last executing test programs: 24m10.784571266s ago: executing program 32 (id=119): sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x808808, &(0x7f0000000340)=ANY=[], 0x4, 0x2f2, &(0x7f00000004c0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) syz_clone(0x20000, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)="f1bd") rename(&(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001a400)=""/102384, 0x18ff0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x8, 0x39fd0d, 0x36c1b7}) 22m16.17269376s ago: executing program 33 (id=393): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000200)="ebcec280898a", 0x6}, {&(0x7f0000000640)="f2b4e4f180ec3860b99bb254602fb717f9437cd2547fce2306325491a0ec68779f10729ed1f62f6e2c132ca90d49aa95a1ed03f8c6b4f274bf080197a2f4c0fad41128ae51096ffcba1b5266add485ebbd308420c601f47062eb3fcbbb91207f65d852dd8966f195f9c9300b939bb8395eedebf432e9f4518e838779a8d8c8283797a2116396f1fcef6cad72ccc5f1784bdfdebd04af58f57424c27be084c48079913780d2c30a94a2f7891b3ca75cbb149caf8a22e187fe16721bc163e4471b50b796a4680a200cba9a912b578afda68a732ccb9f6e086e680bc21de5988055a4b1f1c5450afd33288da6819fcbeb30ab8c28cad8594d7b5c6bb6b1897bcb8238f4c166249c45267e64ad1601d57dbb5c4bc807719c13b1978dac89a91c58c46332f597177ac6d8404aad1a6ab02cdf0623814b3e36d4daf52273bddd84e14d86eb673334357e4a0d053a6d0725c37ad09f982b8e7c04fe136d34349958a6c61fecbf61c021be1c381867f55266d4d35050c8729f8c3c760a24ef98ceb6181b35c7c66d59b485d545652a6377393bf6bee54a7d6b3309a17954643a077add125bf2a8cfdc0cc58d94ec39c4ba2df86554c625f09c0c340618fbc5f77cba9a189f0ef47e6dc57ac0449ba0713ed40418169b81a9c22ddbe97b5994f92d7fcc369d52c5c90aa57fbd06b3149acb7722f979a947861e16865516b5d510e2d53084f80b28bfddafec63a84117ebfd4500eb78e095818345bb5d436d815fe93d21b85d86ee2f94e6377393b43ab999b10fe15754baa05012eb8f4fef67b39c3d50260e38dea1d3c982e6a6c3e4f346674eeba27e4a215c7d0a66b8ccdaeb694cf8b62eb5911917c7dcbd9ac6c295635170a00a9cbf14e18f45c54f8daa08e2bade74e4c3ef9969cefa698a37cefce1794bba0939c08c214c2845dd47fdcd5737340f08e6949c86da2fc3bcccba120f8d669b43e0126ed1d17c2778d3b8f456dbad5e3ea6a3af578ea12ed04807599334f3f8058b03276861170944cb14494a07fd3bb0b8ace43fb42aca5629cb60bf1ff818157b10c978629bf4e1c82ef41e90f89b8ab0291a4a28ab294c9fd011b73f914421a7964ba165ad02d6c4037acf446050a20e84fe8ca45176f7d599d8eae6e3ac2c89528e9e9d54a07e56d11f521906b392481a00ab4d46141df670067f876dfcb23602b7fa2045df525d756d6e12ea87df64e46ebea1a389cb65e2dcc1e7075502f7bc03b52b78744a474f6cb1bc16d3d3ff33d78ea868850ffca814b80e9ae598660e2dd03da9f08bfef4ab81c3c6d2a5706cf4c29f96364a18b404f31bb104afa11222188ad94331f100546ab65385870241d39090edb540e0c80a5b2baffdae0619423b9404ac52c0e1d50fac5029c0cbf85cdbee365c6e6f2f8b8386febb21fa3517184955a31ebb64d3db9c32530abd4becd63ef02fe01a8de92217f54c62afa1c6277f2fc32412964dcb51573153162603111b25f19e7735414fd45d76eb24b8472c678ecdcf8ccec658b71d81fff1525c331d5a5a5492f19d9675137f5cdacf381631a35cc9f20652dcaf0c6508dbf5e066e784ee20694872b26ffe636775e668b379ffe7f74cc5cb19e3a064dcf12751e9ed9e0c288400e81dc09d6d288da084e97a38b77476b044520934a81d7707e2f7532350b36ff13b13d0ae6950ef91c872cd064e0224041e50ecd2e0ba40ba2ae9f5487409f38664a5da575d2247162263d6553c43eae8aac53aa093c19da0821136fd8fe421bcc34e5b66596281581aa9043314a36b3c86c3b89506a2b597bcf2470d1270d8ce7460413875331d2c1dbd53666802980fe4c4cf7533f2055ef854c9ae000c2b6c2982bf4a5cbc573d8e6528246abdb2c080494c100d2e9808f7fc5632e4f69bec8ee651cf32fd0fbbcbbfcf123c238287102d8e119e3086f41a61c15bf0fc9a03be916df42e0d9e27974513e95ab224e418b713bfa171ec74720c05eff7bc9025afb2fd90ccee2e7fc5ee3d8e1d63f9a45302237430b6438e4bd12f8e55ade57d2fccbf05e7df1f2e01033c3376ad28dd604efd578ecd355e4f6a1556d2b4e500c5065841d4d876437055626992bb595f3720bbae2a5d551ea5cacb5b6439ebffa0b9601f38f9d0cb71bfbb26898ed9cc3e87152d0bcacf751aba3f3a7e2c58702fa275bd45a7b4d8af47cc8b3e03702c382bb4c7bf7875f1bcadab08a648cba36a0f74cd233a0b489a8d597601c0ee017bd5d2e80b28b4b4197d9c8493d9ec3e44064708310864af204152fa50a05a6ec72b18a4daf049fc9109affef256b16caa2723da734ed24d1b9991857f0392e7cf0fe89e484433a238b26a0587d2e86533ec1489abc52934a1da9ad2bf838b577e66d07f8fbe418bb2e34898e2b055973ac916a3d00a857ca47d758c5748b43759dfd9250ec3d5ff94e9872a54dff59b8fcf4c60bf04b49d12c96afd4e1e79b11aa9a6bd1dc5ffc82c5df36f9117bc417cf8be29d7b8fdd9081f0282d0dae92f51a9ee093caf01b2c2c5e30bdaf97f14df0e357e7efa5b97e8e7c08e3da33076c11b7456778562dec2a48f40943289d5d2138212e9078f97549302e84b90317669a5af078ec1db8e5ad08ae95a227db150d73b2c4b8c80cf5d1eb0b028ff167301fc9c4dabe79f20a2684e646a296ececf09638ed8f71c66b9e46f18018b669531799d57cd79adcba1e4479192ab6fbc698e5a455ba082c10761d7d4c33a9368ae80fc22b843ce2130f70c7fc95a70193dcf36027c9e790c4a81f584bc653765c4c9dab4d357ff9fdd66d86688f14c72c8c7d40732acea6c45a8d2e2dd78c30d52a38feed2ac7926aa17b861b9df442864173972ab4b44c5b66aeb10d28bbb0f44a06ceedf1a4648ab38ae5830b55819fc10afd6e85cde03b5fff859b803d6e063dc66c44cb359ab02fe3e934323a4f67c195d492fedc9d234250e22fbed91c1f68ec1ad6f3f2635621fee6722368fd12fc9c4e8015e8c4c4d15f7147733eebb38650547f61a029a899d592fdd8070451577b9e1f55fc04f676ef38d67db56a7fa83d023064de8d91465ed1561cd2fd1a4a547c192d9c24758fb5b485280aceb923c77656d10549c3ea3e56baeaf78d76ef6892e2b1df3ef6282f25c2024c93844567410f2c59a0b16fa80e8db6dd1e28de8a44e02a6a41b386fec57691ad81b81b1661c4b654e231eafad5ab4c5def7fa672d3ab3fce01a0045ea77e54436c28f3497c830edd7f7a8ff02cec12822f6d95a433cf96596ebc521c405a1e4ecb1f8d536bd99bd5c72ec3d2a4d38ae9e66afb03d25c900516b746cfb8cb1bdd5be9f22d77a0e2fb6f63027949f39b72f0eb9b4b798656c182e5465a2be420c66e07b1ed3019802114e123120d10df748cdc96ee4834252b2ea824a2c97d20df7316189ce3167583e82f4f7ae88bff1b028ba7c96b92a96e53c6c164e39a69244987653add6826d671d17e3e5b56acf32fcc2cd68c2f1eedfb1baef540e6bc4237ad40b443416cb3e9557b1e65d868ff39841a7e44c070e2c54f0851282744202025c2b3f72c8af7145ff80007f03d9d742aadcf6c1bdcd275684f6847094482e8d77f68ae67e811e10120dc4b4d2555e7491c5371367aaf922799e84be33f98ee7c0b30e1794f80474529d874cf7ed56b578ccdc696a842aa11abf1f07c5fcbcf0093e9e0fd14227fb832dceb46bf5e639d6d89583c653f46c601c38672af5c774ae25a397b3acb4c46603bed3749a2562f12bf4bb5d7606c74e0a8ad9d4e4d7acaa2f3330379bfeb4e8c0dd6fba7603734abfd2fd1e302a72a80219aa7651b2a7b77c2905f850cb475c5a7e7070356473623b3cae350ebab5320ef75ce9598a6b61c7155fddf489684e131f318edb0a38f18eec3993d61aa5044b3e4e38dc36ed1c11caeb99f0e840badd9b7350a313a7a7a3ecd14b8bf6ca415ac85200afc4697e214164d1116a66fa6a6133200d1f9d830024b503727181930569e5d89b8da2ca05d529d902b60f1cfa86602c04db1ccf650211bd38133de33ef5f167cf09d867dee928cfb9a74951c819d4cda4f3b6583779510cb15d28406da5b3f9a2b8756e6da0c6709d4b9d6c62eaf98f4deca0cef1629cfc4a977ae52b085fb7614b1e3828e98d79bae9f2047857c387734a875ce855fc3188067221e44c8f2c9035a3962239e12cd5265b9a3ca25262a55f6c5b6f158f71117f20adff19c07cd616df92353cd4b1465dcce653e00554322754d9464a57b28fde0bb27aaaf13f850c6cc2c0bf5391d2590f9db2d3fe40e905f169b2cbf5817e2c545709164106943c8afb547a6e3fb3a80ead2610332232ab8737e7e43353b1c224564f78ccf74387f4a8c7353a804108c9327a62f074cb34ce4aaf51dd380557a6952f7dfaa22e0737470ed7cbc02f7e13bee4bdf8ca3e12b4b45ea0a6f6f6102c3fd639ae1cfb316bade21df8d32ac27035052177085716493aa581087169c0c53bf1211df21d34ac54dd09f69401bfe9176c77ff4d0e17c4eb14915311a35b03b1247f1dc0446454c5faf8273f59848aa0ef99b88512c90c7b2ca5003521418777d3a3cc48291a0e91fe06c83b26d6e6236bd28e5aa239070b86f19a4ab80dabd7712db4e92bded1840c7681f2b044c7cb90ea656843f9572b95bdde84bc450112b65d4a4ff390bc6d93b7c4454cc689afd57986776a079fc63703af7cf968da1da483fa8cac9d0d4e4c47c227dc191138758006a7017c79829501c9119be70c1471c89bccaab851e0149bebcd2046118431a2cd9eb6d5afdb33e02356b6f9bf6e8637bea88ea890d6f5c371b8605d0a96a10959bc3c98b56cd297206a45ac55759feafa1396fae14f10ce5a0a2779dcbfc2514d22ce39031256eec62ea83fa3280d5ddfcf57e67ea2d53d600db9edadcccbf94cc1b3fabc8b3f4c04d89d81c5f845a3935a3d88387a1cf3159e81beaeea62cd331a34cae800f49b0313d3a0bb112bca89efa5c07230f4136b", 0xddf}, {&(0x7f0000001640)}], 0x3, &(0x7f00000016c0)}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 19m53.45773405s ago: executing program 34 (id=662): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x2, 0x7fffffff}]}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000004000100000000000800006f000000", @ANYRES32=0x0, @ANYBLOB="10000600000000002000000000000000"], 0x2c, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) connect$inet6(r3, 0x0, 0x0) accept4(r2, &(0x7f0000000240)=@l2tp={0x2, 0x0, @private}, &(0x7f00000002c0)=0x80, 0x1000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r5, 0x0) read(r5, &(0x7f0000001400)=""/4096, 0x1000) 19m41.501381096s ago: executing program 6 (id=696): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, 0x0, 0x20040000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='tC\x00', @ANYRES16=r4, @ANYBLOB="00082abd7000fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x82}, 0x40040) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x5) prlimit64(r5, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r7 = syz_clone(0x8000, 0x0, 0xfe55, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000200)=0x2000000) fcntl$setstatus(r9, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0xa, 0x5, 0x8, 0xfdff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) 19m40.321148026s ago: executing program 6 (id=697): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000380)={r1, &(0x7f0000000100)='pids.current\x00', 0x140, &(0x7f00000002c0)={@_ha_fsid={[0x100, 0x1]}, {0x8, 0x1, 0x5}}, 0x9, &(0x7f0000000300), &(0x7f0000000340)=0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(r0, 0x1, 0x3) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="000e19000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400b74000000e4cd75cd12d41ff123fc2bb8c43c1bb4d4d883e7626647427f24bdd094479a672f6493ddf55cbdc0ed81c72be578787efa4c5594a16ad6ea49b7611d03e156ad145a0dd88fef5ed6b4ad82c63120750d866f84e8d4d7cc02c5b16acb092c27385e77"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc2e}}}, &(0x7f0000000e80)={0x34, &(0x7f0000000c00)={0x0, 0xe, 0xc3, "1217eb5d6d205a643bde0f793598713a5a0533025843e30b5b37b2283a40aded168b867a7ff0a2265db7fda4f4f97c3e3b4ac32d8b195c2d35d69f0d63b790ba16e2ea43040a1fa0f23878c330fb6c542bd9889bb8f015f35073f2570137aae9eb12b3bab6abc2e2fa933c6aa692338c96c92a7f6d1bc39c9c61f3e07a6e2f35a59977afa668bd32af512a645b91b5665d11b1d60a771d429a046f911ccda9af830affc6d3a8a6c8b9f9c3677fb96d02ee1b36ed05380f980e03bb283ed192027de4e5"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000d80)={0xc0, 0xa1, 0x4, 0x4}, 0x0, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "58ffeca636cf7fe58bb4ec34dbe9a00d8e832b540e3b3016a1ed85ee98953c06ded10000feffffff00"}}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000003c0)) syz_open_dev$dri(0x0, 0x4, 0x20100) r4 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000007c0)={0x40, 0x6, 0x2d, "1e9d002c88dc45ef66a616b4a59bb94f0ddd0a777a2896518aa830640865f78b47e7e4d7de3f31a510a60986ec"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000840)={0x0, 0x8, 0x1}, &(0x7f00000008c0), &(0x7f0000000900)={0x40, 0x5, 0x3, "66f6b4"}}) 19m40.097102045s ago: executing program 0 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e89296", 0x61}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)=""/109, 0x6d}], 0x1}, 0x2000) 19m38.986111236s ago: executing program 0 (id=700): getpid() capset(0x0, &(0x7f0000002280)={0x0, 0x0, 0x200000, 0x0, 0x0, 0x3}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000140), 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4d11d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c628b9b90195024ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd4c9a6e94acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x27, 0x558d, &(0x7f00000014c0)="$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") syz_emit_ethernet(0x6e, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0xa, @loopback, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x172) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) 19m36.420748583s ago: executing program 0 (id=703): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000b40)={{0x5, 0x5, 0x1, 0x10, 'syz0\x00'}, 0x0, [0x11, 0xfffffffffffffc9f, 0xa, 0xd, 0x3, 0x8, 0x7f, 0x5, 0x81, 0x8, 0x4, 0x5, 0xa3be, 0x8, 0xe9a6, 0x302, 0x200, 0x0, 0x5, 0x6, 0x800000000, 0x0, 0x1, 0x1bf, 0xbb, 0xcab, 0x8000000000000000, 0x4, 0x9, 0xffffffffffffffff, 0xffffffff, 0x2, 0x2, 0x7ff, 0xffffffffffffff86, 0x100, 0x7fff, 0x6, 0x96, 0x5, 0x8, 0x5, 0x8, 0x6aa80000000, 0x401, 0x1, 0xffffffffffffffff, 0x5, 0x5, 0xe06, 0x8, 0x0, 0x800, 0xa05, 0x200, 0x1, 0x3, 0x1, 0x6, 0x5, 0x95, 0x7, 0x8000000000000001, 0x6, 0xfff, 0x1, 0xff, 0x7, 0x9, 0x9, 0xfffffffffffffffe, 0x5, 0x7, 0x3, 0x7ff, 0x43fc, 0x9, 0x7, 0x5, 0x8, 0x0, 0xffffffffffffff81, 0xffffffffffff2a1c, 0xc, 0x10001, 0x2, 0x7, 0x6, 0x8001, 0x6, 0x7fffffffffffffff, 0xfe00000000000000, 0x9, 0xbd, 0x3, 0xd5, 0x3ff, 0x0, 0x9, 0x400, 0xffffffffffffff01, 0xffffffff, 0xd1, 0x9, 0x4, 0x5, 0x0, 0x3, 0x85c, 0x80000001, 0x4, 0x800, 0x7, 0x80, 0x7, 0xffffffffffffffff, 0x6, 0x6, 0x1ff, 0x8000000, 0x2, 0xfffffffffffffcfc, 0x0, 0x3, 0xfffffffffffffff4, 0x37b, 0x9, 0x8]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) setuid(0xee00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) waitid(0x1, r1, 0x0, 0x4, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x4a000) ioctl$FICLONE(r5, 0x40049409, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) 19m34.816559354s ago: executing program 6 (id=704): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @multicast}, 0x6, {0x2, 0x4e20, @local}}) 19m32.389547522s ago: executing program 0 (id=707): r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 19m31.160832426s ago: executing program 0 (id=709): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) syz_usb_connect$uac3(0x3, 0x80, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$random(0xffffffffffffff9c, 0x0, 0x109000, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 19m30.673407281s ago: executing program 6 (id=710): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0\x00', 0x2100}) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) mlockall(0x6) mlockall(0x6) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x2a4d, 0x12040) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000140)={0x800, 0x5}) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000180)="94f6ba8eb19a5b1628c9653beaa5ecd35edc9695e0176bbcf9d3e336dff8b425db21de25c9cf56aeb2c3577b9383223331627e6ca84837939bb518675fb6ea7b1830e95bba25ca48e9f3879330a0e8a5b4092cbf15269142e57fbeb11f3ce9e8bda30c60d54e434ed1ead48fdfd04bd9", 0x70}, {&(0x7f0000000200)="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", 0x1000}], 0x2, &(0x7f0000001240)=[{0x38, 0x118, 0x1, "269d1fbb1a1d378ff2a218dcd08b26c6e6c663a38f4a7cb8f98b4982e37098b83c4bc8c13e9f"}, {0xb0, 0x107, 0x350, "5a6aaa56f97d674f8aae2ba4ec71dace0897eac9a6b66a04b5650be638a03ee5d6c025c54235c0d1ffef6effeafe8ed2097dc909d88eb0fb1e99d7c8721520dd48d23e26443c145dce473047df7641749658f71808dfbb30fd9212e76a546888bd55a372e9b188e3f779b11ab6c0397057a6999e7c2f0879de0fecde84a3244bc06d479e66801de3ba5aef241c6cc70a2191b528fb2282f511fd03f8614e70"}, {0xb0, 0x11a, 0x3, "642b5a7e6177b2fb2bb5c6f12b929c7ae8b1a0cbfe04149de105b57f0b01cf380e99f87d0ae742403e603c13791d2cdd4339e9721264c5f68328046844f90e853290cad944139c101591312ab7315b43b7cc4b9412cc92fb3d402398900b79646635ae2922bf14e73686ed256bcc4e6dd5be52b7f3857f37bfaf5f2d538ec58db8a6e20e2f363b0a5521a3f9fc6e2f8cb264a6cc2e89b051382b2c2075431a87"}, {0xc0, 0x18f, 0x0, "3a01006cc3fcb159d996fb54def62577f0a45becbd78ae58af0580797f3f74f062fd58faa65cd26690a2c2ef5975379d858ff19033a2d2e96bdde7ce5f5a8e0ac3f46602cd17602de60e567d0d1408e7c555c25268f1422b72e62e0aedbd38a25f03896ebf7d2c975cc34e0902afde41849ad6a179cbe31b7ec9993fe5ad591c39fa5db93b4e680a0e64d8ff822cb8c1e822232d27cf63dc259bf39f1ec1fe222e8cf34dff34a9917118a645e5fe32b1"}, {0xf8, 0x29, 0x7, "6ca464b1f5d0d0550a5e85952590f61e100a709f6e58b21aaba20d5deec1bdadcf8e6db4de0f09c385cc52ecabc0d0adc5de0b1285d012bb433e2f213bf18657a7a36dbbce7cd991e51590bdd06b0480802affc025e6b02a6fff56c18a84625760052d6da62096897b245ed2998ca08243a6bebb54d2bea92da0da1c9d46fde899daf73931689b18a2d8fa880a5ba6c0805ab710e272023ca580b98e51d1858ca8f5fa3d1d81c6d441a1d60b168eebe02ecd716dda1b5db9f3ae8a2b4536b9ee7876052432d353829ece02c73c489a84231e867e5c4eaf3c0bba11e401eb0eaec90359018e30"}, {0xe0, 0xa, 0x7c, "6ef8037e40ab61aa263f3e620819f37c4702ca7025a8700429a68ed7c35995c7d93362eeda1e9f7b51a0d549e482f4c22f3dd33814201d01659bda02c7aba20401c5efeb7cb73a3414fa8c353444e4faf2c92c548d0740f32c65f624af54fc11509475be105f309238260d0def5b21ba7f91a34fbdf8b4ee09c5abfa9c30d0e7c1a7517f48dca62794d8c53f4361ea58ecdd01fd9a5d03d7af9e3f6f5d5d42ca70be6a80b6cbb60c7d0bbeccc11d7303a9687d6be72a6880e187eb1fb40d2522c1ff198563c5936c5aad0d"}, {0xa8, 0x109, 0x9, "d5d97bddd2ec3dc2b8634412d170d5b0a7268252827915891f42153fd9d17212e8f9652cd61862e853863635b6ca37456ddca7ab7161788c2007c03a2e762f159d6eafb328ef1ca48db4ca1dc0ceae8ba3710a430f53e7f4fd54f3801582caf8e883777bd4cd8e0bcca418f0570c36143abb10a0835dd925f538955100fa997ceecfe07af9f9bfe6704d86874f76b799b4ed"}, {0x40, 0x114, 0xf, "9a4e067d419da8c67c66a276cd5d8dee92117ba6837d77798a0aa5f355b31493fc3f188a6b06a0eb4a0f"}, {0xf8, 0x118, 0x5, "b27147e302ff2a07ef4a81c8860ff492404a97a1461fd2b2110447d613186961b71be546578fb6a7a38fbe7256d50b1da55dd0051d0d5a7b305768a6dc0a925c888c5ce896f86722449775a15a261335e3ae28c7d70cc1e1c5304e0b741cde3c94e9d9fa6fc459bb66ce8ce726b84c21f0f70f53981f870af626289528ca8eaf35a33960ad91fa84b607964d7bd5d55bbe7eaff2f1e470082c8cda3fb5df6d1edd5dc1a68e557f3a44de98f51fb85c01d9daec948952bf9c6009b817522669da458a46843ad1c405b9ed82cee172f2aafe5a64a50a30c503b22e7c0b1f587a4135aca9f5"}], 0x610}, 0x4000) mlockall(0x3) lseek(r0, 0x6, 0x4) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f00000018c0)={0x8}) sendmsg$802154_dgram(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001900)="1a8eb82cdcafd858acc3a274d223588c5005a6676d119644687ae72841c4878d1046e763e6b29bd65479fb8f055113634e4dac1856294646c84308d0e9c7f19225a6589ca8b881023c78ada08d947921ec913f4a69b912f50fda543c222409f437b21ca87a17a2df17ce78b978397f040c6cb06cc2239437beaf44b5e5a9bc1bb575093486b01758f93ee41efbd4048595d8b28d4c1d0fd5018f8ea40a5458", 0x9f}, 0x1, 0x0, 0x0, 0x20044800}, 0x4810) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000001a40)={'syz_tun\x00', 0x200}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4044) mlockall(0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000001cc0)={0x401, 0x7fff, 0x3, {0x1, @vbi={0xf, 0xffffffff, 0x8, 0x20363159, [0x3c1, 0x6], [0xa0a, 0x480000], 0x1}}, 0x1}) ioctl$sock_netdev_private(r1, 0x89f6, &(0x7f0000001dc0)="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") rt_sigsuspend(&(0x7f0000002dc0)={[0x400]}, 0x8) mlockall(0x5) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002e40), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4891) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) getsockname$netlink(r1, &(0x7f0000003140), &(0x7f0000003180)=0xc) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000004a80)=[{0x1, 0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000031c0)=""/210, 0xd2}], &(0x7f0000003300)=[0x401]}, {0x3, 0x1, 0x0, &(0x7f0000003580)=[{&(0x7f0000003340)=""/207, 0xcf}, {&(0x7f0000003440)=""/188, 0xbc}, {&(0x7f0000003500)=""/81, 0x51}], &(0x7f00000035c0)=[0x0, 0x8001]}, {0x6, 0x1, 0x0, &(0x7f00000049c0)=[{&(0x7f0000003600)=""/224, 0xe0}, {&(0x7f0000003700)=""/62, 0x3e}, {&(0x7f0000003740)=""/218, 0xda}, {&(0x7f0000003840)=""/125, 0x7d}, {&(0x7f00000038c0)=""/203, 0xcb}, {&(0x7f00000039c0)=""/4096, 0x1000}], &(0x7f0000004a40)=[0x8000000000000001, 0x3, 0xfffffffffffff05e, 0x3, 0x0]}], 0x3) 19m26.757670455s ago: executing program 0 (id=715): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000380)={r1, &(0x7f0000000100)='pids.current\x00', 0x140, &(0x7f00000002c0)={@_ha_fsid={[0x100, 0x1]}, {0x8, 0x1, 0x5}}, 