last executing test programs: 18m9.177093933s ago: executing program 32 (id=66): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000e000014000700450080160000000000000000000000ffff1414aa0400907800000000450000000000fffffff50000ac1414aa7f000001e8b290944c818e5a55642db32f1e2ffe3c5ee3862a"], 0xfdef) 17m39.511009419s ago: executing program 33 (id=128): syz_mount_image$minix(&(0x7f00000003c0), &(0x7f0000000040)='./bus\x00', 0x280085e, &(0x7f0000000100)=ANY=[], 0xa, 0x229, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 17m29.6625212s ago: executing program 34 (id=147): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100004000090485000189fe1f000905820200000000"], 0x0) r0 = socket(0x10, 0x80002, 0x0) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x401, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) close(0xffffffffffffffff) 14m56.068274768s ago: executing program 35 (id=387): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r3, r2, 0x0, 0x558410e9) 14m19.87895962s ago: executing program 36 (id=469): socket$inet6(0xa, 0x1, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000780)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@dmask}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800852, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 13m6.931826945s ago: executing program 37 (id=558): pselect6(0x40, &(0x7f00000001c0)={0xcd, 0x0, 0x0, 0x0, 0x20000000001, 0x4a92, 0xff, 0x2}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) 10m45.684817427s ago: executing program 38 (id=743): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x2000000000000001) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 9m38.919157494s ago: executing program 8 (id=831): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000100), 0x4000000000000b1, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/softnet_stat\x00') r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendfile(r5, r4, 0x0, 0x20000008) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x9}, 0x0, {0x2}, 0x10, 0x1}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 9m32.649281583s ago: executing program 8 (id=836): creat(0x0, 0x60) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8a80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='xfs\x00', 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x77) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) 9m27.819056795s ago: executing program 8 (id=843): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x1a0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000500)={0x3, r6, 0xffffffff, 0x0, 0xa, 0x1ff, 0x1}) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) 9m23.657632061s ago: executing program 8 (id=850): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20000080) socket$inet6(0x10, 0x2, 0x4) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) 9m20.154527968s ago: executing program 8 (id=854): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x404}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB="0000000000000000000000000000000000000000000000000000000044861e6bfb8cc9471899"], 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB]) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100010000", @ANYRES32=r6, @ANYBLOB="4c002f800c000200000000000000000008000100090000002c00038008000100000000002000038006"], 0x68}}, 0x0) 9m17.158030109s ago: executing program 8 (id=856): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = getpid() r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r4, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff8, 0x7]}) 9m0.27867325s ago: executing program 39 (id=856): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = getpid() r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r4, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff8, 0x7]}) 8m31.114473769s ago: executing program 3 (id=914): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="010000000000"], 0x28}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffffcd8b, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, 0x0) 8m28.327566126s ago: executing program 3 (id=919): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket(0x1e, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8m23.92351958s ago: executing program 3 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) accept4(r3, 0x0, 0x0, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ppoll(&(0x7f0000000100)=[{r5, 0x8284}, {0xffffffffffffffff, 0xd082}], 0x2, &(0x7f0000000140), &(0x7f00000002c0)={[0xfffffffffffff800]}, 0x8) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x70}}, 0x24040880) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, 0x0, 0x0) 8m20.649006099s ago: executing program 3 (id=928): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x2, 0x51a, &(0x7f0000000a00)="$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") ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0xfffffffa) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ppoll(&(0x7f0000000300)=[{r2, 0x80}], 0x1, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000440)={[0x9]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xfffffffffffffffc, r3}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0xa, &(0x7f00000002c0)=ANY=[], 0x0, 0x19e, &(0x7f0000000000)="$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") ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) 8m14.709795229s ago: executing program 3 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) process_vm_writev(r0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/244, 0xf4}], 0x1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000540)=""/68, 0x44}, {&(0x7f00000005c0)=""/128, 0x80}, {&(0x7f0000000780)=""/195, 0xc3}], 0x4, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000700)={0x2000c000, 0x0, 0x0, &(0x7f0000000280), {0x10}, &(0x7f0000000340)=""/37, 0x25, 0x0, &(0x7f00000003c0)}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r4 = socket(0x18, 0x0, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'gre0\x00'}}, 0x1e) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000640)) sendfile(r4, r3, 0x0, 0x8) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000300)={@private1={0xfc, 0x1, '\x00', 0x1}}) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000000)=[{0x0}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 8m9.07665762s ago: executing program 3 (id=939): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000007a40e02940bdd84d71bc6b10ba70591fac3a3fc2ddb826e72718ecfd110f944d087e30a38f6ef6db55d9e1e1fcba0da7a503f6fc1314eac5ba360102425cf94401d413d174bd03136aee48af5878a91f95ea1159370fc7b0d2e748e5f90332e21095106709ff189a6ad32492cc154ea081448aab280437426d9f709d35815844f5b3027b6b690c3db8ef03f7f8ab221a0ebe7ed777c570d92f59c8982cbd73bc1490a463c64b937becf01cf4c03b", @ANYRES32=0x0, @ANYBLOB="019800000000"], 0x20}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) socket$packet(0x11, 0x2, 0x300) inotify_init1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getscheduler(0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x207279, 0x1000, 0x0, 0x38e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x21, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)="7ec162f4a94d50cb6d824b497d9ec50e4f12dbf1e50e15f86a8fd38c851bc450649e8146c9c792d95fdc5c41e3d81c74c7b7608b5a12d29c2172221cc2ce3382f8afe7bddcf49d81a9b446a910ad7dbca67e11665243e67663bb6b07c3ad31109b12519f29333073a7ff8f47e72283de66831f9db29e2824f1011f382f753f55fbb71b9a646a6fd010856de78416eec22d31982268e51aa0ea62f6e2fc890db2a1d45fc2", 0xa4, 0x58, 0x1}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00'}, 0x2c) 7m52.965707595s ago: executing program 40 (id=939): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000007a40e02940bdd84d71bc6b10ba70591fac3a3fc2ddb826e72718ecfd110f944d087e30a38f6ef6db55d9e1e1fcba0da7a503f6fc1314eac5ba360102425cf94401d413d174bd03136aee48af5878a91f95ea1159370fc7b0d2e748e5f90332e21095106709ff189a6ad32492cc154ea081448aab280437426d9f709d35815844f5b3027b6b690c3db8ef03f7f8ab221a0ebe7ed777c570d92f59c8982cbd73bc1490a463c64b937becf01cf4c03b", @ANYRES32=0x0, @ANYBLOB="019800000000"], 0x20}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) socket$packet(0x11, 0x2, 0x300) inotify_init1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getscheduler(0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x207279, 0x1000, 0x0, 0x38e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x21, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)="7ec162f4a94d50cb6d824b497d9ec50e4f12dbf1e50e15f86a8fd38c851bc450649e8146c9c792d95fdc5c41e3d81c74c7b7608b5a12d29c2172221cc2ce3382f8afe7bddcf49d81a9b446a910ad7dbca67e11665243e67663bb6b07c3ad31109b12519f29333073a7ff8f47e72283de66831f9db29e2824f1011f382f753f55fbb71b9a646a6fd010856de78416eec22d31982268e51aa0ea62f6e2fc890db2a1d45fc2", 0xa4, 0x58, 0x1}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00'}, 0x2c) 7m46.544044825s ago: executing program 5 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900), 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x77, @time={0x20000040, 0x5}, 0x0, {}, 0x0, 0x2}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003b80)=@newtaction={0x1d6c, 0x5a, 0x301, 0x40000, 0x0, {0x2}, [{0x1d58, 0x1, [@m_police={0x30, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x1d24, 0x1, 0x0, 0x0, {{0xa}, {0x1cf8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x18, 0xc8, 0x0, 0x8, 0x284c}, 0xa0, 0x40}, [{0x6, 0x3, 0x1ff, 0xc35, 0x9}, {0x2, 0x9, 0x1, 0x5, 0x8, 0x1}, {0x2934e327, 0x2000000, 0x1, 0x2, 0x4}, {0x5, 0x9, 0x5, 0x2, 0x7, 0xffffcb01}, {0xd32, 0x7f, 0x1ac, 0x3, 0x96e26d6f, 0x5}, {0x4, 0x2, 0x0, 0x401, 0xa268, 0xfffff800}, {0x4, 0x1, 0xffffffc4, 0x5, 0x7, 0x800}, {0x1, 0x7, 0x7, 0x1, 0x7fffffff, 0x7}, {0xea94, 0x4ee28c1d, 0x1, 0x3, 0x101, 0x10000}, {0xe, 0x800, 0x7f, 0x80000000, 0x4, 0x5}, {0xfffffffa, 0x6, 0x8, 0x6, 0x56b}, {0x1ff, 0xff, 0x5, 0x9, 0xca3, 0x100000}, {0x0, 0x2, 0x8, 0xdb90, 0x1, 0xfffff000}, {0x6, 0x1, 0x33, 0x10001, 0x7, 0x3}, {0x5, 0x1, 0xa, 0x81, 0x10000, 0x7}, {0xee, 0x8, 0xc, 0x1, 0x9, 0x8}, {0x13d, 0xc675, 0x101, 0x8}, {0x8, 0x9, 0x7, 0x5, 0x4, 0x641}, {0x3, 0x2, 0x7, 0xfffffffd, 0x95, 0x3}, {0x9, 0x7ff, 0x2, 0xff, 0xa, 0x679}, {0xd, 0x8, 0x9ff3, 0xd, 0x0, 0x7}, {0x6, 0xe95e, 0xdc, 0x1, 0x3, 0x9}, {0x8, 0x7, 0x8, 0x3, 0x9, 0x4}, {0xfffffff8, 0x101, 0x8, 0x70000000, 0x3, 0x4}, {0x4, 0xdaf, 0x5, 0x8, 0x363, 0x3}, {0xfa84, 0x400, 0xffffffff, 0x3, 0x8, 0xd}, {0x200, 0xffffff46, 0x4, 0x6, 0x400, 0x4}, {0xfffffff5, 0x9, 0x3, 0x9, 0x0, 0x3}, {0x1, 0x5, 0x5, 0x6, 0x4, 0xecf}, {0x10001, 0xd0, 0xf, 0x0, 0x7, 0x1}, {0x3, 0x40, 0x5e, 0x5, 0xfff, 0xd36}, {0x5, 0x3, 0x5, 0xf35, 0x3, 0x2}, {0xc, 0x4, 0x3, 0x6, 0x8, 0x1}, {0x8, 0x6, 0x9, 0x944, 0x6, 0x8000}, {0x4, 0x4, 0x2c212e7f, 0x5bc6, 0x7f, 0x8000}, {0x6, 0x8ca, 0xfffffffa, 0x9, 0xa8a, 0x2}, {0x10001, 0x8, 0xff, 0x709c, 0x2, 0x8}, {0x4, 0x635ec18c, 0x0, 0x0, 0x5, 0x7f}, {0x4, 0x2, 0xffffffff, 0x2, 0x6, 0x9}, {0x80000001, 0xfbe, 0x5, 0x1, 0x3, 0x6}, {0x6, 0x3bb0, 0x80, 0x35e5, 0xff800000, 0x3}, {0x8001, 0x0, 0xfffffffe, 0x10001, 0xf, 0x9000000}, {0x7, 0xfffeffff, 0x200, 0x3, 0x8, 0x8}, {0x6, 0x1, 0x4, 0x9, 0x9, 0x6}, {0x80000000, 0x84, 0x3, 0x80, 0x1}, {0x401, 0x9, 0xfffff88f, 0x6, 0xfe000000}, {0x7fff, 0x3, 0xb56, 0x6, 0x2, 0x101}, {0x7fffffff, 0xfd, 0x1ff, 0x2000000, 0x73, 0xfffffff2}, {0x1, 0x1, 0x0, 0x3, 0x80, 0x8000}, {0x8, 0x7, 0x3, 0x6, 0x8, 0x2}, {0xd0000000, 0x81, 0x5, 0x9, 0xc05, 0x4}, {0x20, 0xbba, 0xf66, 0x80000000, 0x91, 0x3}, {0x51, 0x3ff, 0x7ff, 0x10001, 0x7, 0x6}, {0x0, 0xfd, 0x7fffffff, 0x100, 0x4, 0x9}, {0x9, 0x1d, 0x5, 0x6, 0x9, 0x1}, {0xfffffffa, 0x9bde, 0x4, 0x978, 0x26, 0x5}, {0x4, 0xf, 0x2, 0x8, 0x6, 0xd4}, {0xd8, 0x5, 0x2, 0x8, 0x200, 0x80}, {0x5, 0x2, 0xb, 0x0, 0x7, 0x1000}, {0x6, 0x200, 0x7fff, 0x7f, 0x96e, 0x8}, {0x7, 0x3, 0x2, 0x5, 0x6000000, 0x9dea}, {0x400, 0x3466, 0x46, 0x2, 0x4, 0x9ba}, {0xb5b2, 0x1, 0x432, 0x4, 0xe5c2, 0xfc0}, {0x9, 0x5, 0x8, 0xb, 0x10000, 0x4}, {0x9a4, 0x1, 0x3, 0x4, 0x3, 0x8}, {0xfffffffe, 0x8, 0x80000001, 0x1ff, 0xe, 0x8b2}, {0x3, 0x8001, 0x1, 0x1, 0x0, 0x7}, {0x1ff, 0x80000000, 0x1, 0x0, 0x9, 0x7}, {0x0, 0x5369, 0x6, 0x4, 0x4, 0xfffffffd}, {0x7, 0x3, 0x35aed990, 0x5, 0x1, 0x58c}, {0x9, 0x6, 