ T6468] bridge_slave_1: entered allmulticast mode [ 258.073919][ T6468] bridge_slave_1: entered promiscuous mode [ 258.494504][ T6541] fido_id[6541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 258.537576][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 258.724926][ T6468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.859462][ T6468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.039790][ T6554] netlink: 264 bytes leftover after parsing attributes in process `syz.2.147'. [ 259.253558][ T6468] team0: Port device team_slave_0 added [ 259.293150][ T6468] team0: Port device team_slave_1 added [ 259.546934][ T5802] Bluetooth: hci4: command tx timeout [ 259.672879][ T1878] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 259.913926][ T1878] usb 4-1: Using ep0 maxpacket: 16 [ 259.939137][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.947836][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.952695][ T1878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.976226][ T6468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.001485][ T1878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.011639][ T1878] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 260.021028][ T1878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.077349][ T1878] usb 4-1: config 0 descriptor?? [ 260.194228][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.201418][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.228019][ T6468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.637827][ T1878] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 260.662305][ T1878] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 260.790600][ T5883] usb 4-1: USB disconnect, device number 9 [ 260.897736][ T6468] hsr_slave_0: entered promiscuous mode [ 260.908059][ T6468] hsr_slave_1: entered promiscuous mode [ 260.917225][ T6468] debugfs: 'hsr0' already exists in 'hsr' [ 260.923240][ T6468] Cannot create hsr debugfs directory [ 261.479253][ T6580] fido_id[6580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 261.622001][ T6584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.154'. [ 261.630079][ T5802] Bluetooth: hci4: command tx timeout [ 261.712966][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.720993][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.756039][ T1878] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 261.947125][ T1878] usb 3-1: config 0 has an invalid interface number: 36 but max is 0 [ 261.955624][ T1878] usb 3-1: config 0 has no interface number 0 [ 262.083163][ T1878] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72 [ 262.092678][ T1878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.100888][ T1878] usb 3-1: Product: syz [ 262.109969][ T1878] usb 3-1: Manufacturer: syz [ 262.116205][ T1878] usb 3-1: SerialNumber: syz [ 262.134831][ T6588] loop0: detected capacity change from 0 to 1024 [ 262.193537][ T6588] EXT4-fs (loop0): DAX unsupported by block device. [ 262.242818][ T1878] usb 3-1: config 0 descriptor?? [ 262.306417][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.315474][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.333225][ T6596] loop3: detected capacity change from 0 to 512 [ 262.360733][ T1878] gspca_main: spca505-2.14.0 probing 0733:0430 [ 262.634006][ T6596] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 262.747953][ T6596] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c042e01c, mo2=0002] [ 262.867444][ T6596] EXT4-fs (loop3): orphan cleanup on readonly fs [ 262.874723][ T6596] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #11: comm syz.3.156: corrupted in-inode xattr: e_name out of