0x9, &(0x7f0000000300), &(0x7f0000000340)=0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(r0, 0x1, 0x3) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="000e19000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400b74000000e4cd75cd12d41ff123fc2bb8c43c1bb4d4d883e7626647427f24bdd094479a672f6493ddf55cbdc0ed81c72be578787efa4c5594a16ad6ea49b7611d03e156ad145a0dd88fef5ed6b4ad82c63120750d866f84e8d4d7cc02c5b16acb092c27385e77752d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc2e}}}, &(0x7f0000000e80)={0x34, &(0x7f0000000c00)={0x0, 0xe, 0xc3, "1217eb5d6d205a643bde0f793598713a5a0533025843e30b5b37b2283a40aded168b867a7ff0a2265db7fda4f4f97c3e3b4ac32d8b195c2d35d69f0d63b790ba16e2ea43040a1fa0f23878c330fb6c542bd9889bb8f015f35073f2570137aae9eb12b3bab6abc2e2fa933c6aa692338c96c92a7f6d1bc39c9c61f3e07a6e2f35a59977afa668bd32af512a645b91b5665d11b1d60a771d429a046f911ccda9af830affc6d3a8a6c8b9f9c3677fb96d02ee1b36ed05380f980e03bb283ed192027de4e5"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000d80)={0xc0, 0xa1, 0x4, 0x4}, 0x0, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "58ffeca636cf7fe58bb4ec34dbe9a00d8e832b540e3b3016a1ed85ee98953c06ded10000feffffff00"}}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000003c0)) syz_open_dev$dri(0x0, 0x4, 0x20100) r4 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000007c0)={0x40, 0x6, 0x2d, "1e9d002c88dc45ef66a616b4a59bb94f0ddd0a777a2896518aa830640865f78b47e7e4d7de3f31a510a60986ec"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000840)={0x0, 0x8, 0x1}, &(0x7f00000008c0), &(0x7f0000000900)={0x40, 0x5, 0x3, "66f6b4"}}) 19m25.213443475s ago: executing program 6 (id=717): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x20040000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='tC\x00', @ANYRES16=r3, @ANYBLOB="00082abd7000fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x82}, 0x40040) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x5) prlimit64(r4, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r6 = syz_clone(0x8000, 0x0, 0xfe55, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000200)=0x2000000) fcntl$setstatus(r8, 0x4, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0xa, 0x5, 0x8, 0xfdff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x4) 19m23.294894426s ago: executing program 6 (id=718): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000183282, 0x0) r2 = dup(r1) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x19b}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000380)={0x48, 0xc, 0x0, 0x0, 0xf, 0xfffffffffffffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x3558000) sendto(r2, &(0x7f00000002c0)="dad6f06a252d2f48649a14a5bf9f01d9979333485bec3bb7a200670429f10c319ec738a587a1131625c2991730da60586860cded93914971d1127892652642b1d864b5d7f221f5f866a266901cd2d6bf14bb1139aeef98f5192dafa360e8e4e6634960b54a487b9754b8615764742733c5bd68dd37899354dd36760a0cc9a3ee1a34e82a412562e413c98ce75d7e6ff9620e50abb2dac0", 0x97, 0x0, &(0x7f0000000400)=@phonet={0x23, 0x10, 0xf}, 0x80) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) 19m11.051096187s ago: executing program 35 (id=715): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000380)={r1, &(0x7f0000000100)='pids.current\x00', 0x140, &(0x7f00000002c0)={@_ha_fsid={[0x100, 0x1]}, {0x8, 0x1, 0x5}}, 0x9, &(0x7f0000000300), &(0x7f0000000340)=0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(r0, 0x1, 0x3) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="000e19000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400b74000000e4cd75cd12d41ff123fc2bb8c43c1bb4d4d883e7626647427f24bdd094479a672f6493ddf55cbdc0ed81c72be578787efa4c5594a16ad6ea49b7611d03e156ad145a0dd88fef5ed6b4ad82c63120750d866f84e8d4d7cc02c5b16acb092c27385e77752d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc2e}}}, &(0x7f0000000e80)={0x34, &(0x7f0000000c00)={0x0, 0xe, 0xc3, "1217eb5d6d205a643bde0f793598713a5a0533025843e30b5b37b2283a40aded168b867a7ff0a2265db7fda4f4f97c3e3b4ac32d8b195c2d35d69f0d63b790ba16e2ea43040a1fa0f23878c330fb6c542bd9889bb8f015f35073f2570137aae9eb12b3bab6abc2e2fa933c6aa692338c96c92a7f6d1bc39c9c61f3e07a6e2f35a59977afa668bd32af512a645b91b5665d11b1d60a771d429a046f911ccda9af830affc6d3a8a6c8b9f9c3677fb96d02ee1b36ed05380f980e03bb283ed192027de4e5"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000d80)={0xc0, 0xa1, 0x4, 0x4}, 0x0, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "58ffeca636cf7fe58bb4ec34dbe9a00d8e832b540e3b3016a1ed85ee98953c06ded10000feffffff00"}}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000003c0)) syz_open_dev$dri(0x0, 0x4, 0x20100) r4 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000007c0)={0x40, 0x6, 0x2d, "1e9d002c88dc45ef66a616b4a59bb94f0ddd0a777a2896518aa830640865f78b47e7e4d7de3f31a510a60986ec"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000840)={0x0, 0x8, 0x1}, &(0x7f00000008c0), &(0x7f0000000900)={0x40, 0x5, 0x3, "66f6b4"}}) 19m8.015917058s ago: executing program 36 (id=718): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000183282, 0x0) r2 = dup(r1) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x19b}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000380)={0x48, 0xc, 0x0, 0x0, 0xf, 0xfffffffffffffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x3558000) sendto(r2, &(0x7f00000002c0)="dad6f06a252d2f48649a14a5bf9f01d9979333485bec3bb7a200670429f10c319ec738a587a1131625c2991730da60586860cded93914971d1127892652642b1d864b5d7f221f5f866a266901cd2d6bf14bb1139aeef98f5192dafa360e8e4e6634960b54a487b9754b8615764742733c5bd68dd37899354dd36760a0cc9a3ee1a34e82a412562e413c98ce75d7e6ff9620e50abb2dac0", 0x97, 0x0, &(0x7f0000000400)=@phonet={0x23, 0x10, 0xf}, 0x80) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) 12m47.537407925s ago: executing program 7 (id=1267): socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x4a, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x123a02, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) semget$private(0x0, 0x4000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) unshare(0x24060400) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) unlink(&(0x7f0000000080)='./file1\x00') 12m43.349561971s ago: executing program 7 (id=1278): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$loop(0x0, 0x1, 0xc000) ioctl$BLKRASET(r3, 0x1262, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x2000c8d0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) syz_emit_ethernet(0x4a, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) 12m41.626626679s ago: executing program 7 (id=1283): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 12m38.355240872s ago: executing program 7 (id=1288): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$loop(0x0, 0x1, 0xc000) ioctl$BLKRASET(r3, 0x1262, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x2000c8d0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) syz_emit_ethernet(0x4a, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0x40a85321, 0x0) 12m37.125399078s ago: executing program 7 (id=1290): socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x4a, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x123a02, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) semget$private(0x0, 0x4000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) unshare(0x24060400) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) unlink(&(0x7f0000000080)='./file1\x00') 12m33.668850222s ago: executing program 3 (id=1306): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x40488c2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f406", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12m31.202765106s ago: executing program 7 (id=1311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2000000000000013, &(0x7f0000000840)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x2, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="00000000000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYBLOB="000000fd000000", @ANYRES32=0x0, @ANYRES32=r5], 0x50) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) openat$dlm_monitor(0xffffff9c, &(0x7f00000006c0), 0x4900, 0x0) 12m27.24946657s ago: executing program 3 (id=1315): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, 0x0}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x24, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x100) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 12m25.377553375s ago: executing program 3 (id=1319): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m23.591571733s ago: executing program 3 (id=1325): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES32, @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c60579108c2b4412c236e0d4c239bccce62ecdc23f"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="aefd", 0x2}], 0x1) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 12m19.769078978s ago: executing program 3 (id=1330): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) 12m15.742866766s ago: executing program 37 (id=1311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2000000000000013, &(0x7f0000000840)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x2, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="00000000000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYBLOB="000000fd000000", @ANYRES32=0x0, @ANYRES32=r5], 0x50) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) openat$dlm_monitor(0xffffff9c, &(0x7f00000006c0), 0x4900, 0x0) 12m12.896022527s ago: executing program 3 (id=1343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, 0x0, 0x0, 0xfffd, 0x8002, 0x1, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) capget(&(0x7f0000000400)={0x20080522, r0}, &(0x7f0000000440)={0x4, 0x2, 0x5, 0x2, 0x74b, 0x200}) 11m57.132608999s ago: executing program 38 (id=1343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, 0x0, 0x0, 0xfffd, 0x8002, 0x1, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) capget(&(0x7f0000000400)={0x20080522, r0}, &(0x7f0000000440)={0x4, 0x2, 0x5, 0x2, 0x74b, 0x200}) 5m49.465370368s ago: executing program 1 (id=1918): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}], 0x3, 0x4000084) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}}], 0x1, 0x80) 5m48.245164996s ago: executing program 1 (id=1921): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) epoll_create1(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m45.52979072s ago: executing program 1 (id=1925): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a00000008000000010000004000000042", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r3}, 0x38) 5m44.001857491s ago: executing program 1 (id=1926): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, 0x0}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x24, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x100) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 5m40.322207564s ago: executing program 1 (id=1929): socket$inet6_udp(0xa, 0x2, 0x0) r0 = epoll_create(0x8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x160000014}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r7, &(0x7f0000000100)=ANY=[], 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r7, 0x0) 5m37.273381289s ago: executing program 1 (id=1931): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}], 0x3, 0x4000084) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}}], 0x1, 0x80) 5m19.357802702s ago: executing program 39 (id=1931): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}], 0x3, 0x4000084) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}}], 0x1, 0x80) 1m30.805062692s ago: executing program 5 (id=2365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m29.637120171s ago: executing program 5 (id=2368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 1m29.295704774s ago: executing program 9 (id=2371): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) io_uring_setup(0x458c, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x80000001, 0x0, &(0x7f00000004c0)={0x20, 0x3, 0xc, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000280)) ioprio_set$pid(0x3, 0x0, 0x0) 1m29.219173421s ago: executing program 5 (id=2372): r0 = gettid() r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) kcmp(r1, r0, 0x6, r2, r3) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) getpgrp(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000019400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) unshare(0x6020400) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 1m29.029956395s ago: executing program 9 (id=2373): syz_emit_vhci(0x0, 0xe) 1m29.02322943s ago: executing program 5 (id=2374): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x100010, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x9, 0x7fffffff, 0x5, 0x1099e713, 0x7fffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', &(0x7f0000000100)={0x200000, 0x10, 0x5}, 0x18) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB='OGAIN \'Capture Volume\' '], 0x4000) close(0xffffffffffffffff) read$msr(r1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) 1m28.816068743s ago: executing program 9 (id=2375): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020000000000000"], 0x24, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x8}, 0x8) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000002b40), 0x24, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000180000000000000000000000380000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000005c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x18080, 0x16) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) llistxattr(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)=""/33, 0x21) 1m28.633173286s ago: executing program 5 (id=2377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m26.914001101s ago: executing program 5 (id=2380): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 1m26.405936883s ago: executing program 9 (id=2383): socket$inet6_udp(0xa, 0x2, 0x0) r0 = epoll_create(0x8) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x160000014}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r7, &(0x7f0000000100)=ANY=[], 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r7, 0x0) 1m24.977818844s ago: executing program 9 (id=2385): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES32, @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c60579108c2b4412c236e0d4c239bccce62ecdc23f"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="aefd", 0x2}], 0x1) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1m21.150399194s ago: executing program 9 (id=2390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 1m11.747150601s ago: executing program 40 (id=2380): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 1m5.983526186s ago: executing program 41 (id=2390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 13.82807431s ago: executing program 4 (id=2516): mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={r2, r4, 0xa, 0x0, @void}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) 10.857286621s ago: executing program 2 (id=2526): socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x3, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) 10.672967186s ago: executing program 4 (id=2527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) 10.213947299s ago: executing program 4 (id=2529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r0, &(0x7f0000000000)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6d706f6c3d62696e11643a302d", @ANYRESOCT]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@gettaction={0x38, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x101}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x24, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008050}, 0x2004c080) socket$nl_generic(0x10, 0x3, 0x10) 10.213284674s ago: executing program 2 (id=2530): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0\x00', 0x2100}) ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) mlockall(0x6) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f00000000c0)) mlockall(0x3) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x4044) mlockall(0x6) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x4000000) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000001cc0)={0x401, 0x7fff, 0x3, {0x1, @vbi={0xf, 0xffffffff, 0x8, 0x20363159, [0x3c1, 0x6], [0xa0a, 0x480000], 0x1}}, 0x1}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, 0x0) rt_sigsuspend(&(0x7f0000002dc0)={[0x400]}, 0x8) mlockall(0x5) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x44, r0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4891) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), 0xffffffffffffffff) getsockname$netlink(0xffffffffffffffff, &(0x7f0000003140), &(0x7f0000003180)=0xc) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000004a80)=[{0x1, 0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000031c0)=""/210, 0xd2}], &(0x7f0000003300)=[0x401]}, {0x3, 0x1, 0x0, &(0x7f0000003580)=[{&(0x7f0000003340)=""/207, 0xcf}, {&(0x7f0000003440)=""/188, 0xbc}, {&(0x7f0000003500)=""/81, 0x51}], &(0x7f00000035c0)=[0x0, 0x8001]}, {0x6, 0x1, 0x0, &(0x7f00000049c0)=[{&(0x7f0000003600)=""/224, 0xe0}, {&(0x7f0000003700)=""/62, 0x3e}, {&(0x7f0000003740)=""/218, 0xda}, {&(0x7f0000003840)=""/125, 0x7d}, {&(0x7f00000038c0)=""/203, 0xcb}, {&(0x7f00000039c0)=""/4096, 0x1000}], &(0x7f0000004a40)=[0x8000000000000001, 0x3, 0xfffffffffffff05e, 0x3, 0x0]}], 0x3) 8.562207126s ago: executing program 8 (id=2531): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, 0x0}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x24, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0xffffd000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_pidfd_open(0x0, 0x0) 7.645795654s ago: executing program 4 (id=2532): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000e00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) creat(0x0, 0x175) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x5c, 0x2) 7.352040698s ago: executing program 8 (id=2533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0), 0x0, 0x4001c00) 6.253268375s ago: executing program 4 (id=2534): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009965, r3, 0x0) inotify_init1(0x80000) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) r6 = socket(0x10, 0x3, 0x0) recvmsg$unix(r6, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x172) 6.105091686s ago: executing program 8 (id=2535): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x20000000fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000011401002abd7003822d9b2d0800020073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400ede5382f0fb3c700", @ANYRES64=r1, @ANYBLOB], 0x14}}, 0x6048800) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100)=0x4, 0x4) socket(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/zoneinfo\x00', 0x0, 0x0) 5.289859659s ago: executing program 8 (id=2536): r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000240)={0x0, [[0x2, 0x0, 0x0, 0x75, 0x54], [0xffffffff, 0x200, 0xffffffff, 0x0, 0x7, 0x0, 0xffff], [0x200, 0x8, 0x0, 0x7f]], '\x00', [{}, {}, {0xfffffffc, 0x9}, {0xf}, {}, {0x0, 0x1000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x8, 0x2}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r1], 0x7) 5.227002492s ago: executing program 2 (id=2537): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001002089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) r5 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 3.790026234s ago: executing program 2 (id=2538): socket$inet6_udp(0xa, 0x2, 0x0) r0 = epoll_create(0x8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x160000014}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r6, &(0x7f0000000100)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r6, 0x0) 3.620722901s ago: executing program 8 (id=2539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) 3.165732837s ago: executing program 8 (id=2540): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2002) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$loop(0x0, 0x1, 0xc000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x2000c8d0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0x1000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, 0x0) 2.654468132s ago: executing program 2 (id=2541): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="aefd", 0x2}], 0x1) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.919474703s ago: executing program 2 (id=2542): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, 0x0}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x24, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0xffffd000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_pidfd_open(0x0, 0x0) 0s ago: executing program 4 (id=2543): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): b decompression failed, data probably corrupt [ 1221.931979][T15595] SQUASHFS error: Failed to read block 0x9b: -5 [ 1221.938200][T15595] SQUASHFS error: Unable to read metadata cache entry [99] [ 1221.945922][T15595] SQUASHFS error: Unable to read inode 0x127 [ 1222.313052][T15302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1222.439354][T15302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1222.498239][T15302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1222.575353][T15302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1223.057335][T15606] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1223.066803][T15606] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1223.076526][T15606] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1223.216296][T15302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1223.912561][T15302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1223.923054][T15302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1224.060883][T15302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1224.292309][T15623] sg_write: data in/out 764/14 bytes for SCSI command 0x0-- guessing data in; [ 1224.292309][T15623] program syz.1.1892 not setting count and/or reply_len properly [ 1225.053312][T15302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.163606][T15302] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.203062][T11048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.210273][T11048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.266010][T11048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.273159][T11048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.662372][T15642] netlink: 436 bytes leftover after parsing attributes in process `syz.5.1895'. [ 1226.673564][T15642] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1895'. [ 1227.623488][ T5652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1227.634332][ T5652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1227.646295][ T5652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1227.658519][ T5652] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1227.667214][ T5652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1229.750624][ T5652] Bluetooth: hci6: command tx timeout [ 1230.797737][T15686] loop9: detected capacity change from 0 to 128 [ 1230.887811][T15686] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1231.020584][T15686] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1231.166839][T15686] usb usb7: usbfs: process 15686 (syz.9.1902) did not claim interface 0 before use [ 1232.862545][ T5652] Bluetooth: hci6: command tx timeout [ 1233.595414][T11616] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1233.754726][T15700] loop8: detected capacity change from 0 to 512 [ 1233.802364][T15700] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1233.891197][T15700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 1233.991028][T15700] System zones: 1-12 [ 1234.224941][T15700] EXT4-fs (loop8): 1 truncate cleaned up [ 1234.429693][T15700] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1234.870253][ T5652] Bluetooth: hci6: command tx timeout [ 1235.711307][ T31] audit: type=1800 audit(1780364281.019:7234): pid=15709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1904" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1235.957386][T11824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.954487][ T5652] Bluetooth: hci6: command tx timeout [ 1238.012824][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.021534][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.084496][T15302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.538193][T15747] loop9: detected capacity change from 0 to 512 [ 1240.666640][T15747] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1241.197082][T15747] EXT4-fs (loop9): 1 truncate cleaned up [ 1241.311279][T15747] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1241.522549][T15302] veth0_vlan: entered promiscuous mode [ 1241.862969][T15758] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1914'. [ 1243.035837][T15302] veth1_vlan: entered promiscuous mode [ 1243.045108][ T31] audit: type=1800 audit(1780364288.799:7235): pid=15762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1911" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1243.241055][ T154] bridge_slave_1: left allmulticast mode [ 1243.276289][ T154] bridge_slave_1: left promiscuous mode [ 1243.309842][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.374890][ T154] bridge_slave_0: left allmulticast mode [ 1243.413068][ T154] bridge_slave_0: left promiscuous mode [ 1243.427171][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.166654][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.231725][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1244.273078][ T154] bond0 (unregistering): Released all slaves [ 1244.490049][T11616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.560615][ T154] hsr_slave_0: left promiscuous mode [ 1244.630946][ T154] hsr_slave_1: left promiscuous mode [ 1244.654702][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.727500][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1246.712802][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1246.732872][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1246.741525][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1246.749591][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1246.757327][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1248.014082][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1248.084335][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1248.805749][T15799] loop8: detected capacity change from 0 to 512 [ 1248.873637][ T5636] Bluetooth: hci5: command tx timeout [ 1248.925933][T15799] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1249.028161][T15799] EXT4-fs (loop8): 1 truncate cleaned up [ 1249.074426][T15799] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1249.591516][T15651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.410861][ T31] audit: type=1800 audit(1780364296.249:7236): pid=15810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1922" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1250.495522][T15651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.520445][T15651] bridge_slave_0: entered allmulticast mode [ 1250.540877][T15651] bridge_slave_0: entered promiscuous mode [ 1250.568003][T15651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.618699][T15651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.657198][T15651] bridge_slave_1: entered allmulticast mode [ 1250.690500][T15651] bridge_slave_1: entered promiscuous mode [ 1250.937042][T15651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.959304][ T5636] Bluetooth: hci5: command tx timeout [ 1250.983864][T15651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.051732][T15651] team0: Port device team_slave_0 added [ 1251.066814][T15651] team0: Port device team_slave_1 added [ 1252.934762][T11824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.031279][ T5636] Bluetooth: hci5: command tx timeout [ 1253.132321][T15651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.170676][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.433172][T15651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.862307][T15651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.519877][ T5636] Bluetooth: hci5: command tx timeout [ 1255.533263][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.748407][T15651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.805365][T15832] loop5: detected capacity change from 0 to 512 [ 1255.866895][T15832] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1255.933368][T15832] EXT4-fs (loop5): 1 truncate cleaned up [ 1255.986228][T15832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1258.935277][ T31] audit: type=1800 audit(1780364304.769:7237): pid=15843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1927" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1259.088791][ T5627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.681893][T15651] hsr_slave_0: entered promiscuous mode [ 1260.703613][T15651] hsr_slave_1: entered promiscuous mode [ 1260.710066][T15651] debugfs: 'hsr0' already exists in 'hsr' [ 1260.716470][T15651] Cannot create hsr debugfs directory [ 1261.072629][T15860] loop5: detected capacity change from 0 to 512 [ 1261.134182][T15860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1261.179625][T15860] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1262.014237][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1262.236052][ T5627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1262.800321][T10811] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1262.963986][T10811] usb 6-1: Using ep0 maxpacket: 16 [ 1263.004440][T10811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1263.059425][T10811] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1263.086682][T10811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.117865][T10811] usb 6-1: Product: syz [ 1263.130257][T10811] usb 6-1: Manufacturer: syz [ 1263.151251][T10811] usb 6-1: SerialNumber: syz [ 1263.193351][T10811] usb 6-1: config 0 descriptor?? [ 1263.234722][T10811] kobil_sct 6-1:0.0: KOBIL USB smart card terminal converter detected [ 1263.473292][T15870] loop5: detected capacity change from 0 to 256 [ 1263.482382][T10811] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1263.484945][T15870] exfat: Deprecated parameter 'utf8' [ 1263.546863][T15870] exfat: Deprecated parameter 'namecase' [ 1263.571665][T15870] exfat: Deprecated parameter 'namecase' [ 1263.611717][T15870] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1263.716945][ T5776] usb 6-1: USB disconnect, device number 19 [ 1263.818562][ T5776] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1263.891522][ T5776] kobil_sct 6-1:0.0: device disconnected [ 1264.339000][T15888] loop8: detected capacity change from 0 to 16 [ 1264.494391][T15888] erofs (device loop8): invalid ishare xattr prefix id 0 [ 1264.966084][T15898] loop8: detected capacity change from 0 to 512 [ 1264.979460][T15898] EXT4-fs: inline encryption not supported [ 1265.466081][T15898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1265.474575][T15898] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1265.503644][T15898] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 1 [ 1265.513764][T15898] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 1265.523566][T15898] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.1937: Failed to acquire dquot type 1 [ 1265.534802][T15898] loop8: lost filesystem error report for type 5 error -5 [ 1265.538103][T15898] EXT4-fs (loop8): Remounting filesystem read-only [ 1265.545265][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1265.545291][ C1] EXT4-fs (loop8): initial error at time 1780364311: ext4_acquire_dquot:7034 [ 1265.545322][ C1] EXT4-fs (loop8): last error at time 1780364311: ext4_acquire_dquot:7034 [ 1265.581504][T15898] EXT4-fs (loop8): 1 truncate cleaned up [ 1265.588676][T15898] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1265.876077][ T154] bridge_slave_1: left allmulticast mode [ 1265.896584][ T154] bridge_slave_1: left promiscuous mode [ 1265.919113][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.947009][T11824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.511531][ T154] bridge_slave_0: left allmulticast mode [ 1266.588215][ T154] bridge_slave_0: left promiscuous mode [ 1266.604918][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.407169][T15912] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1269.971475][T15921] netlink: 436 bytes leftover after parsing attributes in process `syz.8.1943'. [ 1269.980652][T15921] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1943'. [ 1270.877694][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.929587][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.981887][ T154] bond0 (unregistering): Released all slaves [ 1271.118873][T15936] loop9: detected capacity change from 0 to 512 [ 1271.134964][T15936] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1271.215427][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1271.245250][T15936] EXT4-fs (loop9): 1 truncate cleaned up [ 1271.346958][T15780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.368855][T15780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.372717][T15936] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1271.396865][T15780] bridge_slave_0: entered allmulticast mode [ 1271.980961][T15942] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1273.157053][T15780] bridge_slave_0: entered promiscuous mode [ 1276.560013][ T31] audit: type=1800 audit(1780364322.399:7238): pid=15948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1947" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1276.746586][T15780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.802912][T15780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.825972][T15780] bridge_slave_1: entered allmulticast mode [ 1276.837274][T11616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.856493][T15780] bridge_slave_1: entered promiscuous mode [ 1276.966045][ T154] hsr_slave_0: left promiscuous mode [ 1276.985538][ T154] hsr_slave_1: left promiscuous mode [ 1277.006950][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.046194][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1277.162224][ T154] veth1_vlan: left promiscuous mode [ 1277.171381][ T154] veth0_vlan: left promiscuous mode [ 1277.223634][T15955] loop9: detected capacity change from 0 to 512 [ 1277.273543][T15955] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1277.338296][ T5652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1277.349227][ T5652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1277.357967][ T5652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1277.376493][ T5652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1277.385143][ T5652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1277.442413][T15955] EXT4-fs (loop9): 1 truncate cleaned up [ 1277.563681][T15955] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1277.719420][T15955] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1953'. [ 1278.858640][ T31] audit: type=1800 audit(1780364324.719:7239): pid=15965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1953" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1278.976128][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1279.054196][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1279.159456][T11616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.430273][ T5636] Bluetooth: hci2: command tx timeout [ 1280.214653][T11673] bridge0: port 3(syz_tun) entered disabled state [ 1280.724120][T11673] syz_tun (unregistering): left allmulticast mode [ 1280.735512][T11673] syz_tun (unregistering): left promiscuous mode [ 1280.742879][T11673] bridge0: port 3(syz_tun) entered disabled state [ 1280.976939][T15780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.025344][T15780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.322909][T15780] team0: Port device team_slave_0 added [ 1281.340071][T15780] team0: Port device team_slave_1 added [ 1281.416433][T15986] loop5: detected capacity change from 0 to 1024 [ 1281.510495][ T5636] Bluetooth: hci2: command tx timeout [ 1281.612654][T15780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.612677][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.612709][T15780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.621071][T15780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.621092][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.621127][T15780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.440776][T15780] hsr_slave_0: entered promiscuous mode [ 1283.462351][T15780] hsr_slave_1: entered promiscuous mode [ 1283.487391][T15780] debugfs: 'hsr0' already exists in 'hsr' [ 1283.534822][T15780] Cannot create hsr debugfs directory [ 1283.590720][ T5636] Bluetooth: hci2: command tx timeout [ 1284.792499][T16006] loop5: detected capacity change from 0 to 512 [ 1286.780010][ T5636] Bluetooth: hci2: command tx timeout [ 1287.795650][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.973008][ T5287] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1289.931529][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.221547][ T5652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1290.237579][ T5652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1290.262942][ T5652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1290.284762][ T5652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1290.295047][ T5652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1291.223756][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.429598][ T5652] Bluetooth: hci0: command tx timeout [ 1292.533147][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.856598][T16063] loop5: detected capacity change from 0 to 512 [ 1292.942232][T16063] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1293.022855][T16063] EXT4-fs (loop5): 1 truncate cleaned up [ 1293.072793][T16063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1293.184700][T16063] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1971'. [ 1294.291193][ T31] audit: type=1800 audit(1780364340.159:7240): pid=16078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1971" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1294.487007][ T5652] Bluetooth: hci0: command tx timeout [ 1295.429577][T15956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.459761][T15956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.484810][ T5627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.497332][T15956] bridge_slave_0: entered allmulticast mode [ 1295.556143][T15956] bridge_slave_0: entered promiscuous mode [ 1295.617052][T15956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.660624][T15956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.675204][T15956] bridge_slave_1: entered allmulticast mode [ 1295.695543][T15956] bridge_slave_1: entered promiscuous mode [ 1296.593395][ T5652] Bluetooth: hci0: command tx timeout [ 1296.594857][ T5776] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1297.251680][ T5776] usb 6-1: Using ep0 maxpacket: 32 [ 1297.286993][ T5776] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1297.315346][ T5776] usb 6-1: config 0 has no interface number 0 [ 1297.342307][T15956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.353183][ T5776] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1297.374650][ T5776] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1297.395351][T15956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.414704][ T5776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.440246][ T5776] usb 6-1: Product: syz [ 1297.453001][ T5776] usb 6-1: Manufacturer: syz [ 1297.462925][ T5776] usb 6-1: SerialNumber: syz [ 1297.492268][ T5776] usb 6-1: config 0 descriptor?? [ 1297.692960][T16107] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1977'. [ 1297.760066][T15956] team0: Port device team_slave_0 added [ 1297.786622][T15956] team0: Port device team_slave_1 added [ 1297.874039][ T154] bridge_slave_1: left allmulticast mode [ 1297.879794][ T154] bridge_slave_1: left promiscuous mode [ 1297.886344][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.897905][ T154] bridge_slave_0: left allmulticast mode [ 1297.905090][ T154] bridge_slave_0: left promiscuous mode [ 1297.914439][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.658868][ T5652] Bluetooth: hci0: command tx timeout [ 1298.737435][T16118] loop9: detected capacity change from 0 to 512 [ 1298.922379][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1298.934880][ T6055] smbdirect: ib_dev[syz1] removed [ 1298.961533][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1298.993248][ T154] bond0 (unregistering): Released all slaves [ 1299.030370][ T5649] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1299.154919][T15956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.170338][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.198207][ T5649] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1299.205394][T15956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.209636][ T5649] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.243287][T15956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.250400][ T5649] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1299.255158][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.262245][ T5649] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1299.319564][T15956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.524360][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.531088][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.565006][ T5649] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1299.614819][ T5649] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.655769][ T5649] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1299.753707][ T5649] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1299.825424][ T5649] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1299.905167][ T5649] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.921470][ T5649] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1299.935301][ T5649] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1299.959163][ T5649] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1299.977251][ T5649] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.009267][ T5649] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1300.040223][ T5649] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1300.056393][T15780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1300.072170][ T5649] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1300.091793][ T5649] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.102347][T15780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1300.119646][ T5649] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1300.135224][T15780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1300.137540][ T5776] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1300.155897][ T5649] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1300.157611][ T5776] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1300.187278][ T5776] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1300.195958][ T5776] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1300.203159][T15780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1300.209572][ T5776] usb 6-1: USB disconnect, device number 20 [ 1300.213103][ T5649] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1300.250553][ T5649] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.268135][ T5649] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1300.289870][ T5649] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1300.345697][ T5649] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1300.386262][ T5649] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.407778][ T5649] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1300.449116][ T5649] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1300.506728][ T5649] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1300.528379][ T5649] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.543570][ T5649] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1300.571769][ T5649] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1300.602232][ T5649] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1300.750899][ T5649] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1300.760496][ T5649] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1300.768975][ T5649] usb 9-1: Product: syz [ 1300.778386][ T5649] usb 9-1: Manufacturer: syz [ 1300.799852][T15780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1300.807675][ T5649] usb 9-1: SerialNumber: syz [ 1300.936872][T15780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1300.959605][T15780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1300.967644][ T5649] usb 9-1: config 0 descriptor?? [ 1301.081024][ T5649] yurex 9-1:0.0: Could not find endpoints [ 1301.115552][T15780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1301.245241][ T154] hsr_slave_0: left promiscuous mode [ 1301.266148][ T154] hsr_slave_1: left promiscuous mode [ 1301.277885][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.304040][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.309364][ T9169] usb 9-1: USB disconnect, device number 14 [ 1301.333991][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1301.352418][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.393153][ T154] veth1_macvtap: left promiscuous mode [ 1301.403790][ T154] veth0_macvtap: left promiscuous mode [ 1301.414030][ T154] veth1_vlan: left promiscuous mode [ 1301.423460][ T154] veth0_vlan: left promiscuous mode [ 1303.673351][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1303.709195][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1303.986174][T15956] hsr_slave_0: entered promiscuous mode [ 1304.012783][T15956] hsr_slave_1: entered promiscuous mode [ 1304.027875][T15956] debugfs: 'hsr0' already exists in 'hsr' [ 1304.040318][T15956] Cannot create hsr debugfs directory [ 1306.072134][T16155] loop5: detected capacity change from 0 to 1024 [ 1306.275253][T16033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.284085][T16033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.284203][T16033] bridge_slave_0: entered allmulticast mode [ 1306.287486][T16033] bridge_slave_0: entered promiscuous mode [ 1306.385950][T16033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.386053][T16033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.386199][T16033] bridge_slave_1: entered allmulticast mode [ 1306.388363][T16033] bridge_slave_1: entered promiscuous mode [ 1306.869143][T16033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.889655][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1306.905524][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1306.914452][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1306.927121][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1306.936211][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1306.951500][T10811] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1307.084887][T16033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1307.187954][T10811] usb 9-1: Using ep0 maxpacket: 32 [ 1307.211074][T10811] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1307.482855][T10811] usb 9-1: config 0 has no interface number 0 [ 1307.671283][T10811] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1307.702123][T10811] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1307.735572][T10811] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.771086][T10811] usb 9-1: Product: syz [ 1307.791699][T10811] usb 9-1: Manufacturer: syz [ 1307.810455][T10811] usb 9-1: SerialNumber: syz [ 1307.843012][T10811] usb 9-1: config 0 descriptor?? [ 1308.014818][T16175] loop5: detected capacity change from 0 to 1024 [ 1308.042163][T16033] team0: Port device team_slave_0 added [ 1308.046675][T16175] hfsplus: Unknown parameter '' [ 1308.098115][T16033] team0: Port device team_slave_1 added [ 1308.599920][T16033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.614052][T16033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.667644][T16033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.779888][T16184] loop5: detected capacity change from 0 to 4096 [ 1308.789581][T16033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.799984][T16033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.842153][T16033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.958169][T16187] loop9: detected capacity change from 0 to 512 [ 1309.032649][ T5636] Bluetooth: hci6: command tx timeout [ 1309.100036][T16187] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.137982][T16187] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1309.647427][T16033] hsr_slave_0: entered promiscuous mode [ 1310.107049][T16033] hsr_slave_1: entered promiscuous mode [ 1310.127295][T11616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.143550][T16033] debugfs: 'hsr0' already exists in 'hsr' [ 1310.151261][T16033] Cannot create hsr debugfs directory [ 1310.499251][T10811] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1310.521754][T10811] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1310.540659][T10811] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1310.569003][T10811] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1310.612833][T10811] usb 9-1: USB disconnect, device number 15 [ 1311.112485][ T5636] Bluetooth: hci6: command tx timeout [ 1313.210245][ T5636] Bluetooth: hci6: command tx timeout [ 1313.532593][T16218] loop5: detected capacity change from 0 to 1024 [ 1313.549891][T16218] hfsplus: Unknown parameter '' [ 1313.804947][T15956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1313.861875][T15956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1313.886934][T15956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1313.916871][T15956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1314.007314][ T154] bridge_slave_1: left allmulticast mode [ 1314.019774][ T154] bridge_slave_1: left promiscuous mode [ 1314.036263][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.069614][ T154] bridge_slave_0: left allmulticast mode [ 1314.088591][ T154] bridge_slave_0: left promiscuous mode [ 1314.103860][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.145613][T16226] loop5: detected capacity change from 0 to 4096 [ 1314.549212][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1314.575673][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1314.600439][ T154] bond0 (unregistering): Released all slaves [ 1314.662735][T15956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1314.725782][T15956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1314.759203][T15956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1314.820100][T15956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1315.102224][T16234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1315.163675][ T154] hsr_slave_0: left promiscuous mode [ 1315.272472][ T5636] Bluetooth: hci6: command tx timeout [ 1315.341371][ T154] hsr_slave_1: left promiscuous mode [ 1315.643838][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.702272][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.385571][T16248] loop5: detected capacity change from 0 to 512 [ 1317.486013][T16248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1317.546490][T16248] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1317.609201][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1317.659915][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1318.988580][T16165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.027345][T16165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.044804][ T5638] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1319.060970][T16165] bridge_slave_0: entered allmulticast mode [ 1319.084225][T16165] bridge_slave_0: entered promiscuous mode [ 1319.140643][T16165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.165042][T16165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.179573][T16165] bridge_slave_1: entered allmulticast mode [ 1319.220279][ T5638] usb 9-1: Using ep0 maxpacket: 32 [ 1319.226471][T16165] bridge_slave_1: entered promiscuous mode [ 1319.245951][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2015'. [ 1319.282346][ T5638] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1319.295546][ T5638] usb 9-1: config 0 has no interface number 0 [ 1319.306552][ T5638] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1319.322877][ T5638] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1319.348411][ T5638] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.356757][ T5638] usb 9-1: Product: syz [ 1319.361153][ T5638] usb 9-1: Manufacturer: syz [ 1319.365783][ T5638] usb 9-1: SerialNumber: syz [ 1319.374078][ T5638] usb 9-1: config 0 descriptor?? [ 1319.527336][T16165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.763563][T16165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.968291][T15956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.128214][T16165] team0: Port device team_slave_0 added [ 1320.154026][T16165] team0: Port device team_slave_1 added [ 1320.208039][ T5627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.424134][T16165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.431895][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1320.459108][T16165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.474975][T16165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.490405][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1320.541429][T16165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.642824][T16033] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1320.683738][T16033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1320.697559][T16276] loop5: detected capacity change from 0 to 512 [ 1320.716274][T16033] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1320.798131][T16276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1320.824729][T16033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1320.855828][T16276] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1321.010562][ T31] audit: type=1800 audit(1780364366.879:7241): pid=16276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2017" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1321.057431][T15956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.090677][T16033] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1321.126558][T16033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1321.274201][T16165] hsr_slave_0: entered promiscuous mode [ 1321.301472][T16165] hsr_slave_1: entered promiscuous mode [ 1321.302119][ T5627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1321.326487][T16165] debugfs: 'hsr0' already exists in 'hsr' [ 1321.354060][T16165] Cannot create hsr debugfs directory [ 1321.376953][T16033] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1321.420666][T16033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1321.514413][ T3388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.521666][ T3388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.656745][ T5638] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1321.676925][ T5638] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1321.691976][T16288] loop5: detected capacity change from 0 to 4096 [ 1321.698888][ T5638] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1321.754637][ T3388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.755438][ T5638] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1321.761873][ T3388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.856396][ T5638] usb 9-1: USB disconnect, device number 16 [ 1322.413028][ T7482] bridge_slave_1: left allmulticast mode [ 1322.437689][ T7482] bridge_slave_1: left promiscuous mode [ 1322.460570][ T7482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.488911][ T7482] bridge_slave_0: left allmulticast mode [ 1322.509729][ T7482] bridge_slave_0: left promiscuous mode [ 1322.536075][ T7482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.131072][ T7482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1325.199632][ T7482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.220649][ T7482] bond0 (unregistering): Released all slaves [ 1325.337029][ T7482] hsr_slave_0: left promiscuous mode [ 1325.358733][ T7482] hsr_slave_1: left promiscuous mode [ 1325.381183][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.412051][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.664220][ T7482] team0 (unregistering): Port device team_slave_1 removed [ 1328.541497][ T7482] team0 (unregistering): Port device team_slave_0 removed [ 1329.548535][T16350] loop8: detected capacity change from 0 to 4096 [ 1331.158211][T16372] loop9: detected capacity change from 0 to 512 [ 1335.156156][T16033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.344524][T16033] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.456750][ T7482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.463972][ T7482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.571672][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.578842][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.247848][T16405] loop8: detected capacity change from 0 to 512 [ 1337.270905][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1339.650243][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1339.688453][ T10] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 1339.721500][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.785893][ T10] usb 6-1: config 0 has no interface number 0 [ 1339.806010][T16408] loop9: detected capacity change from 0 to 4096 [ 1339.814261][ T10] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1339.887594][ T10] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1339.944553][ T10] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1339.971769][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1339.984960][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1339.993807][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1340.001913][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1340.013679][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1340.029533][ T10] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1340.134941][ T10] usb 6-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1340.287235][T16165] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1340.390056][T16429] loop5: detected capacity change from 0 to 512 [ 1340.430640][ T10] usb 6-1: string descriptor 0 read error: -71 [ 1340.438499][ T10] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1340.460406][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.473527][T16165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1340.485327][ T10] usb 6-1: config 0 descriptor?? [ 1340.708103][T16165] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1341.125720][T16165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1342.906624][ T5636] Bluetooth: hci5: command tx timeout [ 1342.909420][ T10] usb 6-1: can't set config #0, error -71 [ 