0x2, 0x8, 0x2, 0x9}, {0x8, 0x4, 0xfffffffe, 0x8000, 0x3ff, 0x10000}, {0x0, 0x7, 0x3, 0x9, 0x2d94, 0x401}, {0xffffc898, 0x88d, 0x5bf, 0x3, 0x0, 0xb}, {0x8, 0x7, 0x3, 0x9, 0x6, 0xfffffffb}, {0x55, 0x6f, 0x1, 0x7, 0xaae, 0x7}, {0x0, 0xe9, 0x0, 0x9, 0x3, 0x2b8db5e6}, {0x8, 0x3, 0x9, 0x8, 0x0, 0xb}, {0x4, 0x4a6, 0x3, 0x9, 0x9, 0xa}, {0xfd0, 0x46, 0x0, 0x2, 0x1, 0xb60}, {0x80000000, 0xc45, 0xfffffe01, 0x101, 0x0, 0x7de8}, {0x4, 0x2, 0x9, 0x5, 0x9, 0x5}, {0x6, 0x4, 0x7fffffff, 0x6, 0x1}, {0xfffffff7, 0x9, 0xb18, 0x98ce, 0x9a, 0x7}, {0x3, 0x7, 0x8, 0x7, 0xe8d0, 0x2}, {0x9, 0x4, 0x5, 0x10000, 0x7f, 0xeb}, {0x7, 0x3ff, 0x80000001, 0x7, 0x19, 0xfffff001}, {0x4, 0xd, 0x1, 0x0, 0x1}, {0xb31, 0x4, 0x9, 0x101, 0x40, 0x10001}, {0x1000, 0x3, 0x0, 0x7, 0x3, 0xe4c}, {0x0, 0x8000, 0x0, 0xf, 0x6, 0x8000}, {0x8, 0xff, 0x10001, 0x200, 0x3a3, 0x14}, {0x5, 0xa, 0x6, 0x6, 0x0, 0x9}, {0x0, 0xe, 0x1, 0x6f, 0x4d0d, 0x8}, {0x1, 0x6, 0xfffffffc, 0x4, 0xeb, 0xffff}, {0x5, 0xd, 0x689, 0xd, 0x8, 0x9}, {0x2, 0x2, 0x332, 0x40, 0xd, 0x2}, {0x6, 0x1, 0x2, 0x400, 0x3ff, 0x5}, {0x5, 0x4, 0x3ff, 0xff, 0xc, 0x8}, {0x4, 0x7d, 0x6, 0x7ff, 0x4, 0x6}, {0x3, 0xfb38, 0x314, 0x3, 0x7, 0xc1}, {0x2, 0x653b, 0x3, 0x8a4, 0x8001, 0x7f}, {0x8, 0x7e, 0x9, 0x4, 0x5, 0x672}, {0x7f, 0x9, 0x9, 0xc71, 0xc3d8, 0x1800000}, {0x7, 0x80, 0x9, 0x0, 0xe42, 0x7fff}, {0xff, 0x80000001, 0x1, 0x5, 0xbb, 0x1}, {0x1, 0x1, 0x8, 0x4, 0x6, 0xfffffff9}, {0x7, 0x5683b4ca, 0x7f, 0x7, 0x6, 0x4}, {0x4, 0x0, 0x101, 0x6, 0x5, 0x5}, {0xd86, 0x5, 0x6, 0x4, 0x5, 0xa}, {0x7, 0x5, 0x8989, 0x6, 0x5, 0x1}, {0x4, 0x2, 0x5, 0xa9, 0xce1, 0x8}, {0x40, 0x1, 0x9d3d, 0x76ef, 0x6, 0x7}, {0x4, 0x10001, 0x2, 0x3, 0x1a5, 0x4}, {0x10, 0x7, 0x3, 0xc0, 0x2, 0x7}, {0x0, 0x3, 0x9, 0xb0d2, 0x2, 0x9}, {0x1, 0xff, 0x7fffffff, 0x401, 0x3590, 0x2}, {0x4, 0x8, 0x7, 0x1, 0xf5d8, 0x6}, {0x6ca, 0x0, 0x7de, 0x10, 0xbc, 0x1}, {0x0, 0x200, 0x4c7a85b9, 0x1, 0x4, 0x4}, {0xffffffff, 0x2, 0x4, 0x4, 0x80000000, 0xa64a}, {0x6, 0x9, 0x0, 0xd2d, 0x7f, 0x7}, {0x3, 0xbb, 0x2, 0x0, 0x9, 0x6d}, {0x1, 0x228, 0xb6a0, 0x8, 0xfa3, 0x100}, {0x6, 0x4, 0x6, 0xffffff60, 0x5, 0x5}, {0xfffffffc, 0xa, 0x5c70, 0x6, 0x100}, {0xd69, 0x1, 0x5, 0x7fff, 0x7, 0x7}, {0xe42, 0x8, 0x1, 0x1, 0x2, 0x4}], [{0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x4}, {0x5}, {0x7}, {0x1}, {}, {0x3}, {0x5}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x2}, {0x1}, {0xa2928f09525ec74e, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xff044e0d96002fd0}, {0x2}, {0x5}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {}, {0x5}, {0x1}, {0x2, 0x1}, {}, {}, {0x5}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x20db920e3d9c9d2a}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x4, 0x0, 0x10000000, 0x4, 0x9}, 0x0, 0x0, [{0x80000001, 0x2, 0x6, 0x10, 0x616d81af, 0x3}, {0x3b6, 0xfffffffd, 0xfffffffa, 0x2, 0x200, 0x6}, {0x7, 0x28b3, 0x7, 0x80000000, 0xb5, 0x401}, {0x3ff, 0xcfc, 0x0, 0x6, 0x7, 0x1}, {0x800, 0x17, 0x3, 0x7, 0x6, 0x4}]}, [{0x2, 0xff, 0x6, 0xfffffffa, 0x1, 0x166c83a3}, {0x3, 0x4, 0x5ddebc1b, 0x6, 0x5, 0x4}, {0x6, 0x6, 0x1, 0x1, 0x7, 0x1}, {0x6, 0xfffffff3, 0xffff8001, 0xffff, 0x3, 0x2}, {0x3, 0xfffffffb, 0x8, 0x2, 0x6, 0x3}, {0x7, 0x1169bbca, 0xcfc5, 0xffffffff, 0x3, 0x7ff}, {0x1, 0x2, 0x3e9, 0x19e, 0x80000000, 0x3d11}, {0x6, 0xf, 0x401, 0x3, 0x4, 0x7}, {0x1ff, 0xde25, 0x10000, 0x800, 0x8, 0xff}, {0x1, 0x200, 0x10000, 0x507, 0x6a8, 0x2}, {0x495, 0x8, 0x101, 0x80000001, 0x0, 0x9}, {0x1, 0x33, 0x1, 0x40, 0x9, 0x3e}, {0x0, 0x1, 0x1, 0x5fe, 0x6, 0x6}, {0x4, 0xfffffffc, 0x2, 0x7674, 0x2f4313fe, 0xffff}, {0x101, 0x7, 0x4d, 0x2, 0x1, 0x6}, {0x3, 0x3, 0x0, 0x3, 0x30000, 0x6}, {0x8, 0xcb01, 0x6, 0x0, 0x5}, {0x3a, 0xd4, 0x6, 0xfff, 0x1400000, 0x2}, {0xdbec, 0x0, 0x8, 0x3, 0x2, 0x3b400}, {0x4, 0x5, 0x1, 0x6, 0x1, 0xffffffff}, {0x3, 0x800, 0x1ff, 0x3d0, 0x1, 0x6a}, {0x9553, 0x10, 0x5, 0x7fffffff, 0x9, 0xff}, {0x9, 0x4d0e, 0x4, 0x9, 0x1ff}, {0x1, 0x7fff, 0x4, 0x3cbe, 0x6, 0xa0000000}, {0x3, 0x1, 0x80, 0x6, 0x9, 0x1}, {0x7, 0x200, 0x401, 0x2e1, 0x8, 0x401}, {0x0, 0x0, 0x1000, 0xfffffffb, 0x4, 0x39}, {0x0, 0x6, 0x7, 0x80, 0x9d, 0x3}, {0x3, 0x7fffffff, 0x8, 0x0, 0x7f, 0xdb}, {0x0, 0x8, 0x1, 0x5, 0xd0f9, 0xe0000000}, {0x2, 0x6, 0xfb3, 0x4, 0x7, 0x80000001}, {0x7, 0x28000000, 0x7fffffff, 0xe2cf, 0x36987846, 0x7}, {0x3, 0x3, 0xae, 0x8}, {0x7, 0xad80, 0xffc0, 0x3, 0x6, 0x5}, {0x5, 0x200087, 0x9, 0x5, 0x2, 0x3}, {0x1e76, 0xa, 0x7490d6fb, 0x7, 0x4, 0x1ff}, {0xd, 0x8, 0x9, 0x9, 0x3, 0x3ff}, {0x5, 0x4, 0x401, 0x4, 0x8, 0x6}, {0x1000, 0x9, 0x100, 0x8, 0x7, 0x1}, {0x5c1, 0x5, 0x9, 0xa62c, 0x1, 0x401}, {0x290f, 0x6, 0x7, 0x3, 0x8, 0x1}, {0x547, 0x5a, 0x5, 0x4, 0x0, 0x7c}, {0x8, 0x7, 0x6, 0x8, 0x0, 0x5de}, {0xc, 0xdb7, 0x8, 0x8a1, 0x80000000, 0x6}, {0x8, 0x1, 0x10000, 0x2, 0x800, 0x9}, {0x45f, 0x2, 0x8001, 0x7f, 0x6, 0xcf}, {0x9, 0x3, 0x3aa, 0x7fffffff, 0x3ff, 0x7}, {0x1, 0x29e, 0x5, 0xd9a, 0x3, 0x80000000}, {0x7, 0x9, 0x7, 0x3ff, 0xfffffffb, 0x6}, {0x6, 0x1, 0x3, 0x84, 0x3, 0x9}, {0x7, 0xff, 0x4, 0x800, 0x4, 0xf59}, {0xc, 0x2, 0x2, 0xc, 0x4, 0x8}, {0x5, 0x4, 0xff, 0x0, 0x1, 0xcea8}, {0x8, 0xffff, 0x5, 0x3, 0xff, 0x3}, {0x1265, 0x1, 0x4, 0x10d9, 0x4, 0x4}, {0x2, 0x10000, 0x8feb, 0x9, 0x4, 0x2}, {0x8, 0xabe, 0xc694, 0x42b, 0x600, 0xa}, {0x6, 0x4, 0xfffffffa, 0x8, 0x1e30b2a3, 0x10000}, {0x1, 0xfc, 0xfff, 0xae20, 0x7, 0x4}, {0x16, 0xfff, 0x9, 0xcae, 0x0, 0x2a3d}, {0x3efa, 0x7, 0x2, 0x400, 0xea, 0x800}, {0x9, 0x8, 0x9, 0x1, 0x3, 0x4}, {0xb5, 0x3317, 0x6, 0x3, 0x2, 0x4f}, {0x6, 0x6, 0x6, 0x1, 0x1, 0xc}, {0x2, 0x50000000, 0x9, 0x3b, 0x2, 0x9c3}, {0x3, 0x4, 0xc, 0xffffffff, 0x6, 0x3}, {0x2, 0xe4, 0xbeb7, 0x9, 0x1ff, 0x8001}, {0x0, 0x6, 0x5, 0x1, 0x8, 0x2}, {0x101, 0x6, 0x2, 0x4, 0x7, 0x400}, {0xfffffffc, 0x25a0dd83, 0x7, 0x5, 0x100, 0x4}, {0x80000000, 0xffffffdb, 0xa9, 0x7, 0x87ab, 0x9}, {0x2, 0xff, 0x3, 0xef2, 0x2, 0x285}, {0x2ec54b4e, 0xa8cc, 0x25, 0x2, 0x852e, 0x3}, {0x7, 0xfff, 0x1f, 0xcc73, 0x3, 0x4}, {0xfffffff8, 0x9, 0xfffffff9, 0x1, 0x721, 0x7789}, {0x9, 0x7d37, 0x1, 0x10001, 0x8, 0xc4}, {0x5, 0x8, 0x3, 0x9, 0xffff7430, 0x7fff}, {0xd, 0x5, 0x4, 0xffff0000, 0xfff, 0xfea}, {0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x7}, {0x20, 0x2, 0x7, 0x9, 0x2, 0x5c8}, {0x1, 0xf, 0xfff, 0xfffffffb, 0x8000, 0xfffffff8}, {0xca3, 0x81, 0x7, 0x401, 0x10001, 0x80}, {0x7, 0x6, 0x5, 0xafe, 0x1, 0x434}, {0x1, 0x1f, 0x7, 0x9, 0x7, 0x5}, {0x2, 0xffff8001, 0xfff, 0x0, 0x4, 0x10}, {0xf, 0x7ff, 0x2d, 0x3, 0x485, 0x3}, {0x401, 0x2, 0x9, 0x8, 0x2, 0x80000001}, {0x401, 0x0, 0x4, 0x86, 0x2, 0x8}, {0x7, 0x7, 0x4, 0xa, 0x5, 0x4}, {0x3, 0x64, 0xa5ea627, 0xfffffff5, 0x4, 0xdca5}, {0x6, 0x6, 0xfffffff8, 0x1, 0x6, 0x1}, {0x2, 0x6, 0x3, 0x9, 0x200, 0x9}, {0x3, 0x0, 0x9, 0x3, 0x2446ef08, 0xb5b}, {0x8, 0x800, 0x4, 0x8, 0x9, 0x5}, {0x3c, 0xfffffffb, 0x127, 0x6, 0x2, 0x8}, {0x6, 0x715, 0x24, 0xffffffff, 0xffff8000}, {0x80000000, 0xffffffff, 0x2, 0xfffff801, 0x5, 0xfffffc01}, {0x10000, 0xc407, 0x10, 0xf, 0x3, 0x6}, {0x7, 0x80000000, 0x4, 0x6, 0x7}, {0x5, 0x91, 0xd34, 0x5, 0x1, 0xd8c}, {0x7, 0xfff, 0x100, 0x7fff, 0x3319, 0x7}, {0x2, 0x3, 0x2, 0x146a, 0x8, 0x20000}, {0x5, 0x400000, 0x81, 0x5, 0x40, 0x1}, {0x200, 0xaf4b, 0x8, 0x1c5, 0x48c8, 0x5}, {0xffffffff, 0x1, 0x80000000, 0x8, 0x4}, {0xfffffff7, 0x69, 0x81, 0x10001, 0x1000, 0x5}, {0x0, 0x5, 0x7, 0x3, 0x6, 0x4}, {0x7, 0x9, 0x4, 0xf, 0xfffff5e9, 0x9}, {0x1, 0x3, 0x8, 0x7f, 0x4, 0xfff}, {0x4, 0x4, 0xe, 0x4, 0x1, 0x13}, {0x5, 0x8, 0x46b, 0xffff, 0x9, 0x2}, {0x93, 0xfffffffa, 0x3, 0x8, 0x0, 0x1}, {0x7, 0x7, 0x80000001, 0x8, 0x9e5f, 0x4}, {0x8, 0x2, 0x4, 0xfffffffa, 0x7f, 0x14}, {0x10000, 0x9, 0x1, 0x3, 0x28, 0x5}, {0x7, 0x80, 0xa, 0x7, 0x5, 0xc}, {0x5, 0x3, 0xfffffff1, 0x8, 0x3, 0xf9}, {0x6, 0x9, 0x6, 0x95, 0x2, 0xaa0}, {0xfffffffc, 0xe626, 0x4, 0x1, 0xfffffffa, 0x9}, {0x5, 0x7, 0xffff760b, 0x6, 0x5, 0x6}, {0x363, 0x5, 0x800000, 0x7, 0x60, 0x8000}, {0x13, 0x200, 0x3, 0x87dc, 0x9}, {0x6, 0xd, 0x9, 0x419cf887, 0xffffffff, 0x1ff}, {0x0, 0x1, 0x0, 0x8001, 0x5, 0x77}, {0x6, 0x7ff, 0x8, 0xe, 0x8, 0xaf}, {0xc, 0xffffffff, 0x5, 0x5, 0x5, 0xfff}, {0x3, 0x40, 0x4, 0x5, 0x1000, 0x3}, {0x1ff, 0x53, 0x4, 0x9, 0x1, 0x5}], [{0x0, 0x1}, {0x2}, {0x3}, {}, {0x1, 0xbb249559ed15591b}, {0x3}, {0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {}, {}, {0x4}, {0x2}, {0x2}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x4}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x5}, {}, {0x4}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x7}, {0x6}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x2}, {}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x3}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x3c, 0x5, 0x0, 0x1, [{0x4}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x1d6c}, 0x1, 0x0, 0x0, 0x4020}, 0x2004e080) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4, 0xc, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xe}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x7d, &(0x7f0000000180)={0x0, 0xf9, 0x20}, &(0x7f0000000500)=0xc) syz_usb_connect(0x2, 0x47, 0x0, 0x0) 7m41.970512202s ago: executing program 5 (id=973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) accept4(r3, 0x0, 0x0, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ppoll(&(0x7f0000000100)=[{r5, 0x8284}, {0xffffffffffffffff, 0xd082}], 0x2, &(0x7f0000000140), &(0x7f00000002c0)={[0xfffffffffffff800]}, 0x8) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x70}}, 0x24040880) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, 0x0, 0x0) 7m40.129288356s ago: executing program 5 (id=974): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=""/4071, 0x0, 0xfe7, 0x2, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000080)={0xb, 0x29, 0x2, {0x100006}}, 0xb) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f0000000ac0)={'#! ', './file0'}, 0xb) close(r5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7m38.379497479s ago: executing program 5 (id=976): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@data_err_abort}, {@errors_remount}, {@quota}, {@noblock_validity}, {@usrquota}, {@nomblk_io_submit}, {@noload}, {@nodioread_nolock}]}, 0x1, 0x530, &(0x7f0000000b40)="$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") syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000001a00)=ANY=[], 0x1, 0x1e1, &(0x7f0000000500)="$eJxiGAWjYBSMWPDo4dcHvU4WIToMDAw8DCoM7FDxF8wINUxI6u/MLNWeaus6Z9PtpUfy+Gp3oZvHTqL9IGsOODIzlDBwQkX+/0eWVwGTjCwgV6hAxUIZmBg0sZiVwMDEEAZlpzIwMkRC2VlI7HyYNTmpesn5OSlpmTmpBiDCEEQYgQhjZDNZGBgY3jYyMqQwMDBwgF33/z8jknxxZVV2Yk5OahE6g/U/zB4MKVIZ+MIP7D5HJgZbeOj9/w+Kr4iO5kbGBoQ6A6TwM2RgYjCEso0ZGBmCoWwLBnYGPT09RJAg+V+KBWE+MzH+pxqDmXztgrrk6AIlNtp5hwIGJzUS0ygjlRFdBJSh4SJib3edxtT1lHLbGemWZdAY4IKLgYEBQ+oSF2Ums0F9hFUNonwCZSh1pPKJhYEFXn7ol+QW6BdXVulm5iamp6an5hkZGZsZmBgYmBrpgwsiCIlR7v2Bl38c4PKJC8l8VhxlJRsjG0NFYklJkWEFA0NJkSGcbwQhkUrc4G35b8B6mMDlHxODhjLEDFAkgr2No6JjhGImMA1iaTDjcM4oGAWjYBSMglEwCkbBKBgFo2AUjIJRMApGwSgYBaNgFJAI5BkYwaOg0Imq/ziAUQBYNSAAAP//kYtfpQ==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000000180)=r1, 0x12) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa08, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000480)={0x0, 0x6e6, 0x20000, 0x0, 0x307}, 0x0, &(0x7f0000000000)) 7m34.790615144s ago: executing program 5 (id=980): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket(0x1e, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) 7m31.960151402s ago: executing program 5 (id=982): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0) clock_gettime(0x0, &(0x7f000000a200)) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000080)={'ip6erspan0\x00', {0x2, 0x0, @loopback}}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000000)="f2435f0100088000000600000000d68b443980a3b4c109c4b43d487eee2aebaa90495ec6b1f5df17344b1f67011186fb1d8ccc6a4544d944b5f125c06fd6932d7a090000001c000000a8", 0x4a, 0x4048040, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB="0000000000001e0008000a00", @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 7m16.089537096s ago: executing program 41 (id=982): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0) clock_gettime(0x0, &(0x7f000000a200)) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000080)={'ip6erspan0\x00', {0x2, 0x0, @loopback}}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000000)="f2435f0100088000000600000000d68b443980a3b4c109c4b43d487eee2aebaa90495ec6b1f5df17344b1f67011186fb1d8ccc6a4544d944b5f125c06fd6932d7a090000001c000000a8", 