bounds [ 263.015545][ T1878] gspca_spca505: reg write: error -110 [ 263.021472][ T1878] spca505 3-1:0.36: probe with driver spca505 failed with error -5 [ 263.023920][ T6596] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.156: couldn't read orphan inode 11 (err -117) [ 263.090566][ T6596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 263.515423][ T6609] loop0: detected capacity change from 0 to 8 [ 263.649228][ T6609] SQUASHFS error: Unable to read inode 0xa7 [ 263.681765][ T6468] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 263.709862][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 263.841019][ T6468] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 263.960086][ T6609] overlayfs: failed to resolve './bus': -2 [ 264.004888][ T6468] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 264.104073][ T6468] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 264.324284][ T6609] random: crng reseeded on system resumption [ 264.451558][ T5883] usb 3-1: USB disconnect, device number 3 [ 264.643131][ T1878] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 264.899656][ T1878] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 264.909384][ T1878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.016058][ T1878] usb 6-1: config 0 descriptor?? [ 265.074122][ T1878] cp210x 6-1:0.0: cp210x converter detected [ 265.333060][ T5846] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 265.547840][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 265.623895][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65280, setting to 1024 [ 265.635734][ T5846] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 265.646450][ T5846] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 265.704419][ T6468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.837024][ T5846] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 265.847025][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.855616][ T5846] usb 4-1: Product: syz [ 265.860115][ T5846] usb 4-1: Manufacturer: syz [ 265.865852][ T5846] usb 4-1: SerialNumber: syz [ 265.941717][ T5880] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 266.021979][ T5846] usb 4-1: config 0 descriptor?? [ 266.037970][ T6624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.104745][ T6468] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.134587][ T6624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.156268][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 266.224602][ T6635] netlink: 'syz.5.159': attribute type 30 has an invalid length. [ 266.229116][ T5846] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 266.233510][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 266.234027][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 266.317904][ T5880] usb 1-1: config 162 has an invalid interface number: 97 but max is 0 [ 266.326898][ T5880] usb 1-1: config 162 has no interface number 0 [ 266.334248][ T5880] usb 1-1: config 162 interface 97 has no altsetting 0 [ 266.353625][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.361270][ T4227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.366243][ T5880] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 266.379404][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.387925][ T5880] usb 1-1: Product: syz [ 266.392755][ T5880] usb 1-1: Manufacturer: syz [ 266.397856][ T5880] usb 1-1: SerialNumber: syz [ 266.562218][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.569987][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.850931][ T5880] metro_usb 1-1:162.97: Metrologic USB to Serial converter detected [ 266.958833][ T5880] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 267.133318][ T5880] usb 1-1: USB disconnect, device number 6 [ 267.232738][ T6618] netlink: 64 bytes leftover after parsing attributes in process `syz.5.159'. [ 267.266594][ T5880] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 267.280048][ T5880] metro_usb 1-1:162.97: device disconnected [ 267.346170][ T9] usb 4-1: USB disconnect, device number 10 [ 267.356102][ T9] mcba_usb 4-1:0.0 can0: device disconnected [ 269.276868][ T6650] netlink: 44 bytes leftover after parsing attributes in process `syz.3.164'. [ 270.749057][ T6669] loop3: detected capacity change from 0 to 256 [ 272.728341][ T6641] ===================================================== [ 272.735520][ T6641] BUG: KMSAN: uninit-value in aes_encrypt+0x125d/0x1960 [ 272.742625][ T6641] aes_encrypt+0x125d/0x1960 [ 272.747383][ T6641] aesti_encrypt+0x7d/0xf0 [ 272.751981][ T6641] cipher_crypt_one+0x120/0x2e0 [ 272.756979][ T6641] crypto_cipher_encrypt_one+0x33/0x40 [ 272.762755][ T6641] drbg_ctr_update+0x19a9/0x3700 [ 272.767924][ T6641] drbg_seed+0xb1e/0xe20 [ 272.772267][ T6641] drbg_kcapi_seed+0x19b2/0x1e40 [ 272.777310][ T6641] crypto_rng_reset+0x190/0x250 [ 272.782313][ T6641] rng_setkey+0x52/0x70 [ 272.786666][ T6641] alg_setkey+0x262/0x3b0 [ 272.791089][ T6641] alg_setsockopt+0x503/0x760 [ 272.795959][ T6641] __sys_setsockopt+0x43b/0x580 [ 272.801026][ T6641] __ia32_sys_setsockopt+0xf3/0x1a0 [ 272.806355][ T6641] ia32_sys_call+0x24c2/0x4310 [ 272.811424][ T6641] __do_fast_syscall_32+0xb0/0x150 [ 272.816688][ T6641] do_fast_syscall_32+0x38/0x80 [ 272.821673][ T6641] do_SYSENTER_32+0x1f/0x30 [ 272.826306][ T6641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.832839][ T6641] [ 272.835239][ T6641] [ 272.835239][ T6641] [ 272.844059][ T6641] Uninit was stored to memory at: [ 272.849279][ T6641] crypto_sha3_finup+0x136/0xe00 [ 272.854322][ T6641] crypto_shash_finup+0x327/0xe80 [ 272.859545][ T6641] jent_hash_time+0x247/0x590 [ 272.864417][ T6641] jent_condition_data+0x4f0/0x510 [ 272.869747][ T6641] jent_measure_jitter+0x547/0x770 [ 272.875106][ T6641] jent_gen_entropy+0x209/0x450 [ 272.880099][ T6641] jent_read_entropy+0x353/0xeb0 [ 272.885216][ T6641] jent_kcapi_random+0x6c/0x250 [ 272.890264][ T6641] drbg_seed+0x3f2/0xe20 [ 272.894660][ T6641] drbg_kcapi_seed+0x19b2/0x1e40 [ 272.899699][ T6641] crypto_rng_reset+0x190/0x250 [ 272.904663][ T6641] rng_setkey+0x52/0x70 [ 272.909155][ T6641] alg_setkey+0x262/0x3b0 [ 272.913713][ T6641] alg_setsockopt+0x503/0x760 [ 272.918543][ T6641] __sys_setsockopt+0x43b/0x580 [ 272.923505][ T6641] __ia32_sys_setsockopt+0xf3/0x1a0 [ 272.928836][ T6641] ia32_sys_call+0x24c2/0x4310 [ 272.933761][ T6641] __do_fast_syscall_32+0xb0/0x150 [ 272.939026][ T6641] do_fast_syscall_32+0x38/0x80 [ 272.943953][ T6641] do_SYSENTER_32+0x1f/0x30 [ 272.948543][ T6641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.954992][ T6641] [ 272.957390][ T6641] Uninit was stored to memory at: [ 272.962650][ T6641] crypto_shash_finup+0xc5a/0xe80 [ 272.967865][ T6641] jent_hash_time+0x1de/0x590 [ 272.972705][ T6641] jent_condition_data+0x4f0/0x510 [ 272.978008][ T6641] jent_measure_jitter+0x547/0x770 [ 272.983275][ T6641] jent_gen_entropy+0x209/0x450 [ 272.988387][ T6641] jent_read_entropy+0x353/0xeb0 [ 272.993457][ T6641] jent_kcapi_random+0x6c/0x250 [ 272.998502][ T6641] drbg_seed+0x3f2/0xe20 [ 273.003011][ T6641] drbg_kcapi_seed+0x19b2/0x1e40 [ 273.008039][ T6641] crypto_rng_reset+0x190/0x250 [ 273.013015][ T6641] rng_setkey+0x52/0x70 [ 273.017411][ T6641] alg_setkey+0x262/0x3b0 [ 273.021943][ T6641] alg_setsockopt+0x503/0x760 [ 273.026788][ T6641] __sys_setsockopt+0x43b/0x580 [ 273.031762][ T6641] __ia32_sys_setsockopt+0xf3/0x1a0 [ 273.037141][ T6641] ia32_sys_call+0x24c2/0x4310 [ 273.042035][ T6641] __do_fast_syscall_32+0xb0/0x150 [ 273.047366][ T6641] do_fast_syscall_32+0x38/0x80 [ 273.052488][ T6641] do_SYSENTER_32+0x1f/0x30 [ 273.057135][ T6641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.063678][ T6641] [ 273.066076][ T6641] Uninit was stored to memory at: [ 273.071405][ T6641] crypto_sha3_finup+0xc98/0xe00 [ 273.076522][ T6641] crypto_shash_finup+0x327/0xe80 [ 273.082202][ T6641] jent_hash_time+0x247/0x590 [ 273.087126][ T6641] jent_condition_data+0x4f0/0x510 [ 273.092622][ T6641] jent_measure_jitter+0x547/0x770 [ 273.097930][ T6641] jent_gen_entropy+0x209/0x450 [ 273.102961][ T6641] jent_read_entropy+0x353/0xeb0 [ 273.108078][ T6641] jent_kcapi_random+0x6c/0x250 [ 273.113116][ T6641] drbg_seed+0x3f2/0xe20 [ 273.117472][ T6641] drbg_kcapi_seed+0x19b2/0x1e40 [ 273.122522][ T6641] crypto_rng_reset+0x190/0x250 [ 273.127551][ T6641] rng_setkey+0x52/0x70 [ 273.131788][ T6641] alg_setkey+0x262/0x3b0 [ 273.136198][ T6641] alg_setsockopt+0x503/0x760 [ 273.141045][ T6641] __sys_setsockopt+0x43b/0x580 [ 273.146456][ T6641] __ia32_sys_setsockopt+0xf3/0x1a0 [ 273.151828][ T6641] ia32_sys_call+0x24c2/0x4310 [ 273.156735][ T6641] __do_fast_syscall_32+0xb0/0x150 [ 273.162192][ T6641] do_fast_syscall_32+0x38/0x80 [ 273.167143][ T6641] do_SYSENTER_32+0x1f/0x30 [ 273.171802][ T6641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.178315][ T6641] [ 273.180700][ T6641] Uninit was stored to memory at: [ 273.185918][ T6641] keccakf+0x1efb/0x2110 [ 273.190335][ T6641] crypto_sha3_finup+0x772/0xe00 [ 273.195451][ T6641] crypto_shash_finup+0x327/0xe80 [ 273.200672][ T6641] jent_hash_time+0x247/0x590 [ 273.205462][ T6641] jent_condition_data+0x4f0/0x510 [ 273.210689][ T6641] jent_measure_jitter+0x547/0x770 [ 273.215915][ T6641] jent_gen_entropy+0x209/0x450 [ 273.220961][ T6641] jent_read_entropy+0x353/0xeb0 [ 273.226012][ T6641] jent_kcapi_random+0x6c/0x250 [ 273.230985][ T6641] drbg_seed+0x3f2/0xe20 [ 273.235339][ T6641] drbg_kcapi_seed+0x19b2/0x1e40 [ 273.240631][ T6641] crypto_rng_reset+0x190/0x250 [ 273.245591][ T6641] rng_setkey+0x52/0x70 [ 273.249838][ T6641] alg_setkey+0x262/0x3b0 [ 273.254247][ T6641] alg_setsockopt+0x503/0x760 [ 273.259094][ T6641] __sys_setsockopt+0x43b/0x580 [ 273.264062][ T6641] __ia32_sys_setsockopt+0xf3/0x1a0 [ 273.269467][ T6641] ia32_sys_call+0x24c2/0x4310 [ 273.274544][ T6641] __do_fast_syscall_32+0xb0/0x150 [ 273.280112][ T6641] do_fast_syscall_32+0x38/0x80 [ 273.285157][ T6641] do_SYSENTER_32+0x1f/0x30 [ 273.289747][ T6641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.296196][ T6641] [ 273.298593][ T6641] Uninit was stored to memory at: [ 273.303825][ T6641] crypto_sha3_finup+0x5be/0xe00 [ 273.308950][ T6641] crypto_shash_finup+0x327/0xe80 [ 273.314217][ T6641] jent_hash_time+0x247/0x590 [ 273.319028][ T6641] jent_condition_data+0x4f0/0x510 [ 273.324260][ T6641] jent_measure_jitter+0x547/0x770 [ 273.330089][ T6641] jent_gen_entropy+0x209/0x450 [ 273.335062][ T6641] jent_read_entropy+0x353/0xeb0 [ 273.340198][ T6641] jent_kcapi_random+0x6c/0x250 [ 273.345270][ T6641] drbg_seed+0x3f2/0xe20 [ 273.349703][ T6641] drbg_kcapi_seed+0x19b2/0x1e40 [ 273.354796][ T6641] crypto_rng_reset+0x190/0x250 [ 273.359826][ T6641] rng_setkey+0x52/0x70 [ 273.364072][ T6641] alg_setkey+0x262/0x3b0 [ 273.368551][ T6641] alg_setsockopt+0x503/0x760 [ 273.373498][ T6641] __sys_setsockopt+0x43b/0x580 [ 273.378536][ T6641] __ia32_sys_setsockopt+0xf3/0x1a0 [ 273.383858][ T6641] ia32_sys_call+0x24c2/0x4310 [ 273.388845][ T6641] __do_fast_syscall_32+0xb0/0x150 [ 273.394094][ T6641] do_fast_syscall_32+0x38/0x80 [ 273.399039][ T6641] do_SYSENTER_32+0x1f/0x30 [ 273.403635][ T6641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.410233][ T6641] [ 273.412599][ T6641] Uninit was stored to memory at: [ 273.417863][ T6641] crypto_sha3_finup+0x136/0xe00 [ 273.423000][ T6641] crypto_shash_finup+0x327/0xe80 [ 273.428307][ T6641] jent_hash_time+0x247/0x590 [ 273.433107][ T6641] jent_condition_data+0x4f0/0x510 [ 273.438421][ T6641] jent_measure_jitter+0x547/0x770 [ 273.443642][ T6641] jent_gen_entropy+0x209/0x450 [ 273.448788][ T6641] jent_read_entropy+0x353/0xeb0 [ 273.453854][ T6641] jent_kcapi_random+0x6c/0x250 [ 273.459002][ T6641] drbg_seed+0x3f2/0xe20 [ 273.463359][ T6641] drbg_kcapi_seed+0x19b2/0x1e40 [ 273.468483][ T6641] crypto_rng_reset+0x190/0x250 [ 273.473441][ T6641] rng_setkey+0x52/0x70 [ 273.477751][ T6641] alg_setkey+0x262/0x3b0 [ 273.482182][ T6641] alg_setsockopt+0x503/0x760 [ 273.486950][ T6641] __sys_setsockopt+0x43b/0x580 [ 273.491991][ T6641] __ia32_sys_setsockopt+0xf3/0x1a0 [ 273.497385][ T6641] ia32_sys_call+0x24c2/0x4310 [ 273.502283][ T6641] __do_fast_syscall_32+0xb0/0x150 [ 273.507550][ T6641] do_fast_syscall_32+0x38/0x80 [ 273.512492][ T6641] do_SYSENTER_32+0x1f/0x30 [ 273.517150][ T6641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.523674][ T6641] [ 273.526083][ T6641] Uninit was stored to memory at: [ 273.531369][ T6641] crypto_shash_finup+0xc5a/0xe80 [ 273.536517][ T6641] jent_hash_time+0x1de/0x590 [ 273.541588][ T6641] jent_condition_data+0x4f0/0x510 [ 273.546929][ T6641] jent_measure_jitter+0x547/0x770 [ 273.552248][ T6641] jent_gen_entropy+0x209/0x450 [ 273.557251][ T6641] jent_read_entropy+0x353/0xeb0 [ 273.562497][ T6641] jent_kcapi_random+0x6c/0x250 [ 273.567598][ T6641] drbg_seed+0x3f2/0xe20 [ 273.572015][ T6641] drbg_kcapi_seed+0x19b2/0x1e40 [ 273.577154][ T6641] crypto_rng_reset+0x190/0x250 [ 273.582185][ T6641] rng_setkey+0x52/0x70 [ 273.586512][ T6641] alg_setkey+0x262/0x3b0 [ 273.591171][ T6641] alg_setsockopt+0x503/0x760 [ 273.595954][ T6641] __sys_setsockopt+0x43b/0x580 [ 273.601008][ T6641] __ia32_sys_setsockopt+0xf3/0x1a0 [ 273.606344][ T6641] ia32_sys_call+0x24c2/0x4310 [ 273.611248][ T6641] __do_fast_syscall_32+0xb0/0x150 [ 273.616540][ T6641] do_fast_syscall_32+0x38/0x80 [ 273.621574][ T6641] do_SYSENTER_32+0x1f/0x30 [ 273.626189][ T6641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.632724][ T6641] [ 273.635126][ T6641] Local variable intermediary created at: [ 273.640979][ T6641] jent_hash_time+0x9b/0x590 [ 273.645725][ T6641] jent_condition_data+0x4f0/0x510 [ 273.651053][ T6641] [ 273.653574][ T6641] CPU: 1 UID: 0 PID: 6641 Comm: syz.2.163 Not tainted syzkaller #0 PREEMPT(none) [ 273.662935][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.673167][ T6641] ===================================================== [ 273.680922][ T6641] Disabling lock debugging due to kernel taint [ 273.687312][ T6641] Kernel panic - not syncing: kmsan.panic set ... [ 273.693877][ T6641] CPU: 1 UID: 0 PID: 6641 Comm: syz.2.163 Tainted: G B syzkaller #0 PREEMPT(none) [ 273.704911][ T6641] Tainted: [B]=BAD_PAGE [ 273.709446][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.719668][ T6641] Call Trace: [ 273.723075][ T6641] [ 273.726076][ T6641] __dump_stack+0x26/0x30 [ 273.730528][ T6641] dump_stack_lvl+0x53/0x270 [ 273.735237][ T6641] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 273.741332][ T6641] dump_stack+0x1e/0x25 [ 273.745603][ T6641] vpanic+0x435/0xd30 [ 273.749718][ T6641] panic+0x15d/0x160 [ 273.753912][ T6641] kmsan_report+0x31c/0x320 [ 273.758620][ T6641] ? __msan_warning+0x1b/0x30 [ 273.763475][ T6641] ? aes_encrypt+0x125d/0x1960 [ 273.768391][ T6641] ? aesti_encrypt+0x7d/0xf0 [ 273.773112][ T6641] ? cipher_crypt_one+0x120/0x2e0 [ 273.778351][ T6641] ? crypto_cipher_encrypt_one+0x33/0x40 [ 273.784147][ T6641] ? drbg_ctr_update+0x19a9/0x3700 [ 273.789903][ T6641] ? drbg_seed+0xb1e/0xe20 [ 273.794535][ T6641] ? drbg_kcapi_seed+0x19b2/0x1e40 [ 273.799826][ T6641] ? crypto_rng_reset+0x190/0x250 [ 273.805031][ T6641] ? rng_setkey+0x52/0x70 [ 273.809442][ T6641] ? alg_setkey+0x262/0x3b0 [ 273.814032][ T6641] ? alg_setsockopt+0x503/0x760 [ 273.819029][ T6641] ? __sys_setsockopt+0x43b/0x580 [ 273.824169][ T6641] ? __ia32_sys_setsockopt+0xf3/0x1a0 [ 273.829667][ T6641] ? ia32_sys_call+0x24c2/0x4310 [ 273.834820][ T6641] ? __do_fast_syscall_32+0xb0/0x150 [ 273.840205][ T6641] ? do_fast_syscall_32+0x38/0x80 [ 273.845334][ T6641] ? do_SYSENTER_32+0x1f/0x30 [ 273.850188][ T6641] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.856820][ T6641] ? kmsan_get_metadata+0xfb/0x160 [ 273.862067][ T6641] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 273.868540][ T6641] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 273.874814][ T6641] ? irqentry_enter+0x30/0x60 [ 273.879810][ T6641] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 273.885788][ T6641] ? kmsan_get_metadata+0xfb/0x160 [ 273.891090][ T6641] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 273.897552][ T6641] ? kmsan_get_metadata+0xfb/0x160 [ 273.902909][ T6641] __msan_warning+0x1b/0x30 [ 273.907662][ T6641] aes_encrypt+0x125d/0x1960 [ 273.912432][ T6641] ? kmsan_get_metadata+0xfb/0x160 [ 273.918029][ T6641] aesti_encrypt+0x7d/0xf0 [ 273.922833][ T6641] cipher_crypt_one+0x120/0x2e0 [ 273.928075][ T6641] ? __pfx_aesti_encrypt+0x10/0x10 [ 273.933392][ T6641] ? crypto_cipher_setkey+0x380/0x430 [ 273.938918][ T6641] ? kmsan_get_metadata+0xfb/0x160 [ 273.944174][ T6641] crypto_cipher_encrypt_one+0x33/0x40 [ 273.949782][ T6641] drbg_ctr_update+0x19a9/0x3700 [ 273.955359][ T6641] ? __pfx_drbg_ctr_update+0x10/0x10 [ 273.960940][ T6641] drbg_seed+0xb1e/0xe20 [ 273.965441][ T6641] ? __pfx_jent_kcapi_random+0x10/0x10 [ 273.971266][ T6641] drbg_kcapi_seed+0x19b2/0x1e40 [ 273.976339][ T6641] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 273.982371][ T6641] ? __pfx_drbg_kcapi_seed+0x10/0x10 [ 273.987849][ T6641] crypto_rng_reset+0x190/0x250 [ 273.993071][ T6641] rng_setkey+0x52/0x70 [ 273.997392][ T6641] ? __pfx_rng_setkey+0x10/0x10 [ 274.002335][ T6641] alg_setkey+0x262/0x3b0 [ 274.006779][ T6641] alg_setsockopt+0x503/0x760 [ 274.011566][ T6641] ? __pfx_alg_setsockopt+0x10/0x10 [ 274.016867][ T6641] __sys_setsockopt+0x43b/0x580 [ 274.021938][ T6641] __ia32_sys_setsockopt+0xf3/0x1a0 [ 274.027304][ T6641] ia32_sys_call+0x24c2/0x4310 [ 274.032196][ T6641] __do_fast_syscall_32+0xb0/0x150 [ 274.037435][ T6641] do_fast_syscall_32+0x38/0x80 [ 274.042510][ T6641] do_SYSENTER_32+0x1f/0x30 [ 274.047350][ T6641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.053906][ T6641] RIP: 0023:0xf709e539 [ 274.058068][ T6641] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 274.078134][ T6641] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 274.086655][ T6641] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000117 [ 274.094765][ T6641] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.102962][ T6641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.111048][ T6641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 274.119178][ T6641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.127297][ T6641] [ 274.131269][ T6641] Kernel Offset: disabled [ 274.135657][ T6641] Rebooting in 86400 seconds..