1342.989073][T16165] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1343.023314][T16165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1343.055125][ T10] usb 6-1: USB disconnect, device number 21 [ 1343.058859][T16165] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1343.129011][T16165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1344.537403][T16448] fuse: Unknown parameter 'group_i00000000000000000000' [ 1344.950733][ T5652] Bluetooth: hci5: command tx timeout [ 1345.402452][T16165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.805697][T16165] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.948499][T16033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.030254][ T5652] Bluetooth: hci5: command tx timeout [ 1347.279602][ T7482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.286771][ T7482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1347.415671][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.422826][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.731403][ T5652] Bluetooth: hci5: command tx timeout [ 1350.663379][ T154] bridge_slave_1: left allmulticast mode [ 1350.690175][ T154] bridge_slave_1: left promiscuous mode [ 1350.697587][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.745495][ T154] bridge_slave_0: left allmulticast mode [ 1350.763086][ T154] bridge_slave_0: left promiscuous mode [ 1350.782752][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.483045][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1351.508213][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1351.516647][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1351.525210][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1351.544845][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1351.558885][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1351.578658][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1351.592162][ T154] bond0 (unregistering): Released all slaves [ 1352.049373][ T154] hsr_slave_0: left promiscuous mode [ 1352.069124][ T154] hsr_slave_1: left promiscuous mode [ 1352.085868][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1352.117608][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1353.591832][ T5636] Bluetooth: hci0: command tx timeout [ 1354.686294][T16538] loop5: detected capacity change from 0 to 4096 [ 1356.362210][ T5636] Bluetooth: hci0: command tx timeout [ 1356.376250][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1356.553562][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1358.083374][T16418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.100474][T16418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.121121][T16418] bridge_slave_0: entered allmulticast mode [ 1358.167978][T16418] bridge_slave_0: entered promiscuous mode [ 1358.217333][T16418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.275373][T16418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.326276][T16418] bridge_slave_1: entered allmulticast mode [ 1358.363346][T16418] bridge_slave_1: entered promiscuous mode [ 1358.390431][ T5636] Bluetooth: hci0: command tx timeout [ 1358.981953][T16584] loop5: detected capacity change from 0 to 512 [ 1360.845246][ T5636] Bluetooth: hci0: command tx timeout [ 1360.872266][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.878589][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.938248][T16418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.044042][T16418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.293371][T16418] team0: Port device team_slave_0 added [ 1361.330791][T16418] team0: Port device team_slave_1 added [ 1361.503561][T16418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.528294][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.603710][T16418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.737285][T16599] loop9: detected capacity change from 0 to 4096 [ 1361.932827][T16418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.975657][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1362.071338][T16418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.142002][T16165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1363.044508][T16418] hsr_slave_0: entered promiscuous mode [ 1363.058412][T16418] hsr_slave_1: entered promiscuous mode [ 1363.072561][T16418] debugfs: 'hsr0' already exists in 'hsr' [ 1363.089251][T16418] Cannot create hsr debugfs directory [ 1363.291194][T16626] sg_write: data in/out 764/14 bytes for SCSI command 0x0-- guessing data in; [ 1363.291194][T16626] program syz.5.2071 not setting count and/or reply_len properly [ 1366.244267][T16165] veth0_vlan: entered promiscuous mode [ 1367.283097][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1367.640499][ T154] bridge_slave_1: left allmulticast mode [ 1367.653247][ T154] bridge_slave_1: left promiscuous mode [ 1367.673181][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.695105][ T154] bridge_slave_0: left allmulticast mode [ 1367.712912][ T154] bridge_slave_0: left promiscuous mode [ 1367.747120][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.650526][ T5652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1368.679093][ T5652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1368.694528][ T5652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1368.714543][ T5652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1368.733699][ T5652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1369.401225][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.449334][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.488844][ T154] bond0 (unregistering): Released all slaves [ 1370.011122][T16519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.039765][T16519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.068151][T16519] bridge_slave_0: entered allmulticast mode [ 1370.083619][T16519] bridge_slave_0: entered promiscuous mode [ 1370.139163][ T154] hsr_slave_0: left promiscuous mode [ 1370.156661][ T154] hsr_slave_1: left promiscuous mode [ 1370.172243][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.188047][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1370.959407][ T5652] Bluetooth: hci2: command tx timeout [ 1371.194617][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1371.225570][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1371.401418][T16697] loop5: detected capacity change from 0 to 512 [ 1371.413018][T16697] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1371.457215][T16697] EXT4-fs (loop5): 1 truncate cleaned up [ 1371.490789][T16697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1371.579027][T16697] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2088'. [ 1371.830440][T16519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.849811][T16519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.874248][T16519] bridge_slave_1: entered allmulticast mode [ 1371.956517][T16519] bridge_slave_1: entered promiscuous mode [ 1372.550448][ T31] audit: type=1800 audit(1780364418.359:7242): pid=16701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2088" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1372.648391][ T5627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.704393][ T5287] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1372.801595][T16707] sg_write: data in/out 764/14 bytes for SCSI command 0x0-- guessing data in; [ 1372.801595][T16707] program syz.9.2089 not setting count and/or reply_len properly [ 1373.163607][ T5652] Bluetooth: hci2: command tx timeout [ 1373.287054][T16519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.323460][T16519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.798368][T16519] team0: Port device team_slave_0 added [ 1374.067623][T16519] team0: Port device team_slave_1 added [ 1375.034734][T16519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.047343][T16519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.258475][T16519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.281805][ T5652] Bluetooth: hci2: command tx timeout [ 1375.368955][T16519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.407644][T16519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.514229][T16519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.217220][T16418] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1376.289104][T16418] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1376.369511][T16519] hsr_slave_0: entered promiscuous mode [ 1376.393369][T16519] hsr_slave_1: entered promiscuous mode [ 1376.439192][T16519] debugfs: 'hsr0' already exists in 'hsr' [ 1376.471938][T16519] Cannot create hsr debugfs directory [ 1376.788130][T16418] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1376.819317][T16418] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1376.865299][T16418] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1376.921613][T16418] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1376.958624][T16418] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1377.010609][T16418] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1377.211970][ T5287] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1377.351489][ T5652] Bluetooth: hci2: command tx timeout [ 1382.768598][ T154] bridge_slave_1: left allmulticast mode [ 1382.786661][ T154] bridge_slave_1: left promiscuous mode [ 1382.808083][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.843824][ T154] bridge_slave_0: left allmulticast mode [ 1382.849536][T16821] loop5: detected capacity change from 0 to 128 [ 1382.856029][ T154] bridge_slave_0: left promiscuous mode [ 1382.856269][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.907485][T16821] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1382.923952][T16821] ext4 filesystem being mounted at /517/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1386.520909][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.547577][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.572894][ T154] bond0 (unregistering): Released all slaves [ 1386.651097][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1386.869454][ T154] hsr_slave_0: left promiscuous mode [ 1386.913988][ T154] hsr_slave_1: left promiscuous mode [ 1386.920682][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.931794][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1386.944397][ T154] veth0_vlan: left promiscuous mode [ 1387.281242][ T5627] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1387.304729][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1387.348328][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1387.769945][T16662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.808282][T16662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.833436][T16662] bridge_slave_0: entered allmulticast mode [ 1387.858640][T16662] bridge_slave_0: entered promiscuous mode [ 1387.885867][T16662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.896539][T16662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.906295][T16662] bridge_slave_1: entered allmulticast mode [ 1387.914905][T16662] bridge_slave_1: entered promiscuous mode [ 1387.942011][T16857] warning: `syz.5.2130' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1388.095287][T16418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.147307][T16662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.887644][T16662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.233165][T16662] team0: Port device team_slave_0 added [ 1389.463271][T16418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.480861][T16662] team0: Port device team_slave_1 added [ 1390.702179][T16519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1390.835547][T16519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1390.868494][T16519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1391.793277][T16519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1391.842059][T16519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1391.869243][T16519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1391.907986][T12725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.915280][T12725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.020221][T16662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.043467][T16662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.046355][T16902] loop9: detected capacity change from 0 to 512 [ 1392.100264][T16662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.122638][T16519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1392.160658][T16519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1393.948493][T12725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.955677][T12725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.986423][T16662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1394.029216][T16662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.120362][T16662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.366800][T16662] hsr_slave_0: entered promiscuous mode [ 1394.393218][T16662] hsr_slave_1: entered promiscuous mode [ 1394.422252][T16662] debugfs: 'hsr0' already exists in 'hsr' [ 1394.436315][T16662] Cannot create hsr debugfs directory [ 1396.361941][T16519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.547122][T16519] 8021q: adding VLAN 0 to HW filter on device team0 [ 1396.586636][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.593851][ T7361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.735099][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.742290][ T7361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.412830][T16976] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1397.543210][T16981] loop9: detected capacity change from 0 to 16 [ 1397.586551][T16981] erofs (device loop9): mounted with root inode @ nid 36. [ 1397.792367][T16981] bio_check_eod: 6 callbacks suppressed [ 1397.792387][T16981] syz.9.2162: attempt to access beyond end of device [ 1397.792387][T16981] loop9: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 1397.832354][T16981] syz.9.2162: attempt to access beyond end of device [ 1397.832354][T16981] loop9: rw=0, sector=46, nr_sectors = 1 limit=16 [ 1397.981300][T16981] erofs (device loop9): read error -5 @ 0 of nid 36 [ 1398.019867][T16981] syz.9.2162: attempt to access beyond end of device [ 1398.019867][T16981] loop9: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 1398.064202][T16981] syz.9.2162: attempt to access beyond end of device [ 1398.064202][T16981] loop9: rw=0, sector=46, nr_sectors = 1 limit=16 [ 1398.116808][T16981] erofs (device loop9): read error -5 @ 0 of nid 36 [ 1398.160044][T16990] syz.9.2162: attempt to access beyond end of device [ 1398.160044][T16990] loop9: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 1398.297487][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1398.313904][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1398.343929][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1398.378394][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1398.397977][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1398.987343][T16990] syz.9.2162: attempt to access beyond end of device [ 1398.987343][T16990] loop9: rw=0, sector=46, nr_sectors = 1 limit=16 [ 1399.059344][T16990] erofs (device loop9): read error -5 @ 0 of nid 36 [ 1399.082901][T16662] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1399.115683][T16981] syz.9.2162: attempt to access beyond end of device [ 1399.115683][T16981] loop9: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 1399.238703][T16662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1399.249778][T16981] syz.9.2162: attempt to access beyond end of device [ 1399.249778][T16981] loop9: rw=0, sector=46, nr_sectors = 1 limit=16 [ 1399.313313][T16981] erofs (device loop9): read error -5 @ 0 of nid 36 [ 1399.344033][T16991] syz.9.2162: attempt to access beyond end of device [ 1399.344033][T16991] loop9: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 1399.345614][T16662] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1399.382527][T16981] erofs (device loop9): failed to readdir of logical block 0 of nid 36 [ 1399.402806][T16991] syz.9.2162: attempt to access beyond end of device [ 1399.402806][T16991] loop9: rw=0, sector=46, nr_sectors = 1 limit=16 [ 1399.428895][T16662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1399.452464][T16991] erofs (device loop9): read error -5 @ 0 of nid 36 [ 1399.464650][T16662] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1399.507101][T16997] erofs (device loop9): read error -5 @ 0 of nid 36 [ 1399.534158][T16662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1399.567193][T16990] erofs (device loop9): read error -5 @ 0 of nid 36 [ 1399.568341][T16997] erofs (device loop9): read error -5 @ 0 of nid 36 [ 1399.640421][T16990] erofs (device loop9): failed to readdir of logical block 0 of nid 36 [ 1399.696713][T16662] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1399.771137][T16662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1401.156497][ T5636] Bluetooth: hci6: command tx timeout [ 1402.604067][T17054] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1403.190377][ T5636] Bluetooth: hci6: command tx timeout [ 1403.276109][T16662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.322727][T17064] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2176'. [ 1404.500662][T16662] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.745739][T16209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.752889][T16209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.273392][ T5636] Bluetooth: hci6: command tx timeout [ 1407.215124][T16519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.350982][ T5636] Bluetooth: hci6: command tx timeout [ 1407.588194][T16209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.595349][T16209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.943440][T16208] bridge_slave_1: left allmulticast mode [ 1407.971200][T16208] bridge_slave_1: left promiscuous mode [ 1408.004426][T16208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.256171][T16208] bridge_slave_0: left allmulticast mode [ 1408.286420][T16208] bridge_slave_0: left promiscuous mode [ 1408.504676][T16208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.676761][T16208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.713500][T16208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.738454][T16208] bond0 (unregistering): Released all slaves [ 1411.810595][ T5776] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1412.007056][T16208] hsr_slave_0: left promiscuous mode [ 1412.021313][ T5776] usb 10-1: Using ep0 maxpacket: 8 [ 1412.027973][T16208] hsr_slave_1: left promiscuous mode [ 1412.055995][ T5776] usb 10-1: config 0 has an invalid interface number: 122 but max is 0 [ 1412.064545][T16208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.093605][ T5776] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.141734][T16208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.150209][ T5776] usb 10-1: config 0 has no interface number 0 [ 1412.176314][ T5776] usb 10-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1412.228077][ T5776] usb 10-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1412.270113][ T5776] usb 10-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1412.338868][ T5776] usb 10-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1412.398950][ T5776] usb 10-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1412.446359][ T5776] usb 10-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1412.458145][ T5776] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.494126][ T5776] usb 10-1: Product: syz [ 1412.526255][ T5776] usb 10-1: Manufacturer: syz [ 1412.544859][ T5776] usb 10-1: SerialNumber: syz [ 1412.605577][ T5776] usb 10-1: config 0 