0x4a, 0x4048040, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB="0000000000001e0008000a00", @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 6m34.375766061s ago: executing program 6 (id=872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 6m30.631835226s ago: executing program 6 (id=1035): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp], 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08007b0c"], 0xb) 6m29.09837698s ago: executing program 6 (id=1041): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000700)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x200, 0x38, &(0x7f00000006c0)=""/56, 0x40f00, 0x21, '\x00', r1, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x4, 0x5, 0x3, 0x5}, 0x10, 0x1be4c, r0, 0x9, &(0x7f0000000b00)=[0xffffffffffffffff], &(0x7f0000000b40)=[{0x4, 0x3, 0x5, 0x6}, {0x1, 0x1, 0x1, 0x6}, {0x4, 0x1, 0x10, 0x3}, {0x2, 0x2, 0x6, 0x5}, {0x1, 0x3, 0x4, 0x9}, {0x4, 0x4, 0x10, 0x5}, {0x3, 0x3, 0xa, 0x1}, {0x5, 0x2, 0x6, 0x8}, {0x0, 0x2, 0x8, 0xc}], 0x10, 0x4, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_tcp(0x2, 0x1, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x1000000) syz_open_dev$cec(0x0, 0x0, 0x80) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_open_dev$cec(&(0x7f00000004c0), 0x0, 0x80100) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r5, &(0x7f0000000740)=[{&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f00000004c0)=""/88, 0x58}, {&(0x7f0000000540)=""/215, 0xd7}], 0x4, 0x80000001, 0x3f7a) 6m27.816363222s ago: executing program 6 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0/file0/file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000018, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x46ea380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) open(&(0x7f0000000240)='./file0/file0/file0/file0/file0\x00', 0x400141042, 0x10) read$FUSE(r3, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, r5, {0x7, 0x24}}, 0x50) 6m23.067665967s ago: executing program 6 (id=1048): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) io_setup(0x200, 0x0) r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000600)={[{@clear_cache}, {@user_subvol_rm}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x67, 0x37, 0x2d, 0x32, 0x36, 0x32, 0x36, 0x2d, 0x37]}}, {@nodatacow}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x0, {0x2b, 0x0, 0x56, 0x0, 0x40}}) socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) 6m16.103821061s ago: executing program 6 (id=1057): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x548}, 0x1, 0x0, 0x0, 0x40850}, 0xc814) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x50) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r7) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="0000ec3f0000000000004eb30000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4050) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r5, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x3000000}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) socket$nl_xfrm(0x10, 0x3, 0x6) 6m3.912562199s ago: executing program 9 (id=1071): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="13f7ffff0f87000002f400960d27c2c12d000300000008001c0000dd2800", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000346a7db9aa3dfe25b0b95f686f4c2233e016c15daef5d89db983de42739001caa6c782f193a8a165c610ea710b6b3d13ea30ba50f44f335de777f4a70bbf74d231b42d13e50a4ce5148fcbd0427474d95c85e7b5a6c9f31fa3c1b389726edc94e662bae7f5318e9c67a4b783a0b22cb198a015aef0cfb52eb01dd840647c158b6885e3fba3a3d51d51e5b47d27326fb1be58472c7f4a84", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x13, 0x0, 0x3, &(0x7f0000000380), 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0), 0x0}, 0x40) r4 = signalfd(r1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB, @ANYRES64=r3], 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x800004}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xe, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@generic={0x7, 0x6, 0x5, 0x5, 0xe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x3a}], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xe1, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r6, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 6m1.644069159s ago: executing program 9 (id=1077): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b485e8a15ada47ea846006a505870e976e7d8c8ac6d345e46ce75b805866e8003902a68a4cbf08a1f780e1df8dbdbc570122421f825e8afb6b9f81b6dbfd9de4ee3c575765c55bb1f645a96b7cc35c951513514bb257c4884f1d28d581bf132d14442d462e295697c59cc5dcb71e5ccc3af53e9d6ca044ebab42e9dbbe7489e2830de7506661aaf29ed97656689de0b0f18ab0728d8244a4aa8ca6f6dceb0a6adc9c78421a68735f5993c885e8", @ANYBLOB="010400000000000000", @ANYRES32=0x0, @ANYBLOB="04001900080015000000"], 0x28}}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) get_robust_list(0x0, 0x0, &(0x7f0000001500)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000500), 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000280), 0xac, 0x400000) mkdir(&(0x7f0000000400)='./file1\x00', 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000005c0)='./bus\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x0, 0x10}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 5m57.818145137s ago: executing program 42 (id=1057): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x548}, 0x1, 0x0, 0x0, 0x40850}, 0xc814) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x50) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r7) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="0000ec3f0000000000004eb30000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4050) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r5, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x3000000}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) socket$nl_xfrm(0x10, 0x3, 0x6) 5m57.601732917s ago: executing program 9 (id=1083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = dup(r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) sendfile(r4, r2, 0x0, 0x89ffc) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r6, &(0x7f0000000140)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x430601, 0x10) 5m53.396201204s ago: executing program 9 (id=1086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 5m51.594653686s ago: executing program 9 (id=1090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5m50.449048752s ago: executing program 9 (id=1092): pselect6(0x40, &(0x7f00000001c0)={0xcd, 0x0, 0x0, 0x0, 0x20000000001, 0x4a92, 0xff, 0x2}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) close(r4) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioperm(0x0, 0x444, 0xb1f) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 5m34.348877632s ago: executing program 43 (id=1092): pselect6(0x40, &(0x7f00000001c0)={0xcd, 0x0, 0x0, 0x0, 0x20000000001, 0x4a92, 0xff, 0x2}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) close(r4) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioperm(0x0, 0x444, 0xb1f) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 4m10.835124393s ago: executing program 2 (id=1330): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40045b17, 0x0) 4m5.745311185s ago: executing program 2 (id=1345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd"], 0x66) 3m59.992616467s ago: executing program 2 (id=1355): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b485e8a15ada47ea846006a505870e976e7d8c8ac6d345e46ce75b805866e8003902a68a4cbf08a1f780e1df8dbdbc570122421f825e8afb6b9f81b6dbfd9de4ee3c575765c55bb1f645a96b7cc35c951513514bb257c4884f1d28d581bf132d14442d462e295697c59cc5dcb71e5ccc3af53e9d6ca044ebab42e9dbbe7489e2830de7506661aaf29ed97656689de0b0f18ab0728d8244a4aa8ca6f6dceb0a6adc9c78421a68735f5993c885e8", @ANYBLOB="010400000000000000", @ANYRES32=0x0, @ANYBLOB="04001900080015000000"], 0x28}}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) get_robust_list(0x0, 0x0, &(0x7f0000001500)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000500), 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000280), 0xac, 0x400000) mkdir(&(0x7f0000000400)='./file1\x00', 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000005c0)='./bus\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x0, 0x10}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 3m58.65918172s ago: executing program 2 (id=1360): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000200)='./file1\x00', 0x810002, &(0x7f0000000980)=ANY=[@ANYBLOB="757466383d312c726f6469722c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c636865636b3d7374726963742c756e695f786c6174653d302c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303030343030302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c71756965742c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c757466383d302c666c7573682c726f6469722c73686f72746e616d653d6d697865642c73686f77657865632c636865636b3d72656c617865642c726f6469722c726f6469722c007cbda5978eff1afd303a09806ce0c610fe00684c0c67004cdbbd0b9992b0bbea8911a2050000006311c61fb0edf19ed5b7f8d03bfbf22d5655a02f9c7e7307c4f0cbeda2b4e5b2821ba502f452ce09bae8f886c9b612847e26f9afb26c9805000000000000000bc8604552e1dcb75008cfdd8a85c302b83f5ba6d806e8f77268091776f01e8c0465aa4a0ac02f13f9daeab1932f5688fd0ba15f0fc0d94f21c352fe6bc02b893c57f77281db316d62c523025b2c545ab273f28000ba55a384f4ddaa65567a7eb6e51c9d5b69a84c1cec408643486d4c6a17a1fe12f05c1bf8b7494265dc0493bbc87c7f86f7e5e9ed79d5822adebabbe3c1e9320ad777219218ae6103ce6a392927ef866f4b0bcfecea44742736cfc57fe72eee93d416f6ff7da7641eb9865ee1f09a9b76f87189d2f0113ebf44794240ccdfdee8fa1eccb4abfa1d4d470623d6e1530497c7e64924d946272d4fa346cfecac39646cbbf431869c533429e09b", @ANYRES16], 0x86, 0x2a9, &(0x7f0000000c00)="$eJzs3T9rc1UYAPDnpmmSV4dkcJKCF3RwKm1XlxRpoZhJyaAOWmwL0gShhYJ/MHZydXH0EwiCm1/CxW8guApudihcuTf3mqSmaSNN9S2/39LTc89zznNOz6V0yNMPN4anR2mcXH7xa7RaSdS68SyukuhELSpfxYzuNwEAPM+usiz+yMaWiUsiorW6tACAFVr69/+PK08JAFixd959763dXm/v7TRtxf7w64t+/pd9/nX8fPckPo5BHMdWtOM6IvvbuL2fZdmonuY68dpwdNHPI4cf/FzOv/t7RBG/He3oFF2z8Qe9ve10bCp+lOfxQrl+N4/fiXa8NGf9g97ezpz46Dfi9Ven8t+MdvzyUXwSgzgqkpjEf7mdpm9m3/75+ft5enl8MrroN4txE9naI/9oAAAAAAAAAAAAAAAAAAAAAAB4wjbL2jnNKOr35F1l/Z216/yb9Ugrndn6POP4pJroRn2gURbfVfV1ttI0zcqBk/h6vFyP+n+zawAAAAAAAAAAAAAAAAAAAPh/Of/0s9PDweD47EEaVTWA6mP9/3ae7lTPK7F4cHOyVq1sLpg51qoxScTCNPJNPNCx3NV4dlvO3/+w7IStu8esLzqfh2lUt+v0MJl/hs2oelrVJflpekwj7rlW47ZHG0UC1eW4a57G3EftpffeeLFojBaMiWTRe/HGb+OEy57k5kvUKE51bvh62ZgKv3E3brvP1SnNvin/kKjWAQAAAAAAAAAAAAAAAAAAKzX5GPCch5cLQ2tZc2VpAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCjmvz//yUaozL4HoMbcXY+f+X6Y24TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ+6vAAAA//+lillR") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0xa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000180)={0x0}) 3m57.850357809s ago: executing program 2 (id=1366): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x3c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3m57.314452811s ago: executing program 2 (id=1369): syz_mount_image$minix(&(0x7f00000003c0), &(0x7f0000000040)='./bus\x00', 0x280085e, &(0x7f0000000100)=ANY=[], 0xa, 0x229, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3m56.682945056s ago: executing program 44 (id=1369): syz_mount_image$minix(&(0x7f00000003c0), &(0x7f0000000040)='./bus\x00', 0x280085e, &(0x7f0000000100)=ANY=[], 0xa, 0x229, &(0x7f00000005c0)="$eJzs2z1PFEEcx/HfPtxxoIARtTCaEI1oI+dDZWHUjoo3QEXgVOIaUbSAmAiNWphQ2dlYmZhYWBqDnbHyBViY2GmIFJdYWbBmz32Am3vO3a4e30/D7Pxm2NkNc/eH5QRgz7qqcVmylA8OjhUOrI9ZWS8JQEr88Ou26yfsKATQ324OZ70CANnYuia9OCX9LD+ck5OPyoKgAvi6KWlj4olWFeb2gKRXnyU3rh+21qSjbphbBQ1W1xcvpdPRfGvIqD+C+UNxvm9HMhjnZ05G59+vYY1oNBckBzUW5vPx/CNN6x23reoIAID+ZGmyWd5wgK3rC17pXN08V8nP183zlfxCk/xifDwQt2aeTz9471/eDvLJuTvefKNlAqjB7mD/fzmetJ0m+9+ts/+rf08AkL6l5ZVbs57nP5IqjdK9sCdsRH8RSHocY0xXGtEzhxYGR08ojSj4Hjt6HHP6+oR57d27CjtZ2Kik3tyof7ihGtG3qb/3JO6xe3HndzVO/Pj9ePHZ23etDH7T5ins+KduZqNUrhojW+rhdY0bu2DWK7Q23Vr1/TZPWvPlIvnngEK3X4kApK14//ZicWl55eyCI+lGKRe94U9936xU9sXG9T2A/1fypl8rXTN6/N2H0x8//Spfev20gzNfkfTBfCAIAAAAAAAAAAAAAADadkiHs14CAAAAgJSYn/65O9Ltjy5lfY0AAAAAAAAAAAAAAAAAAPSbPwEAAP//dhAJcA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 22.514090804s ago: executing program 7 (id=1653): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil) 20.517457176s ago: executing program 7 (id=1656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r5, 0x0, 0x0, @void}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') 13.393665047s ago: executing program 7 (id=1668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r5, 0x0, 0x0, @void}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') 12.585116084s ago: executing program 0 (id=1670): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 11.338777446s ago: executing program 1 (id=1671): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 10.236140156s ago: executing program 0 (id=1672): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 9.243196752s ago: executing program 1 (id=1673): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 8.326271069s ago: executing program 0 (id=1675): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 8.219405404s ago: executing program 1 (id=1676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 7.118733358s ago: executing program 1 (id=1678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r5, 0x0, 0x0, @void}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') 7.108545868s ago: executing program 0 (id=1679): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) 5.816698532s ago: executing program 4 (id=1680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r3, 0x0, 0x0, @void}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') 5.02753908s ago: executing program 0 (id=1681): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b485e8a15ada47ea846006a505870e976e7d8c8ac6d345e46ce75b805866e8003902a68a4cbf08a1f780e1df8dbdbc570122421f825e8afb6b9f81b6dbfd9de4ee3c575765c55bb1f645a96b7cc35c951513514bb257c4884f1d28d581bf132d14442d462e295697c59cc5dcb71e5ccc3af53e9d6ca044ebab42e9dbbe7489e2830de7506661aaf29ed97656689de0b0f18ab0728d8244a4aa8ca6f6dceb0a6adc9c78421a68735f5993c885e8", @ANYBLOB="010400000000000000", @ANYRES32=0x0, @ANYBLOB="04001900080015000000"], 0x28}}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) get_robust_list(0x0, 0x0, &(0x7f0000001500)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000500), 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$midi(&(0x7f0000000280), 0xac, 0x400000) mkdir(&(0x7f0000000400)='./file1\x00', 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000005c0)='./bus\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x0, 0x10}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 4.721881315s ago: executing program 4 (id=1682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioprio_get$uid(0x3, 0x0) 4.363671347s ago: executing program 7 (id=1683): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 3.179347446s ago: executing program 0 (id=1684): clock_gettime(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setresuid(0xee01, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x101, 0x300, 0x0, 0x101, 0x300}}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.177946322s ago: executing program 4 (id=1685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410e9) 3.057540826s ago: executing program 7 (id=1686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept$alg(r4, 0x0, 0x0) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000080)='Z', 0x1}, {&(0x7f0000000200)}], 0x2) 1.807942592s ago: executing program 4 (id=1687): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.566305339s ago: executing program 7 (id=1688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1.106299738s ago: executing program 4 (id=1689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 629.819079ms ago: executing program 1 (id=1690): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x8980}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) 250.714116ms ago: executing program 1 (id=1691): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 0s ago: executing program 4 (id=1692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r3, 0x0, 0x0, @void}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') kernel console output (not intermixed with test programs): ate [ 798.891297][T11252] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.898606][T11252] bridge_slave_1: entered allmulticast mode [ 798.906937][T11252] bridge_slave_1: entered promiscuous mode [ 798.928778][T11224] hsr_slave_0: entered promiscuous mode [ 798.935423][T11224] hsr_slave_1: entered promiscuous mode [ 798.942105][T11224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.949727][T11224] Cannot create hsr debugfs directory [ 798.982972][T11064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 799.008889][T11064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 799.205551][T11252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.284805][T11252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.454280][T11252] team0: Port device team_slave_0 added [ 799.492741][T11252] team0: Port device team_slave_1 added [ 799.532790][ T54] Bluetooth: hci0: command tx timeout [ 799.682253][T11252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.689497][T11252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.722721][T11252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.928004][T11252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.951505][T11252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.979376][T11252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.379124][T11252] hsr_slave_0: entered promiscuous mode [ 800.402472][T11252] hsr_slave_1: entered promiscuous mode [ 800.409170][T11252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 800.460984][T11252] Cannot create hsr debugfs directory [ 800.646808][T11064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.941047][ T8424] IPVS: stop unused estimator thread 0... [ 800.941589][T11064] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.966011][ T8424] IPVS: stop unused estimator thread 0... [ 800.979755][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.987019][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.028696][T11224] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 801.043538][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.050803][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.094897][T11224] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 801.123274][T11224] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 801.161930][T11224] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 801.345156][ T8424] bridge_slave_1: left allmulticast mode [ 801.350922][ T8424] bridge_slave_1: left promiscuous mode [ 801.357906][ T8424] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.368748][ T8424] bridge_slave_0: left allmulticast mode [ 801.374640][ T8424] bridge_slave_0: left promiscuous mode [ 801.380437][ T8424] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.394253][ T8424] bridge_slave_1: left allmulticast mode [ 801.399985][ T8424] bridge_slave_1: left promiscuous mode [ 801.406247][ T8424] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.417172][ T8424] bridge_slave_0: left allmulticast mode [ 801.423035][ T8424] bridge_slave_0: left promiscuous mode [ 801.428820][ T8424] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.617159][ T8424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.640319][ T8424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.653181][ T8424] bond0 (unregistering): Released all slaves [ 801.675530][ T8424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.688405][ T8424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.700620][ T8424] bond0 (unregistering): Released all slaves [ 801.874606][ T8424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.902152][ T8424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.084715][ T8424] team0 (unregistering): Port device team_slave_1 removed [ 802.156378][ T8424] team0 (unregistering): Port device team_slave_0 removed [ 803.032904][T11224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.102795][T11224] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.148007][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.155238][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.191131][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.198321][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.538426][T11064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.584476][T11252] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 803.638272][T11252] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 803.663372][T11252] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 803.686023][T11252] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 803.827831][T11064] veth0_vlan: entered promiscuous mode [ 803.913470][T11064] veth1_vlan: entered promiscuous mode [ 804.044969][T11064] veth0_macvtap: entered promiscuous mode [ 804.065575][T11224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.089524][T11064] veth1_macvtap: entered promiscuous mode [ 804.109877][T11252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.160516][T11252] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.173661][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.187643][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.199298][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.211355][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.221998][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.251145][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.273278][T11064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.307282][T10696] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.314581][T10696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.353586][T10696] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.360833][T10696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.386367][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.421146][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.441169][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.460788][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.471412][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.482632][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.497133][T11064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.549858][T11064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.572236][T11064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.581018][T11064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.591683][T11064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.646471][T11252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 804.840916][T11224] veth0_vlan: entered promiscuous mode [ 804.894458][T11224] veth1_vlan: entered promiscuous mode [ 805.002407][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.031590][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.075823][T11224] veth0_macvtap: entered promiscuous mode [ 805.108370][T11224] veth1_macvtap: entered promiscuous mode [ 805.148075][ T8424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.158313][ T8424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.201994][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.213464][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.242337][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.253457][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.264066][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.275136][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.287167][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.300448][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.344568][T11224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.457511][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.506236][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.524878][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.542320][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.553915][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.565091][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.592319][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.632963][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.667843][T11224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.756559][T11252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.810815][T11224] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.890185][T11224] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.754723][T11224] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.773601][T11224] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.066793][T11252] veth0_vlan: entered promiscuous mode [ 807.128621][T11252] veth1_vlan: entered promiscuous mode [ 807.161719][T10696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.191248][T10696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.308561][T11252] veth0_macvtap: entered promiscuous mode [ 807.363821][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.394580][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.404894][T11252] veth1_macvtap: entered promiscuous mode [ 808.411940][ T54] Bluetooth: hci4: command tx timeout [ 808.435594][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.446600][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.521591][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.534091][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.544427][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.555255][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.565472][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.576497][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.586965][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.601125][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.616507][T11252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.733010][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.773331][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.846574][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.001139][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.081252][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.188270][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.243166][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.280022][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.031854][ T30] audit: type=1326 audit(1741877548.107:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efdd8d169 code=0x7ffc0000 [ 812.021315][ T30] audit: type=1326 audit(1741877548.107:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efdd8d169 code=0x7ffc0000 [ 812.026032][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.044067][ T30] audit: type=1326 audit(1741877548.107:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9efdd8bad0 code=0x7ffc0000 [ 812.452579][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.474377][T11252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.506264][T11252] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.581189][T11252] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.590030][T11252] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.598948][ T30] audit: type=1326 audit(1741877548.107:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9efdd8e997 code=0x7ffc0000 [ 812.599026][ T30] audit: type=1326 audit(1741877548.107:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9efdd8d169 code=0x7ffc0000 [ 812.599093][ T30] audit: type=1326 audit(1741877548.117:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9efdd8e997 code=0x7ffc0000 [ 812.599159][ T30] audit: type=1326 audit(1741877548.117:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9efdd8bdca code=0x7ffc0000 [ 812.599225][ T30] audit: type=1326 audit(1741877548.117:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efdd8d169 code=0x7ffc0000 [ 812.599293][ T30] audit: type=1326 audit(1741877548.117:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9efdd8d169 code=0x7ffc0000 [ 812.599356][ T30] audit: type=1326 audit(1741877548.117:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.4.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efdd8d169 code=0x7ffc0000 [ 812.772402][T11504] Process accounting resumed [ 812.839510][T11522] input: syz0 as /devices/virtual/input/input15 [ 813.186131][T11252] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.263037][T10696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.270952][T10696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.888127][T11549] loop7: detected capacity change from 0 to 8 [ 818.241491][ T5836] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 818.252352][ T5836] Bluetooth: hci1: Injecting HCI hardware error event [ 818.273977][ T54] Bluetooth: hci1: hardware error 0x00 [ 818.596440][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.603540][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.615560][T10709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.752170][T10709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.004815][T11557] loop4: detected capacity change from 0 to 32768 [ 820.017893][T11557] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1045 (11557) [ 820.311750][T11557] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 820.322677][T11557] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 820.331463][T11557] BTRFS info (device loop4): using free-space-tree [ 821.401744][T11557] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 821.405890][T11557] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 821.416627][T11557] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 821.426845][T11557] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 821.450489][T11557] BTRFS error (device loop4): open_ctree failed: -12 [ 821.691845][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 821.862396][T11585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1049'. [ 824.534922][T11595] loop6: detected capacity change from 0 to 32768 [ 824.723362][T11595] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1048 (11595) [ 824.747560][T11595] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 824.757934][T11595] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 824.766563][T11595] BTRFS info (device loop6): using free-space-tree [ 825.107606][T11595] BTRFS info (device loop6): rebuilding free space tree [ 827.114430][T11224] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 831.307026][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1062'. [ 832.312818][T11668] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1062'. [ 835.611031][T11683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 835.937153][T11693] netlink: 'syz.6.1057': attribute type 1 has an invalid length. [ 835.962844][T11695] ptrace attach of "./syz-executor exec"[8016] was attempted by ""[11695] [ 836.040481][T11693] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1057'. [ 843.501035][T11748] overlayfs: failed to clone upperpath [ 846.137014][T11758] loop2: detected capacity change from 0 to 40427 [ 846.169245][T11763] random: crng reseeded on system resumption [ 846.737106][T11758] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 846.745181][T11758] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 847.510515][T11758] F2FS-fs (loop2): invalid crc value [ 848.797143][T11758] F2FS-fs (loop2): Found nat_bits in checkpoint [ 851.531214][ T9115] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 852.061624][ T9115] usb 1-1: Using ep0 maxpacket: 16 [ 852.447811][ T9115] usb 1-1: config 4 has an invalid interface number: 52 but max is 1 [ 852.461450][ T9115] usb 1-1: config 4 has an invalid interface number: 52 but max is 1 [ 852.469606][ T9115] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 852.510776][ T9115] usb 1-1: config 4 has no interface number 0 [ 852.545492][ T9115] usb 1-1: config 4 interface 52 altsetting 62 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 852.599572][ T9115] usb 1-1: config 4 interface 52 has no altsetting 0 [ 852.611214][ T9115] usb 1-1: config 4 interface 52 has no altsetting 1 [ 852.658281][ T9115] usb 1-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice=18.78 [ 852.683735][ T9115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.692727][ T9115] usb 1-1: Product: syz [ 852.696987][ T9115] usb 1-1: Manufacturer: syz [ 852.701783][ T9115] usb 1-1: SerialNumber: syz [ 852.732807][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 852.749181][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 852.760931][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 852.785500][T11806] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1091'. [ 852.854416][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 852.864896][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 852.877117][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 853.112138][ T5922] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 853.220859][ T9115] asix 1-1:4.52 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 853.276385][ T9115] asix 1-1:4.52: probe with driver asix failed with error -71 [ 853.289894][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 853.349947][ T5922] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 853.407184][ T9115] usb 1-1: USB disconnect, device number 22 [ 853.466025][ T5922] usb 5-1: config 1 interface 0 has no altsetting 0 [ 853.540512][ T5922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 853.592756][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.600870][ T5922] usb 5-1: Product: syz [ 853.628881][ T5922] usb 5-1: Manufacturer: syz [ 853.647455][ T5922] usb 5-1: SerialNumber: syz [ 853.668148][T11806] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 853.793622][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.148302][ T5922] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 854.170203][ T5922] usb 5-1: USB disconnect, device number 5 [ 855.139901][ T54] Bluetooth: hci1: command tx timeout [ 855.305438][T11827] loop7: detected capacity change from 0 to 256 [ 855.316488][T11827] exfat: Deprecated parameter 'utf8' [ 855.322907][T11827] exfat: Deprecated parameter 'namecase' [ 855.329268][T11827] exfat: Deprecated parameter 'namecase' [ 855.335770][T11827] exfat: Deprecated parameter 'utf8' [ 857.184665][T11827] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 857.252270][ T54] Bluetooth: hci1: command tx timeout [ 857.301893][ T5922] usblp0: removed [ 857.927383][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.760832][T11850] loop7: detected capacity change from 0 to 64 [ 859.295995][ T54] Bluetooth: hci1: command tx timeout [ 860.350510][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.271766][T11870] binder: 11869:11870 ioctl c0306201 4000000001c0 returned -14 [ 861.363355][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.390378][ T54] Bluetooth: hci1: command tx timeout [ 861.435917][T11803] chnl_net:caif_netlink_parms(): no params data found [ 868.339214][T11906] smc: net device wlan0 applied user defined pnetid SYZ1 [ 868.492440][T11803] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.500518][T11803] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.511773][T11803] bridge_slave_0: entered allmulticast mode [ 868.683374][T11803] bridge_slave_0: entered promiscuous mode [ 868.739777][T11803] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.800093][T11803] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.841385][T11803] bridge_slave_1: entered allmulticast mode [ 868.848682][T11803] bridge_slave_1: entered promiscuous mode [ 870.399810][T11928] evm: overlay not supported [ 870.410101][T11928] loop4: detected capacity change from 0 to 64 [ 872.028579][ T36] bridge_slave_1: left allmulticast mode [ 872.043466][ T36] bridge_slave_1: left promiscuous mode [ 872.086876][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.215295][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 872.243931][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 872.311528][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 872.323013][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 872.330952][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 872.338503][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 872.562018][ T36] bridge_slave_0: left allmulticast mode [ 872.901254][ T36] bridge_slave_0: left promiscuous mode [ 873.004865][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.601235][ T5836] Bluetooth: hci2: command tx timeout [ 875.291671][T11971] loop4: detected capacity change from 0 to 128 [ 875.599259][T11971] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 875.645336][T11971] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.669941][ T5836] Bluetooth: hci2: command tx timeout [ 878.784057][ T5836] Bluetooth: hci2: command tx timeout [ 879.706739][ T9905] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 879.937998][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.949036][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.960772][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.978881][ T36] bond0 (unregistering): Released all slaves [ 879.996602][T11803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.098460][T11977] smc: net device wlan0 applied user defined pnetid SYZ1 [ 880.324212][T11803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.376804][T11992] usb usb8: usbfs: process 11992 (syz.7.1128) did not claim interface 0 before use [ 881.030965][ T5836] Bluetooth: hci2: command tx timeout [ 883.701251][T11803] team0: Port device team_slave_0 added [ 883.849854][T11803] team0: Port device team_slave_1 added [ 884.138523][ T36] hsr_slave_0: left promiscuous mode [ 884.180970][ T36] hsr_slave_1: left promiscuous mode [ 884.211944][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.219417][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.257210][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.297424][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.391614][ T36] veth1_macvtap: left promiscuous mode [ 884.418765][ T36] veth0_macvtap: left promiscuous mode [ 884.436247][ T36] veth1_vlan: left promiscuous mode [ 884.449787][ T36] veth0_vlan: left promiscuous mode [ 885.497645][T12054] xt_CT: No such helper "snmp_trap" [ 887.442509][ T36] team0 (unregistering): Port device team_slave_1 removed [ 887.605558][ T36] team0 (unregistering): Port device team_slave_0 removed [ 888.309832][T11803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.319169][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.371678][T11803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.431885][T12087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1146'. [ 888.551997][T11803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.568338][T12090] netlink: 'syz.7.1147': attribute type 8 has an invalid length. [ 888.595266][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.621911][T11803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.677349][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 888.677374][ T30] audit: type=1326 audit(1741877625.947:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12092 comm="syz.4.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efdd8d169 code=0x7ffc0000 [ 888.742830][ T30] audit: type=1326 audit(1741877625.947:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12092 comm="syz.4.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efdd8d169 code=0x7ffc0000 [ 888.999695][T11803] hsr_slave_0: entered promiscuous mode [ 889.029123][T11803] hsr_slave_1: entered promiscuous mode [ 889.049859][T11803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 889.088057][T11803] Cannot create hsr debugfs directory [ 891.671207][ T5942] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 891.817940][T11943] chnl_net:caif_netlink_parms(): no params data found [ 891.821237][ T5891] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 891.865781][ T5942] usb 5-1: unable to get BOS descriptor or descriptor too short [ 891.882112][ T5942] usb 5-1: config 6 has an invalid interface number: 96 but max is 0 [ 891.927894][ T5942] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 891.966286][ T5942] usb 5-1: config 6 has no interface number 0 [ 891.998953][ T5942] usb 5-1: config 6 interface 96 has no altsetting 0 [ 892.034021][ T5942] usb 5-1: string descriptor 0 read error: -22 [ 892.043517][ T5942] usb 5-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=4f.2b [ 892.061298][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 892.092367][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.105513][ T5891] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 892.121145][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.141341][ T5891] usb 3-1: Product: syz [ 892.150076][ T5891] usb 3-1: Manufacturer: syz [ 892.166791][ T5891] usb 3-1: SerialNumber: syz [ 892.267339][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 892.345339][ T5891] usb 3-1: config 0 descriptor?? [ 892.367824][ T5891] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 892.999528][ T5891] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 893.041465][ T5891] usb 3-1: USB disconnect, device number 6 [ 893.046770][ T5942] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 893.302228][ T5942] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 893.438430][ T5942] dib0700: firmware download failed at 28 with -71 [ 893.616972][ T5942] usb 5-1: USB disconnect, device number 6 [ 894.117333][ T36] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.252837][T12159] syz.7.1165 (12159): /proc/12158/oom_adj is deprecated, please use /proc/12158/oom_score_adj instead. [ 894.606878][ T36] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.676968][ T5836] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 894.688176][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: kworker/u9:3 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 894.688225][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 894.688248][ T5836] Workqueue: hci5 hci_rx_work [ 894.688293][ T5836] Call Trace: [ 894.688304][ T5836] [ 894.688318][ T5836] dump_stack_lvl+0x16c/0x1f0 [ 894.688381][ T5836] sysfs_warn_dup+0x7f/0xa0 [ 894.688434][ T5836] sysfs_create_dir_ns+0x24d/0x2b0 [ 894.688487][ T5836] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 894.688541][ T5836] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 894.688582][ T5836] ? kobject_add_internal+0x12d/0x990 [ 894.688623][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.688692][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 894.688734][ T5836] kobject_add_internal+0x2c8/0x990 [ 894.688780][ T5836] kobject_add+0x16f/0x240 [ 894.688827][ T5836] ? __pfx_kobject_add+0x10/0x10 [ 894.688863][ T5836] ? class_to_subsys+0x3e/0x160 [ 894.688926][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.688988][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 894.689027][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.689090][ T5836] ? kobject_put+0xab/0x5a0 [ 894.689129][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.689208][ T5836] device_add+0x289/0x1a70 [ 894.689266][ T5836] ? __pfx_dev_set_name+0x10/0x10 [ 894.689331][ T5836] ? __pfx_device_add+0x10/0x10 [ 894.689389][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.689452][ T5836] ? mgmt_send_event_skb+0x2f2/0x460 [ 894.689501][ T5836] hci_conn_add_sysfs+0x17e/0x230 [ 894.689548][ T5836] le_conn_complete_evt+0x107f/0x1da0 [ 894.689601][ T5836] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 894.689638][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.689705][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.689768][ T5836] ? __mutex_lock+0x1cc/0xb10 [ 894.689851][ T5836] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 894.689893][ T5836] ? skb_pull_data+0x166/0x210 [ 894.689961][ T5836] hci_le_meta_evt+0x2e5/0x5d0 [ 894.690006][ T5836] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 894.690056][ T5836] hci_event_packet+0x669/0x1180 [ 894.690095][ T5836] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 894.690143][ T5836] ? __pfx_hci_event_packet+0x10/0x10 [ 894.690180][ T5836] ? __entry_text_end+0x1020c5/0x1020c9 [ 894.690243][ T5836] ? mark_held_locks+0x9f/0xe0 [ 894.690299][ T5836] ? kcov_remote_start+0x3cf/0x6e0 [ 894.690356][ T5836] ? lockdep_hardirqs_on+0x7c/0x110 [ 894.690413][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.690488][ T5836] hci_rx_work+0x2c5/0x16b0 [ 894.690535][ T5836] ? process_one_work+0x921/0x1ba0 [ 894.690597][ T5836] process_one_work+0x9c8/0x1ba0 [ 894.690659][ T5836] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 894.690716][ T5836] ? __pfx_process_one_work+0x10/0x10 [ 894.690771][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.690853][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 894.690915][ T5836] ? assign_work+0x1a0/0x250 [ 894.690971][ T5836] worker_thread+0x6c8/0xf00 [ 894.691044][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 894.691100][ T5836] kthread+0x3b2/0x750 [ 894.691149][ T5836] ? __pfx_kthread+0x10/0x10 [ 894.691196][ T5836] ? lock_acquire+0x2f/0xb0 [ 894.691257][ T5836] ? __pfx_kthread+0x10/0x10 [ 894.691307][ T5836] ret_from_fork+0x48/0x80 [ 894.691364][ T5836] ? __pfx_kthread+0x10/0x10 [ 894.691412][ T5836] ret_from_fork_asm+0x1a/0x30 [ 894.691478][ T5836] [ 895.017271][ C0] vkms_vblank_simulate: vblank timer overrun [ 895.041551][ T5836] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 895.055883][ T5836] Bluetooth: hci5: failed to register connection device [ 895.103182][T11943] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.110313][T11943] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.144431][T11943] bridge_slave_0: entered allmulticast mode [ 895.181326][T11943] bridge_slave_0: entered promiscuous mode [ 895.424616][ T36] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.452215][T11943] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.459361][T11943] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.542190][T11943] bridge_slave_1: entered allmulticast mode [ 895.586033][T11943] bridge_slave_1: entered promiscuous mode [ 897.003999][ T36] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.066525][T11943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.093409][T11943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.115994][T12218] loop7: detected capacity change from 0 to 64 [ 897.285795][T11943] team0: Port device team_slave_0 added [ 897.327413][T11943] team0: Port device team_slave_1 added [ 897.658309][T11943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.719605][T11943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.777841][T11943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.842311][ T5890] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 897.851852][T11943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.873156][T11943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.899261][ C0] vkms_vblank_simulate: vblank timer overrun [ 898.236124][T11943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.291677][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 898.305492][ T36] bridge_slave_1: left allmulticast mode [ 898.331646][ T36] bridge_slave_1: left promiscuous mode [ 898.340849][T12235] loop7: detected capacity change from 0 to 2048 [ 898.349225][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.361066][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.391172][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.413385][ T36] bridge_slave_0: left allmulticast mode [ 898.419151][ T36] bridge_slave_0: left promiscuous mode [ 898.423724][T12235] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 898.451817][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 898.481463][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.509221][ T5890] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 898.537692][T12239] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 898.548080][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.606380][ T5890] usb 5-1: config 0 descriptor?? [ 898.728905][T12235] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 898.809084][T12235] Remounting filesystem read-only [ 898.823171][T12235] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 3044605952 [ 898.839553][T12235] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=15) [ 898.881245][T12235] NILFS (loop7): error -5 