descriptor?? [ 1412.633257][T17114] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1412.859160][T17114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.902541][T17114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.928826][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1412.945309][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1412.954142][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1412.967445][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1412.978616][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1412.989884][T17114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.064085][T17114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.089134][T16208] team0 (unregistering): Port device team_slave_1 removed [ 1414.008920][T17114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.160802][T17114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.030380][ T5636] Bluetooth: hci5: command tx timeout [ 1415.118052][T16208] team0 (unregistering): Port device team_slave_0 removed [ 1415.229667][ T5776] usb 10-1: NFC: intf ffff8880345b2000 id ffffffff8f3e85e0 [ 1415.654764][ T5776] nfcmrvl 10-1:0.122: NFC: registered with nci successfully [ 1415.713470][ T5776] usb 10-1: USB disconnect, device number 12 [ 1415.772642][ T5776] usb 10-1: NFC: intf ffff8880345b2000 [ 1416.669552][T17161] loop9: detected capacity change from 0 to 1024 [ 1416.756199][T16995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.797708][T16995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.798197][T16995] bridge_slave_0: entered allmulticast mode [ 1416.809534][T16995] bridge_slave_0: entered promiscuous mode [ 1416.817632][T16995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.817741][T16995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.820999][T16995] bridge_slave_1: entered allmulticast mode [ 1416.827673][T16995] bridge_slave_1: entered promiscuous mode [ 1417.018520][T16995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1417.033712][ T5636] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1417.033834][T16995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1417.117398][ T5636] Bluetooth: hci5: command tx timeout [ 1417.153946][T16995] team0: Port device team_slave_0 added [ 1417.442787][T16995] team0: Port device team_slave_1 added [ 1417.660038][T16995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.682366][T16995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.862295][T16995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.967806][T16995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.031587][T16995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.145865][T16995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.526232][T17192] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2204'. [ 1418.781170][T16995] hsr_slave_0: entered promiscuous mode [ 1419.210256][ T5636] Bluetooth: hci5: command tx timeout [ 1419.544998][T16995] hsr_slave_1: entered promiscuous mode [ 1419.585657][T16995] debugfs: 'hsr0' already exists in 'hsr' [ 1419.613259][T16995] Cannot create hsr debugfs directory [ 1419.702380][T16662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1421.270677][ T5636] Bluetooth: hci5: command tx timeout [ 1422.723157][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.731077][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.928513][T16662] veth0_vlan: entered promiscuous mode [ 1425.074880][T16662] veth1_vlan: entered promiscuous mode [ 1425.307524][T16662] veth0_macvtap: entered promiscuous mode [ 1425.690792][T16662] veth1_macvtap: entered promiscuous mode [ 1427.546477][T16662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1427.640336][T17121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.670391][T17121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.698814][T17121] bridge_slave_0: entered allmulticast mode [ 1427.780621][T17121] bridge_slave_0: entered promiscuous mode [ 1427.815502][T17121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.854182][T17121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.889461][T17121] bridge_slave_1: entered allmulticast mode [ 1428.343937][T17121] bridge_slave_1: entered promiscuous mode [ 1428.621408][T17121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1428.757585][T17121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1428.901125][T17290] loop9: detected capacity change from 0 to 512 [ 1428.938389][T17290] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1429.009754][T17290] EXT4-fs (loop9): 1 truncate cleaned up [ 1429.022087][T17290] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1429.160427][T17121] team0: Port device team_slave_0 added [ 1429.183641][T17121] team0: Port device team_slave_1 added [ 1429.243915][T17290] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2224'. [ 1429.283472][T16208] bridge_slave_1: left allmulticast mode [ 1429.495947][T16208] bridge_slave_1: left promiscuous mode [ 1429.509672][ T5652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1429.520771][ T5652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1429.529968][ T5652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1430.492123][T16208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.502747][ T5652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1430.516139][ T5652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1431.100770][ T31] audit: type=1800 audit(1780364476.929:7243): pid=17303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2224" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1431.830048][T16208] bridge_slave_0: left allmulticast mode [ 1431.868417][T16208] bridge_slave_0: left promiscuous mode [ 1431.897670][T16208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.326845][T11616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.550624][ T5652] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1432.781017][T17328] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2230'. [ 1432.803937][T16208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.939198][T16208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.979039][T16208] bond0 (unregistering): Released all slaves [ 1433.830483][ T5652] Bluetooth: hci0: command tx timeout [ 1435.255125][T17121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.298301][T17121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.380288][T17121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.455559][T16208] hsr_slave_0: left promiscuous mode [ 1435.489641][T16208] hsr_slave_1: left promiscuous mode [ 1435.529146][T16208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.564763][T16208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.925076][ T5652] Bluetooth: hci0: command tx timeout [ 1437.642071][T16208] team0 (unregistering): Port device team_slave_1 removed [ 1437.737220][T16208] team0 (unregistering): Port device team_slave_0 removed [ 1437.990145][ T5652] Bluetooth: hci0: command tx timeout [ 1438.469613][T17121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.664963][T17121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1439.623850][T17121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1439.973206][T16995] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1440.336511][ T5652] Bluetooth: hci0: command tx timeout [ 1440.415445][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1440.470527][T16995] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1440.539749][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1440.686082][T16995] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1440.806034][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1440.834806][T16995] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1440.887492][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1440.910822][T17404] sctp: [Deprecated]: syz.5.2243 (pid 17404) Use of int in max_burst socket option deprecated. [ 1440.910822][T17404] Use struct sctp_assoc_value instead [ 1440.947147][T17121] hsr_slave_0: entered promiscuous mode [ 1440.963047][T17121] hsr_slave_1: entered promiscuous mode [ 1440.981631][T17121] debugfs: 'hsr0' already exists in 'hsr' [ 1441.000233][T17121] Cannot create hsr debugfs directory [ 1441.317853][T17418] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1444.018770][T17439] loop9: detected capacity change from 0 to 128 [ 1444.026453][T17439] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1444.620108][T17439] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1452.395244][T16995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.345341][T16995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1453.516892][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.524047][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1453.676332][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.683663][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1454.554122][T16208] bridge_slave_1: left allmulticast mode [ 1454.573977][T16208] bridge_slave_1: left promiscuous mode [ 1454.592886][T16208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.627804][T16208] bridge_slave_0: left allmulticast mode [ 1454.644639][T16208] bridge_slave_0: left promiscuous mode [ 1454.662251][T16208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.573895][T16208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.615033][T16208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.644532][T16208] bond0 (unregistering): Released all slaves [ 1456.891584][T17121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1456.915840][T17121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1456.924510][T17533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.979619][T17121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1456.992920][T17121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1457.001399][T17121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1457.015211][T17121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1457.043541][T16208] hsr_slave_0: left promiscuous mode [ 1457.050952][T16208] hsr_slave_1: left promiscuous mode [ 1457.059865][T16208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1457.068503][T16208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.076561][T16208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.099316][T16208] veth1_macvtap: left promiscuous mode [ 1457.105918][T16208] veth0_macvtap: left promiscuous mode [ 1457.113546][T16208] veth1_vlan: left promiscuous mode [ 1457.118931][T16208] veth0_vlan: left promiscuous mode [ 1458.060677][T16208] team0 (unregistering): Port device team_slave_1 removed [ 1458.128368][T16208] team0 (unregistering): Port device team_slave_0 removed [ 1458.305897][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1458.317880][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1458.329849][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1458.346852][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1458.354543][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1458.570443][T17297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.613076][T17297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.639344][T17297] bridge_slave_0: entered allmulticast mode [ 1458.673296][T17297] bridge_slave_0: entered promiscuous mode [ 1458.687009][T17546] loop9: detected capacity change from 0 to 512 [ 1458.706188][T17121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1458.728386][T17546] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1458.772953][T17121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1458.777090][T17546] EXT4-fs (loop9): 1 truncate cleaned up [ 1458.829951][T17546] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1458.856380][T17297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.906893][T17297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.971093][T17297] bridge_slave_1: entered allmulticast mode [ 1459.044562][T17297] bridge_slave_1: entered promiscuous mode [ 1460.201090][ T31] audit: type=1800 audit(1780364505.919:7244): pid=17568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2277" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1460.564566][ T5652] Bluetooth: hci2: command tx timeout [ 1460.733068][T11616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1461.699074][T17297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.792212][T17297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.968348][T17578] loop9: detected capacity change from 0 to 512 [ 1463.843127][ T5652] Bluetooth: hci2: command tx timeout [ 1463.983110][T17121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.006771][T17297] team0: Port device team_slave_0 added [ 1464.074292][T17297] team0: Port device team_slave_1 added [ 1465.910196][ T5652] Bluetooth: hci2: command tx timeout [ 1466.232383][T17297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.239475][T17297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.301109][T17297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.337519][T17121] 8021q: adding VLAN 0 to HW filter on device team0 [ 1466.394062][T17297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.420264][T17297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.474654][T17297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1466.844285][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.851457][ T5822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1468.039381][ T5652] Bluetooth: hci2: command tx timeout [ 1468.319115][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.326254][ T5822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.403823][T17297] hsr_slave_0: entered promiscuous mode [ 1468.423666][T17297] hsr_slave_1: entered promiscuous mode [ 1468.441653][T17297] debugfs: 'hsr0' already exists in 'hsr' [ 1468.457339][T17297] Cannot create hsr debugfs directory [ 1470.259253][T16208] bridge_slave_1: left allmulticast mode [ 1470.279532][T16208] bridge_slave_1: left promiscuous mode [ 1470.309962][T16208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.347481][T16208] bridge_slave_0: left allmulticast mode [ 1470.360409][T16208] bridge_slave_0: left promiscuous mode [ 1470.373499][T16208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.807081][T16208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.837438][T16208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1472.853226][T16208] bond0 (unregistering): Released all slaves [ 1473.011746][T16208] hsr_slave_0: left promiscuous mode [ 1473.038246][T16208] hsr_slave_1: left promiscuous mode [ 1473.058891][T16208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.070024][T16208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.500403][T16208] team0 (unregistering): Port device team_slave_1 removed [ 1473.524424][T16208] team0 (unregistering): Port device team_slave_0 removed [ 1475.677360][T17625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1475.721378][T17541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.740279][T17541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.752587][T17541] bridge_slave_0: entered allmulticast mode [ 1475.775121][T17541] bridge_slave_0: entered promiscuous mode [ 1475.785205][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1475.803222][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1475.813668][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1475.827297][T17541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.840165][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1475.850492][T17541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.857897][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1475.865752][T17541] bridge_slave_1: entered allmulticast mode [ 1475.875293][T17541] bridge_slave_1: entered promiscuous mode [ 1475.979999][T17541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.082319][T17541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.279447][T17541] team0: Port device team_slave_0 added [ 1476.600630][T17541] team0: Port device team_slave_1 added [ 1476.944945][T17541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1476.974874][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.024120][T17541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.057772][T17541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.076063][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.114062][T17541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1477.937281][ T5636] Bluetooth: hci5: command tx timeout [ 1478.236944][T17656] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2301'. [ 1478.405423][T17541] hsr_slave_0: entered promiscuous mode [ 1478.421349][T17541] hsr_slave_1: entered promiscuous mode [ 1478.437831][T17541] debugfs: 'hsr0' already exists in 'hsr' [ 1478.444378][T17541] Cannot create hsr debugfs directory [ 1479.860175][T17297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1479.990194][ T5636] Bluetooth: hci5: command tx timeout [ 1480.771278][T17297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1481.099926][T17297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1481.117950][T17297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1482.080696][ T5636] Bluetooth: hci5: command tx timeout [ 1483.139280][T17297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1483.165740][T17297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1483.561558][T17681] netlink: 'syz.5.2308': attribute type 2 has an invalid length. [ 1483.579876][T17681] netlink: 'syz.5.2308': attribute type 1 has an invalid length. [ 1483.738312][T17297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1483.754261][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.760700][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1483.795437][T17297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1484.150543][ T5636] Bluetooth: hci5: command tx timeout [ 1485.717096][T16208] bridge_slave_1: left allmulticast mode [ 1485.725157][T16208] bridge_slave_1: left promiscuous mode [ 1485.732718][T16208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.749800][T16208] bridge_slave_0: left allmulticast mode [ 1485.756382][T16208] bridge_slave_0: left promiscuous mode [ 1485.762597][T16208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.815192][ T5636] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1486.178548][T16208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.216725][T16208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.349321][T16208] bond0 (unregistering): Released all slaves [ 1487.237235][T17720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1487.283391][T16208] hsr_slave_0: left promiscuous mode [ 1487.293311][T16208] hsr_slave_1: left promiscuous mode [ 1487.304406][T16208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.318480][T16208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.572768][T16208] team0 (unregistering): Port device team_slave_1 removed [ 1487.594630][T16208] team0 (unregistering): Port device team_slave_0 removed [ 1488.316433][T17633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.330736][T17633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.338219][T17633] bridge_slave_0: entered allmulticast mode [ 1488.349212][T17633] bridge_slave_0: entered promiscuous mode [ 1488.374729][T17723] tipc: Started in network mode [ 1488.387742][T17723] tipc: Node identity 080211, cluster identity 4711 [ 1488.395625][T17723] tipc: Enabled bearer , priority 0 [ 1488.410782][T17726] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1488.467413][T17633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.475277][T17633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.489596][T17633] bridge_slave_1: entered allmulticast mode [ 1488.515779][T17633] bridge_slave_1: entered promiscuous mode [ 1488.809966][T17633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.846775][T17633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.944979][T17633] team0: Port device team_slave_0 added [ 1489.951862][T15016] tipc: Node number set to 134353152 [ 1490.033232][T17633] team0: Port device team_slave_1 added [ 1490.234566][T17750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2326'. [ 1490.263437][T17633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.289741][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.374822][T17633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1490.448183][T17752] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2327'. [ 1490.461864][T17758] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1490.473009][T17758] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1490.642465][T17758] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1490.684475][T17758] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1490.692972][T17633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1490.700314][T17758] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1491.476412][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1491.627681][T17633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.749498][T17768] 9p: Bad value for 'wfdno' [ 1491.804446][T17541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1491.843408][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1491.873422][T17541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1491.901785][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1492.229037][T17633] hsr_slave_0: entered promiscuous mode [ 1492.276364][T17633] hsr_slave_1: entered promiscuous mode [ 1492.294341][T17633] debugfs: 'hsr0' already exists in 'hsr' [ 1492.325280][T17633] Cannot create hsr debugfs directory [ 1492.350297][T17541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1492.385938][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1492.416216][T17541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1492.464776][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1492.960714][T17758] Bluetooth: hci6: command tx timeout [ 1495.073856][T17758] Bluetooth: hci6: command tx timeout [ 1497.309667][T17758] Bluetooth: hci6: command tx timeout [ 1498.918241][ T37] bridge_slave_1: left allmulticast mode [ 1498.941054][ T37] bridge_slave_1: left promiscuous mode [ 1498.952785][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.987723][ T37] bridge_slave_0: left allmulticast mode [ 1499.017969][ T37] bridge_slave_0: left promiscuous mode [ 1499.036610][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.350266][ T5636] Bluetooth: hci6: command tx timeout [ 1500.503023][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.748963][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.766296][ T37] bond0 (unregistering): Released all slaves [ 1502.086546][T17541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.289986][ T37] hsr_slave_0: left promiscuous mode [ 1502.305394][ T37] hsr_slave_1: left promiscuous mode [ 1502.343763][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.524833][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.546479][T17891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1505.152344][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1505.175367][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1505.316650][ T5636] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1505.489930][T17541] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.885122][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.892324][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.647856][T17755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.696229][T17755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.719133][T17918] fuse: fd is not a fuse device [ 1506.722475][T17755] bridge_slave_0: entered allmulticast mode [ 1506.765020][T17755] bridge_slave_0: entered promiscuous mode [ 1506.788767][T17755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.817833][T17755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.853928][T17755] bridge_slave_1: entered allmulticast mode [ 1506.876969][T17755] bridge_slave_1: entered promiscuous mode [ 1507.243041][T17755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.282116][T17755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1507.346168][T16208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.353371][T16208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1507.452294][ T5636] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 1507.506592][T17755] team0: Port device team_slave_0 added [ 1507.582302][T17755] team0: Port device team_slave_1 added [ 1507.651297][T17940] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2375'. [ 1508.561728][T17755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1508.658505][T17755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.298076][T17755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.327881][T17755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.346017][T17755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.378112][T17755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.431157][T17954] fuse: fd is not a fuse device [ 1509.431505][T17633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1509.498360][T17633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1509.528968][T17633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1509.575082][T17633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1509.649687][T17633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1509.684522][T17633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1509.720336][T17755] hsr_slave_0: entered promiscuous mode [ 1509.751765][T17755] hsr_slave_1: entered promiscuous mode [ 1509.788859][T17755] debugfs: 'hsr0' already exists in 'hsr' [ 1509.810002][T17755] Cannot create hsr debugfs directory [ 1509.877395][T17633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1509.908871][T17633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1511.467096][ T5636] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1513.988417][T17633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.176780][T17633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.291306][ T7483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.298461][ T7483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1514.367643][T16209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.374801][T16209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1515.022028][T17541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.049055][T17958] infiniband syz2: set down [ 1515.092537][T17958] infiniband syz2: added ipvlan0 [ 1515.224605][T17755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1515.252445][T17755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1515.262063][T17755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1515.288611][T17958] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1515.505276][T17755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1515.542560][T17755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1515.560762][T17958] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1515.582720][T17958] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1516.775890][T17755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1516.943776][T17755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1518.127834][T17755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1518.264635][T17958] RDS/IB: syz2: added [ 1518.358470][T17958] smc: adding ib device syz2 with port count 1 [ 1518.401137][T17958] smc: ib device syz2 port 1 has no pnetid [ 1518.540562][T17755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.649207][T17755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.696447][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.703600][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.791420][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.798644][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.152342][T17758] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1519.165483][T17758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1519.174069][T17758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1519.184511][T17758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1519.202168][T17758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1519.396348][T17633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1520.554969][T17633] veth0_vlan: entered promiscuous mode [ 1520.600840][T17633] veth1_vlan: entered promiscuous mode [ 1520.723933][T17633] veth0_macvtap: entered promiscuous mode [ 1520.759070][T17633] veth1_macvtap: entered promiscuous mode [ 1520.803584][T17755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1520.848678][ T5636] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1520.879102][T17633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1520.949609][T17633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1521.007103][ T5822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.031234][ T5822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.066917][ T5822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.083524][ T5822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.204652][T17755] veth0_vlan: entered promiscuous mode [ 1521.270692][ T5636] Bluetooth: hci0: command tx timeout [ 1521.276527][T17755] veth1_vlan: entered promiscuous mode [ 1521.531593][T17755] veth0_macvtap: entered promiscuous mode [ 1521.543691][ T5822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.562071][ T5822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.571380][T17755] veth1_macvtap: entered promiscuous mode [ 1522.387820][T17755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.412068][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.432220][T17755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1522.433703][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1522.485798][ T7482] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.510152][ T7482] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.560147][ T7482] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.584627][ T7482] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.978098][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.138691][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.151768][ T31] audit: type=1326 audit(1780364568.829:7245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18135 comm="syz.4.1336" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f382599ce59 code=0x0 [ 1523.414600][ T5636] Bluetooth: hci0: command tx timeout [ 1523.897141][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.936849][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.269249][T17758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1525.281209][T17758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1525.289675][T17758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1525.351329][T17758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1525.426319][T17758] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1525.434035][ T5652] Bluetooth: hci0: command tx timeout [ 1527.539163][ T5636] Bluetooth: hci2: command tx timeout [ 1527.545771][T18167] Bluetooth: hci0: command tx timeout [ 1529.590337][T18167] Bluetooth: hci2: command tx timeout [ 1530.624495][ T5636] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1530.638998][ T5636] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1530.752770][ T31] audit: type=1326 audit(1780364576.599:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18241 comm="syz.2.2411" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd5a59ce59 code=0x0 [ 1530.865470][ T5636] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1530.969864][ T5636] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1531.113014][ T5636] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1531.700324][ T5636] Bluetooth: hci2: command tx timeout [ 1533.025118][T18032] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1533.400157][ T5636] Bluetooth: hci7: command tx timeout [ 1533.751987][ T5636] Bluetooth: hci2: command tx timeout [ 1534.626095][T18274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.864654][T18032] bridge0: port 3(syz_tun) entered disabled state [ 1534.919299][T18032] syz_tun (unregistering): left allmulticast mode [ 1534.925799][T18032] syz_tun (unregistering): left promiscuous mode [ 1534.932263][T18032] bridge0: port 3(syz_tun) entered disabled state [ 1536.683061][ T5636] Bluetooth: hci7: command tx timeout [ 1537.008456][T18302] fuse: fd is not a fuse device [ 1537.608167][T17958] bridge0: port 3(syz_tun) entered disabled state [ 1538.717302][ T5636] Bluetooth: hci7: command tx timeout [ 1538.835381][T17958] syz_tun (unregistering): left allmulticast mode [ 1538.857614][T17958] syz_tun (unregistering): left promiscuous mode [ 1538.879192][T17958] bridge0: port 3(syz_tun) entered disabled state [ 1540.208564][T18320] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1540.482711][T18065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.489982][T18065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.497466][T18065] bridge_slave_0: entered allmulticast mode [ 1540.506708][T18065] bridge_slave_0: entered promiscuous mode [ 1540.548590][T18065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.581067][T18065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.598480][T18065] bridge_slave_1: entered allmulticast mode [ 1541.730992][ T5636] Bluetooth: hci7: command tx timeout [ 1541.772411][T18065] bridge_slave_1: entered promiscuous mode [ 1541.876634][T18164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.892049][T18164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.907784][T18164] bridge_slave_0: entered allmulticast mode [ 1541.916434][T18164] bridge_slave_0: entered promiscuous mode [ 1542.241826][T18164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.270985][T18164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.296614][T18164] bridge_slave_1: entered allmulticast mode [ 1542.313676][T18164] bridge_slave_1: entered promiscuous mode [ 1542.363126][T18065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.396984][T18065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.422029][T18004] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1542.624028][T18004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.671968][T18004] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1542.702309][T18004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.705852][T18164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.742437][T18004] usb 3-1: config 0 descriptor?? [ 1542.752711][T18164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.774682][T18065] team0: Port device team_slave_0 added [ 1542.829905][T18065] team0: Port device team_slave_1 added [ 1543.008090][T18004] usbhid 3-1:0.0: can't add hid device: -71 [ 1543.014343][T18004] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1543.033713][T18004] usb 3-1: USB disconnect, device number 8 [ 1544.456046][T18378] fuse: fd is not a fuse device [ 1545.149458][T18164] team0: Port device team_slave_0 added [ 1545.204402][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.212406][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.240718][T18065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.265561][T18065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.323799][T18065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.336920][T18065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.348748][T18065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.383225][T18065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.427133][T18164] team0: Port device team_slave_1 added [ 1546.047995][T18405] tmpfs: Bad value for 'mpol' [ 1546.697800][T18404] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1547.709526][T18164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1547.716603][T18164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1547.756340][T18164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.884816][T18065] hsr_slave_0: entered promiscuous mode [ 1547.906893][T18065] hsr_slave_1: entered promiscuous mode [ 1547.942394][T18065] debugfs: 'hsr0' already exists in 'hsr' [ 1547.957515][T18065] Cannot create hsr debugfs directory [ 1547.963990][T18415] fuse: fd is not a fuse device [ 1547.971798][T18164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.979567][T18164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1548.016624][T18164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.414935][ T7482] bridge_slave_1: left allmulticast mode [ 1548.428295][ T7482] bridge_slave_1: left promiscuous mode [ 1548.440329][ T7482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.463145][ T7482] bridge_slave_0: left allmulticast mode [ 1548.478919][ T7482] bridge_slave_0: left promiscuous mode [ 1548.491922][ T7482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.105372][T18433] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1549.904322][ T7482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.686946][ T7482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1550.728118][ T7482] bond0 (unregistering): Released all slaves [ 1550.858637][T18164] hsr_slave_0: entered promiscuous mode [ 1550.883821][T18164] hsr_slave_1: entered promiscuous mode [ 1550.930775][T18164] debugfs: 'hsr0' already exists in 'hsr' [ 1550.936607][T18164] Cannot create hsr debugfs directory [ 1551.353750][T18443] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2460'. [ 1553.925605][ T7482] hsr_slave_0: left promiscuous mode [ 1553.955741][ T7482] hsr_slave_1: left promiscuous mode [ 1553.969441][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.988088][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.695553][ T7482] team0 (unregistering): Port device team_slave_1 removed [ 1554.791525][ T7482] team0 (unregistering): Port device team_slave_0 removed [ 1555.437131][T18471] fuse: fd is not a fuse device [ 1556.539269][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2469'. [ 1556.596180][T18243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.603882][T18243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.612916][T18243] bridge_slave_0: entered allmulticast mode [ 1556.621123][T18243] bridge_slave_0: entered promiscuous mode [ 1556.952565][T18243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.177716][T18486] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1557.206572][T18486] tmpfs: Bad value for 'mpol' [ 1557.938579][T18243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.957158][T18243] bridge_slave_1: entered allmulticast mode [ 1558.747884][T18243] bridge_slave_1: entered promiscuous mode [ 1559.637319][T18243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.692580][T18243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.124492][T18243] team0: Port device team_slave_0 added [ 1560.150539][T18243] team0: Port device team_slave_1 added [ 1560.870956][T18519] tmpfs: Bad value for 'mpol' [ 1561.563938][T18518] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1562.601746][T18519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2476'. [ 1562.611156][T18519] tc_dump_action: action bad kind [ 1562.759190][T18243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1562.800400][T18526] fuse: Bad value for 'fd' [ 1562.817665][T18243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.909360][T18243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.941770][T18243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.960096][T18243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.018213][T18243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.438567][ T7482] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.573332][T18243] hsr_slave_0: entered promiscuous mode [ 1563.609395][T18243] hsr_slave_1: entered promiscuous mode [ 1563.631546][T18243] debugfs: 'hsr0' already exists in 'hsr' [ 1563.643613][T18243] Cannot create hsr debugfs directory [ 1563.797631][ T7482] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.484477][ T7482] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.910433][T18558] tipc: Enabling of bearer rejected, already enabled [ 1565.991731][ T7482] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.056899][T18562] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1566.333538][T18164] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1566.391058][T18164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1566.408980][T18572] fuse: Bad value for 'fd' [ 1566.425421][T18164] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1566.459862][T18164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1567.401786][T18164] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1567.466952][T18164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1567.485558][T18164] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1567.515199][T18164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1568.281321][ T7482] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.703069][ T7482] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.776291][T18164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1572.202726][ T7482] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.450669][T18164] 8021q: adding VLAN 0 to HW filter on device team0 [ 1572.464845][T18621] fuse: Bad value for 'fd' [ 1572.563795][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.571020][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1572.701283][ T7482] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.773530][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.780800][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1572.989939][T18065] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1573.034069][T18065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1573.061280][T18065] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1573.123280][T18065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1573.602544][T18634] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1573.629720][T18634] tmpfs: Bad value for 'mpol' [ 1575.425810][T18065] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1575.459134][T18065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1575.675024][T18065] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1575.709345][T18065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1575.884384][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2504'. [ 1576.318504][ T7482] bridge_slave_1: left allmulticast mode [ 1576.374499][ T7482] bridge_slave_1: left promiscuous mode [ 1576.394215][ T7482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.437471][ T7482] bridge_slave_0: left allmulticast mode [ 1576.462413][ T7482] bridge_slave_0: left promiscuous mode [ 1576.487732][ T7482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.598523][ T7482] bridge_slave_1: left allmulticast mode [ 1576.610887][T18661] fuse: Unknown parameter '0x0000000000000004' [ 1576.618047][ T7482] bridge_slave_1: left promiscuous mode [ 1576.629916][ T7482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.661183][ T7482] bridge_slave_0: left allmulticast mode [ 1576.673381][ T7482] bridge_slave_0: left promiscuous mode [ 1576.691423][ T7482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.728382][T18677] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1578.671398][ T7482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.198344][ T7482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.228941][ T7482] bond0 (unregistering): Released all slaves [ 1579.691613][ T7482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.729351][ T7482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.758713][ T7482] bond0 (unregistering): Released all slaves [ 1582.183598][T18167] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1582.204831][T18167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1582.226610][T18167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1582.238231][T18167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1582.254212][T18167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1582.988049][T18243] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1583.032452][T18243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1583.054791][T18243] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1583.085109][T18243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1583.275098][T18243] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1583.317701][T18243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1583.355043][T18243] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1583.390775][T18243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1583.953433][T18243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.982404][T18164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1584.105814][T18243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1584.183412][T12725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.190616][T12725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.263210][T12725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.270440][T12725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.310951][ T5636] Bluetooth: hci3: command tx timeout [ 1584.555934][T18728] loop2: detected capacity change from 0 to 4096 [ 1585.735408][ T5652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1585.755371][ T5652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1585.763363][ T5652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1585.787771][ T5652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1585.800341][ T5652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1586.303760][ T5636] Bluetooth: hci6: command 0x0406 tx timeout [ 1586.390968][ T5636] Bluetooth: hci3: command tx timeout [ 1586.624353][T18777] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1586.650959][T18777] tmpfs: Bad value for 'mpol' [ 1587.831087][T18167] Bluetooth: hci0: command tx timeout [ 1588.497522][T18167] Bluetooth: hci3: command tx timeout [ 1589.960362][T18167] Bluetooth: hci0: command tx timeout [ 1590.019270][ T7482] hsr_slave_0: left promiscuous mode [ 1590.068492][ T7482] hsr_slave_1: left promiscuous mode [ 1590.112801][ T7482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1590.147045][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1590.623546][T18167] Bluetooth: hci3: command tx timeout [ 1590.703861][ T7482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1590.720055][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1590.826502][ T7482] hsr_slave_0: left promiscuous mode [ 1590.851439][ T7482] hsr_slave_1: left promiscuous mode [ 1590.897700][ T7482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1590.935922][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1590.975657][ T7482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1591.008389][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1591.113971][ T7482] veth1_macvtap: left promiscuous mode [ 1591.298574][ T7482] veth0_macvtap: left promiscuous mode [ 1591.316672][ T7482] veth1_vlan: left promiscuous mode [ 1591.334929][ T7482] veth0_vlan: left promiscuous mode [ 1591.394265][ T7482] veth1_macvtap: left promiscuous mode [ 1591.481627][ T7482] veth0_macvtap: left promiscuous mode [ 1591.531299][ T7482] veth1_vlan: left promiscuous mode [ 1591.898444][T18815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1591.898609][ T7482] veth0_vlan: left promiscuous mode [ 1591.931524][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1591.945919][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1591.958188][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1591.966299][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1591.973903][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1591.997454][ T5636] Bluetooth: hci0: command tx timeout [ 1592.982402][ T49] smc: removing ib device syz2 [ 1593.878104][T18845] overlayfs: failed to clone lowerpath [ 1594.067796][ T7482] team0 (unregistering): Port device team_slave_1 removed [ 1594.079446][T18167] Bluetooth: hci2: command tx timeout [ 1594.080400][ T5652] Bluetooth: hci0: command tx timeout [ 1594.162226][ T7482] team0 (unregistering): Port device team_slave_0 removed [ 1595.676353][ T7482] team0 (unregistering): Port device team_slave_1 removed [ 1595.739279][ T7482] team0 (unregistering): Port device team_slave_0 removed [ 1596.150579][ T5652] Bluetooth: hci2: command tx timeout [ 1596.231212][T14931] ================================================================== [ 1596.239307][T14931] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 1596.248083][T14931] Read of size 8 at addr ffff88801ff9c2f0 by task kworker/0:2/14931 [ 1596.256065][T14931] [ 1596.258393][T14931] CPU: 0 UID: 0 PID: 14931 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1596.258428][T14931] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1596.258439][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1596.258457][T14931] Workqueue: events smc_ib_port_event_work [ 1596.258498][T14931] Call Trace: [ 1596.258507][T14931] [ 1596.258518][T14931] dump_stack_lvl+0xe8/0x150 [ 1596.258554][T14931] print_address_description+0x55/0x1e0 [ 1596.258581][T14931] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1596.258613][T14931] print_report+0x58/0x70 [ 1596.258636][T14931] kasan_report+0x117/0x150 [ 1596.258662][T14931] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1596.258697][T14931] __ethtool_get_link_ksettings+0x5e/0x170 [ 1596.258729][T14931] ib_get_eth_speed+0x180/0x7f0 [ 1596.258767][T14931] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1596.258807][T14931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1596.258838][T14931] ? do_raw_spin_unlock+0xf5/0x210 [ 1596.258882][T14931] rxe_query_port+0x93/0x3d0 [ 1596.258920][T14931] ib_query_port+0x170/0x830 [ 1596.258960][T14931] smc_ib_port_event_work+0x15a/0x940 [ 1596.259006][T14931] ? process_scheduled_works+0xa70/0x1860 [ 1596.259032][T14931] ? process_scheduled_works+0xa70/0x1860 [ 1596.259060][T14931] process_scheduled_works+0xb5d/0x1860 [ 1596.259086][T14931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1596.259135][T14931] ? __pfx_process_scheduled_works+0x10/0x10 [ 1596.259165][T14931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1596.259196][T14931] ? assign_work+0x3d5/0x5e0 [ 1596.259224][T14931] worker_thread+0xa53/0xfc0 [ 1596.259251][T14931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1596.259292][T14931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1596.259329][T14931] kthread+0x389/0x470 [ 1596.259363][T14931] ? __pfx_worker_thread+0x10/0x10 [ 1596.259389][T14931] ? __pfx_kthread+0x10/0x10 [ 1596.259422][T14931] ret_from_fork+0x514/0xb70 [ 1596.259449][T14931] ? __pfx_ret_from_fork+0x10/0x10 [ 1596.259475][T14931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1596.259506][T14931] ? __switch_to+0xc79/0x1410 [ 1596.259550][T14931] ? __pfx_kthread+0x10/0x10 [ 1596.259584][T14931] ret_from_fork_asm+0x1a/0x30 [ 1596.259626][T14931] [ 1596.259636][T14931] [ 1596.471100][T14931] Allocated by task 5627: [ 1596.475422][T14931] kasan_save_track+0x3e/0x80 [ 1596.480101][T14931] __kasan_kmalloc+0x93/0xb0 [ 1596.484691][T14931] __kvmalloc_node_noprof+0x528/0x8a0 [ 1596.490065][T14931] alloc_netdev_mqs+0xa8/0x1210 [ 1596.494907][T14931] rtnl_create_link+0x31f/0xd70 [ 1596.499748][T14931] rtnl_newlink_create+0x277/0xb70 [ 1596.504858][T14931] rtnl_newlink+0x166a/0x1bb0 [ 1596.509618][T14931] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1596.514553][T14931] netlink_rcv_skb+0x232/0x4b0 [ 1596.519319][T14931] netlink_unicast+0x75c/0x8e0 [ 1596.524108][T14931] netlink_sendmsg+0x813/0xb40 [ 1596.528874][T14931] __sys_sendto+0x672/0x710 [ 1596.533374][T14931] __x64_sys_sendto+0xde/0x100 [ 1596.538134][T14931] do_syscall_64+0x174/0x580 [ 1596.542711][T14931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.548595][T14931] [ 1596.550901][T14931] Freed by task 7482: [ 1596.554860][T14931] kasan_save_track+0x3e/0x80 [ 1596.559533][T14931] kasan_save_free_info+0x46/0x50 [ 1596.564550][T14931] __kasan_slab_free+0x5c/0x80 [ 1596.569313][T14931] kfree+0x1c5/0x640 [ 1596.573202][T14931] device_release+0xc4/0x1f0 [ 1596.577784][T14931] kobject_put+0x228/0x560 [ 1596.582190][T14931] netdev_run_todo+0xc75/0xde0 [ 1596.586948][T14931] default_device_exit_batch+0x967/0x9e0 [ 1596.592578][T14931] ops_undo_list+0x52b/0x940 [ 1596.597211][T14931] cleanup_net+0x56b/0x800 [ 1596.601627][T14931] process_scheduled_works+0xb5d/0x1860 [ 1596.607160][T14931] worker_thread+0xa53/0xfc0 [ 1596.611738][T14931] kthread+0x389/0x470 [ 1596.615804][T14931] ret_from_fork+0x514/0xb70 [ 1596.620384][T14931] ret_from_fork_asm+0x1a/0x30 [ 1596.625149][T14931] [ 1596.627456][T14931] The buggy address belongs to the object at ffff88801ff9c000 [ 1596.627456][T14931] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1596.641758][T14931] The buggy address is located 752 bytes inside of [ 1596.641758][T14931] freed 4096-byte region [ffff88801ff9c000, ffff88801ff9d000) [ 1596.655629][T14931] [ 1596.657939][T14931] The buggy address belongs to the physical page: [ 1596.664332][T14931] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ff98 [ 1596.673082][T14931] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1596.681568][T14931] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1596.689099][T14931] page_type: f5(slab) [ 1596.693076][T14931] raw: 00fff00000000040 ffff88813fe33500 dead000000000100 dead000000000122 [ 1596.701648][T14931] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1596.710223][T14931] head: 00fff00000000040 ffff88813fe33500 dead000000000100 dead000000000122 [ 1596.718879][T14931] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1596.727537][T14931] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1596.736201][T14931] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1596.744852][T14931] page dumped because: kasan: bad access detected [ 1596.751246][T14931] page_owner tracks the page as allocated [ 1596.756939][T14931] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5627, tgid 5627 (syz-executor), ts 85861164681, free_ts 54052756666 [ 1596.780031][T14931] post_alloc_hook+0x22d/0x280 [ 1596.784806][T14931] get_page_from_freelist+0x2593/0x2610 [ 1596.790359][T14931] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1596.796173][T14931] allocate_slab+0x77/0x660 [ 1596.800665][T14931] refill_objects+0x339/0x3d0 [ 1596.805330][T14931] __pcs_replace_empty_main+0x321/0x720 [ 1596.810867][T14931] __kvmalloc_node_noprof+0x657/0x8a0 [ 1596.816241][T14931] alloc_netdev_mqs+0xa8/0x1210 [ 1596.821086][T14931] rtnl_create_link+0x31f/0xd70 [ 1596.825930][T14931] rtnl_newlink_create+0x277/0xb70 [ 1596.831055][T14931] rtnl_newlink+0x166a/0x1bb0 [ 1596.835732][T14931] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1596.840667][T14931] netlink_rcv_skb+0x232/0x4b0 [ 1596.845431][T14931] netlink_unicast+0x75c/0x8e0 [ 1596.850191][T14931] netlink_sendmsg+0x813/0xb40 [ 1596.854955][T14931] __sys_sendto+0x672/0x710 [ 1596.859459][T14931] page last free pid 5330 tgid 5330 stack trace: [ 1596.865765][T14931] __free_frozen_pages+0xc1c/0xd30 [ 1596.870877][T14931] __slab_free+0x274/0x2c0 [ 1596.875295][T14931] qlist_free_all+0x99/0x100 [ 1596.879881][T14931] kasan_quarantine_reduce+0x148/0x160 [ 1596.885335][T14931] __kasan_slab_alloc+0x22/0x80 [ 1596.890187][T14931] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1596.895642][T14931] do_getname+0x2e/0x250 [ 1596.899874][T14931] vfs_fstatat+0x45/0x170 [ 1596.904196][T14931] __x64_sys_newfstatat+0x151/0x200 [ 1596.909394][T14931] do_syscall_64+0x174/0x580 [ 1596.913983][T14931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.919959][T14931] [ 1596.922269][T14931] Memory state around the buggy address: [ 1596.927884][T14931] ffff88801ff9c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1596.935941][T14931] ffff88801ff9c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1596.943990][T14931] >ffff88801ff9c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1596.952035][T14931] ^ [ 1596.959737][T14931] ffff88801ff9c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1596.967784][T14931] ffff88801ff9c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1596.975827][T14931] ================================================================== [ 1598.092568][T14931] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1598.099811][T14931] CPU: 0 UID: 0 PID: 14931 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1598.110848][T14931] Tainted: [L]=SOFTLOCKUP [ 1598.115168][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1598.125227][T14931] Workqueue: events smc_ib_port_event_work [ 1598.131050][T14931] Call Trace: [ 1598.134370][T14931] [ 1598.137289][T14931] vpanic+0x56c/0xa60 [ 1598.141273][T14931] ? __pfx_vpanic+0x10/0x10 [ 1598.145774][T14931] ? __pfx___schedule+0x10/0x10 [ 1598.150634][T14931] panic+0xc5/0xd0 [ 1598.154355][T14931] ? __pfx_panic+0x10/0x10 [ 1598.158772][T14931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.164404][T14931] ? preempt_schedule_common+0x82/0xd0 [ 1598.169875][T14931] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1598.175850][T14931] check_panic_on_warn+0x89/0xb0 [ 1598.180793][T14931] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1598.186769][T14931] end_report+0x73/0x170 [ 1598.191021][T14931] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1598.197004][T14931] kasan_report+0x128/0x150 [ 1598.201508][T14931] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1598.207489][T14931] __ethtool_get_link_ksettings+0x5e/0x170 [ 1598.213294][T14931] ib_get_eth_speed+0x180/0x7f0 [ 1598.218169][T14931] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1598.223555][T14931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.229190][T14931] ? do_raw_spin_unlock+0xf5/0x210 [ 1598.234312][T14931] rxe_query_port+0x93/0x3d0 [ 1598.238907][T14931] ib_query_port+0x170/0x830 [ 1598.243504][T14931] smc_ib_port_event_work+0x15a/0x940 [ 1598.248893][T14931] ? process_scheduled_works+0xa70/0x1860 [ 1598.254621][T14931] ? process_scheduled_works+0xa70/0x1860 [ 1598.260339][T14931] process_scheduled_works+0xb5d/0x1860 [ 1598.265889][T14931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.271543][T14931] ? __pfx_process_scheduled_works+0x10/0x10 [ 1598.277520][T14931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.283160][T14931] ? assign_work+0x3d5/0x5e0 [ 1598.287760][T14931] worker_thread+0xa53/0xfc0 [ 1598.292355][T14931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.297994][T14931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.303629][T14931] kthread+0x389/0x470 [ 1598.307703][T14931] ? __pfx_worker_thread+0x10/0x10 [ 1598.312816][T14931] ? __pfx_kthread+0x10/0x10 [ 1598.317410][T14931] ret_from_fork+0x514/0xb70 [ 1598.321997][T14931] ? __pfx_ret_from_fork+0x10/0x10 [ 1598.327107][T14931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1598.332736][T14931] ? __switch_to+0xc79/0x1410 [ 1598.337427][T14931] ? __pfx_kthread+0x10/0x10 [ 1598.342016][T14931] ret_from_fork_asm+0x1a/0x30 [ 1598.346787][T14931] [ 1598.350034][T14931] Kernel Offset: disabled [ 1598.354341][T14931] Rebooting in 86400 seconds..