truncating bmap (ino=15) [ 899.032283][T12235] syz.7.1186 (12235) used greatest stack depth: 21104 bytes left [ 899.064612][ T6990] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 899.079095][ T5890] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring [ 899.305231][ T9115] usb 5-1: USB disconnect, device number 7 [ 899.405171][T12248] loop7: detected capacity change from 0 to 128 [ 899.542177][T12248] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 899.605645][T12248] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 900.860282][ T5942] hid-generic 0000:40000003:0000.0003: unknown main item tag 0x0 [ 900.889488][ T5942] hid-generic 0000:40000003:0000.0003: unknown main item tag 0x0 [ 900.980878][ T5942] hid-generic 0000:40000003:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 901.082960][ T6990] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 903.741399][ T5892] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 903.803235][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.910856][ T5892] usb 8-1: device descriptor read/64, error -71 [ 903.931553][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.021574][ T36] bond0 (unregistering): Released all slaves [ 904.059188][T11803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 904.119530][T12304] loop4: detected capacity change from 0 to 16 [ 904.122222][T11803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 904.181725][ T5892] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 904.244689][T12304] erofs (device loop4): mounted with root inode @ nid 36. [ 904.324068][T12304] erofs (device loop4): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 904.366361][ T5892] usb 8-1: device descriptor read/64, error -71 [ 904.401312][T12304] erofs (device loop4): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 904.410508][T12304] erofs (device loop4): read error -95 @ 8200 of nid 36 [ 904.434532][T12304] erofs (device loop4): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 904.494034][ T5892] usb usb8-port1: attempt power cycle [ 904.510539][T12309] erofs (device loop4): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 904.586226][T12304] erofs (device loop4): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 904.617386][T12304] erofs (device loop4): read error -95 @ 8200 of nid 36 [ 904.617419][T12309] erofs (device loop4): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 904.700244][T11803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 904.726331][T12309] erofs (device loop4): read error -95 @ 0 of nid 36 [ 904.775764][T12309] erofs (device loop4): fail to readdir of logical block 0 of nid 36 [ 904.861983][ T5892] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 904.924611][ T5892] usb 8-1: device descriptor read/8, error -71 [ 905.011530][T11803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 905.051459][ T9115] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 905.075060][T11943] hsr_slave_0: entered promiscuous mode [ 905.118912][T11943] hsr_slave_1: entered promiscuous mode [ 905.142405][T11943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 905.150042][T11943] Cannot create hsr debugfs directory [ 905.203761][ T5892] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 905.241173][ T9115] usb 3-1: Using ep0 maxpacket: 32 [ 905.248557][ T9115] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 905.260679][ T9115] usb 3-1: config 0 has no interface number 0 [ 905.268035][ T9115] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 905.279236][ T9115] usb 3-1: config 0 interface 85 has no altsetting 0 [ 905.370584][ T9115] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 905.573796][ T9115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.713392][ T9115] usb 3-1: Product: syz [ 905.783897][ T9115] usb 3-1: Manufacturer: syz [ 905.852674][ T9115] usb 3-1: SerialNumber: syz [ 906.081421][ T9115] usb 3-1: config 0 descriptor?? [ 906.765643][ T9115] appletouch 3-1:0.85: Geyser mode initialized. [ 906.816288][ T9115] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input16 [ 906.998971][ T9115] usb 3-1: USB disconnect, device number 7 [ 907.066861][ T36] hsr_slave_0: left promiscuous mode [ 907.131411][ T36] hsr_slave_1: left promiscuous mode [ 907.157775][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.172471][ T9115] appletouch 3-1:0.85: input: appletouch disconnected [ 907.194296][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.566805][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.613898][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.364372][ T36] veth1_macvtap: left promiscuous mode [ 908.441074][ T36] veth0_macvtap: left promiscuous mode [ 908.487767][ T36] veth1_vlan: left promiscuous mode [ 908.491205][ T5892] usb 8-1: device descriptor read/8, error -71 [ 908.543039][ T36] veth0_vlan: left promiscuous mode [ 908.596291][T12349] loop2: detected capacity change from 0 to 512 [ 908.621564][ T5892] usb usb8-port1: unable to enumerate USB device [ 908.663843][T12349] EXT4-fs (loop2): Test dummy encryption mode enabled [ 908.670728][T12349] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 908.816531][T12349] EXT4-fs (loop2): 1 truncate cleaned up [ 908.823668][T12349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 908.869414][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 908.884195][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 908.900381][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 908.921057][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 908.952195][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 908.974003][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 909.006070][T12349] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 909.093717][T12349] EXT4-fs (loop2): Online defrag not supported for encrypted files [ 909.277680][T11252] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.222193][ T54] Bluetooth: hci1: command tx timeout [ 911.508043][T12391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1213'. [ 912.000485][ T36] team0 (unregistering): Port device team_slave_1 removed [ 912.403767][ T36] team0 (unregistering): Port device team_slave_0 removed [ 913.361545][ T54] Bluetooth: hci1: command tx timeout [ 914.207405][T12354] chnl_net:caif_netlink_parms(): no params data found [ 914.901295][ T5892] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 915.035156][T12354] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.051257][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 915.082257][ T5892] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 915.095861][T12354] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.151480][T12354] bridge_slave_0: entered allmulticast mode [ 915.157568][ T5892] usb 3-1: config 0 has no interface number 0 [ 915.190952][T12354] bridge_slave_0: entered promiscuous mode [ 915.196980][ T5892] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 915.219760][T12354] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.230272][ T5892] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 915.246001][T12354] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.259779][ T5892] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 915.278370][T12354] bridge_slave_1: entered allmulticast mode [ 915.285565][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.295638][T12354] bridge_slave_1: entered promiscuous mode [ 915.311221][ T5892] usb 3-1: Product: syz [ 915.315439][ T5892] usb 3-1: Manufacturer: syz [ 915.324214][ T5892] usb 3-1: SerialNumber: syz [ 915.340077][ T5892] usb 3-1: config 0 descriptor?? [ 915.365842][T12426] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 915.373688][ T54] Bluetooth: hci1: command tx timeout [ 915.389532][T12426] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 915.644345][T12414] loop4: detected capacity change from 0 to 40427 [ 915.653850][T12426] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 915.682067][T12426] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 915.701698][T12414] F2FS-fs (loop4): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 915.751414][T12414] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 915.790324][T12414] F2FS-fs (loop4): invalid crc value [ 915.823725][T12414] F2FS-fs (loop4): Found nat_bits in checkpoint [ 915.865291][T12354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.901800][T12354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.089471][T12414] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 916.130076][T12414] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 916.264374][ T30] audit: type=1800 audit(1741877653.537:93): pid=12414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1220" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 916.274947][T12414] syz.4.1220: attempt to access beyond end of device [ 916.274947][T12414] loop4: rw=34817, sector=53248, nr_sectors = 8 limit=40427 [ 916.292457][T12354] team0: Port device team_slave_0 added [ 916.323583][ T5892] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 916.352052][T12354] team0: Port device team_slave_1 added [ 916.357762][ T5892] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 916.388733][ T5892] asix 3-1:0.251: probe with driver asix failed with error -71 [ 916.425137][ T5892] usb 3-1: USB disconnect, device number 8 [ 916.498038][T12354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.543845][T12354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.618632][ T9905] syz-executor: attempt to access beyond end of device [ 916.618632][ T9905] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 916.632552][T12354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.661684][ T9905] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 916.672305][T11943] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 916.732134][T11943] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 916.879335][T12354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.922995][T12354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.067601][T12354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.123294][T11943] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 917.186344][T11943] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 917.461452][ T5836] Bluetooth: hci1: command tx timeout [ 917.496892][T12354] hsr_slave_0: entered promiscuous mode [ 917.535676][T12354] hsr_slave_1: entered promiscuous mode [ 917.555516][T12354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 917.592233][T12354] Cannot create hsr debugfs directory [ 917.616520][T12465] netlink: 'syz.7.1229': attribute type 1 has an invalid length. [ 917.875839][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 918.101692][ T5942] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 918.197868][ T36] bridge_slave_1: left allmulticast mode [ 918.215050][ T36] bridge_slave_1: left promiscuous mode [ 918.220918][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.280188][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.304415][ T36] bridge_slave_0: left allmulticast mode [ 918.306154][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.310139][ T36] bridge_slave_0: left promiscuous mode [ 918.338005][ T5942] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 918.358797][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.381468][ T5942] usb 3-1: config 0 descriptor?? [ 918.391444][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.804558][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.843339][ T5942] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 918.875966][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.913143][ T5942] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input17 [ 919.028721][ T36] bond0 (unregistering): Released all slaves [ 920.025325][ T5942] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 920.363476][ T5942] usb 3-1: USB disconnect, device number 9 [ 920.508267][T12514] fuse: Bad value for 'fd' [ 921.691235][ T36] hsr_slave_0: left promiscuous mode [ 921.746904][ T36] hsr_slave_1: left promiscuous mode [ 921.775179][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.911270][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.930638][ T36] team0 (unregistering): Port device team_slave_1 removed [ 923.010015][ T36] team0 (unregistering): Port device team_slave_0 removed [ 923.440739][T11943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.663628][T11943] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.740948][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.748176][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.916964][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.924230][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.410291][T11943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 924.501169][T11943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 924.828729][T12574] loop4: detected capacity change from 0 to 512 [ 924.970662][T12574] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 925.001321][ T9115] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 925.041015][T12574] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 925.196436][ T9115] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 925.203740][T12574] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 925.275699][T12574] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 925.327493][ T9115] usb 3-1: config 0 has no interface number 0 [ 925.351620][T12574] System zones: 0-2, 18-18, 34-34 [ 925.367481][ T9115] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 925.396451][T12574] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 925.421226][ T9115] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 925.473676][ T9115] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 925.488634][T12354] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 925.519029][ T9115] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 925.528553][T12574] EXT4-fs (loop4): 1 truncate cleaned up [ 925.536187][T12354] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 925.542568][ T9115] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 925.557349][T12354] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 925.581219][ T9115] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 925.583621][T12574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 925.622274][ T9115] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 925.644193][ T9115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.651250][T12594] loop7: detected capacity change from 0 to 512 [ 925.663676][ T9115] usb 3-1: config 0 descriptor?? [ 925.672030][T12571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 925.689648][T12571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 925.721564][ T5892] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 925.732464][ T9115] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 925.772504][T12594] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 925.831821][ T30] audit: type=1800 audit(1741877663.107:94): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1251" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 925.881597][T12594] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 925.906086][ T30] audit: type=1800 audit(1741877663.137:95): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1251" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 925.928493][T12354] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 925.951949][ T5892] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 925.984681][T11943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.014657][ T5892] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 926.034890][ T5892] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 926.088926][ T9905] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.098560][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.114484][ T6990] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.130895][ T10] usb 3-1: USB disconnect, device number 10 [ 926.152185][T12590] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 926.163114][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 926.246324][T12354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.312786][ T5892] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 926.355092][T12354] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.416679][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.423870][ T8625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.591939][T12611] netlink: 'syz.7.1257': attribute type 39 has an invalid length. [ 926.626172][ T5942] usb 1-1: USB disconnect, device number 23 [ 926.789420][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.796645][ T8625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.428835][T11943] veth0_vlan: entered promiscuous mode [ 927.583384][T12635] loop4: detected capacity change from 0 to 128 [ 927.632504][T12635] FAT-fs (loop4): bogus number of reserved sectors [ 927.640734][T12635] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 927.666229][T11943] veth1_vlan: entered promiscuous mode [ 927.701311][T12635] FAT-fs (loop4): Can't find a valid FAT filesystem [ 928.083334][T11943] veth0_macvtap: entered promiscuous mode [ 928.100992][T11943] veth1_macvtap: entered promiscuous mode [ 929.023812][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 929.162714][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.191441][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 929.220271][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.414611][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 929.596660][ T5892] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 929.721450][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.751750][T11943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 929.808336][T11943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.839339][T11943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.888026][T12662] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.898180][T12662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.952480][ T5892] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 929.968939][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.051425][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.092802][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 930.175523][ T5892] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 930.224902][ T5892] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 930.281403][ T5892] usb 1-1: Manufacturer: syz [ 930.312392][ T5892] usb 1-1: config 0 descriptor?? [ 930.357801][T12354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.437391][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 930.714283][T12354] veth0_vlan: entered promiscuous mode [ 930.809624][T12354] veth1_vlan: entered promiscuous mode [ 930.823145][ T5892] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 930.861509][ T5892] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 930.904490][T12683] loop4: detected capacity change from 0 to 1024 [ 930.929302][ T5892] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 930.950102][T12354] veth0_macvtap: entered promiscuous mode [ 930.989117][T12354] veth1_macvtap: entered promiscuous mode [ 931.071581][T12683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 931.097491][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.117095][ T5891] usb 1-1: USB disconnect, device number 24 [ 931.123608][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.147726][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.160111][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 931.202230][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 931.217373][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 931.241312][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 931.252296][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 931.264352][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 931.305790][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.332631][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.344386][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.354904][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.365800][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.376290][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.418736][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.468179][T12354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.524461][ T9905] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.154822][T12711] loop6: detected capacity change from 0 to 1207 [ 932.356341][T12712] loop6: detected capacity change from 1207 to 1447 [ 933.160629][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.205137][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.376225][T12719] capability: warning: `syz.7.1283' uses 32-bit capabilities (legacy support in use) [ 933.410311][ T54] Bluetooth: hci3: command tx timeout [ 934.038310][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.050182][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.060459][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.071020][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.101648][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.141182][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.182455][T12354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.225042][T12354] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.257357][T12354] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.282110][T12354] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.311630][T12354] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.451347][ T54] Bluetooth: hci3: command tx timeout [ 937.004600][T12727] loop7: detected capacity change from 0 to 32768 [ 937.021390][T10694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.051551][T10694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.062129][T12727] btrfs: Deprecated parameter 'usebackuproot' [ 937.108696][T12727] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 937.184853][T12727] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1285 (12727) [ 937.432380][ T8424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.497132][ T8424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.541270][ T54] Bluetooth: hci3: command tx timeout [ 937.928924][T12692] chnl_net:caif_netlink_parms(): no params data found [ 937.993415][ T36] bridge_slave_1: left allmulticast mode [ 937.999138][ T36] bridge_slave_1: left promiscuous mode [ 938.054470][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.100249][ T36] bridge_slave_0: left allmulticast mode [ 938.122449][ T36] bridge_slave_0: left promiscuous mode [ 938.272676][ T5889] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 938.442624][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.341183][ T5889] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 939.350388][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.392365][ T5889] usb 8-1: config 0 descriptor?? [ 939.407321][ T5889] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 939.611347][ T54] Bluetooth: hci3: command tx timeout [ 939.833525][ T5889] cpia1 8-1:0.0: unexpected state after lo power cmd: 00 [ 940.237237][ T5889] gspca_cpia1: usb_control_msg 02, error -71 [ 940.250812][ T5889] gspca_cpia1: usb_control_msg 05, error -71 [ 940.259269][ T5889] cpia1 8-1:0.0: unexpected systemstate: 00 [ 940.286944][ T5889] usb 8-1: USB disconnect, device number 28 [ 940.905868][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.960942][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.273989][ T36] bond0 (unregistering): Released all slaves [ 941.387172][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.667159][ T36] hsr_slave_0: left promiscuous mode [ 942.676052][ T36] hsr_slave_1: left promiscuous mode [ 942.712028][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.719623][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.791931][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.904968][ T36] veth1_macvtap: left promiscuous mode [ 942.910902][ T36] veth0_macvtap: left promiscuous mode [ 942.929347][ T36] veth1_vlan: left promiscuous mode [ 942.945557][ T36] veth0_vlan: left promiscuous mode [ 943.132713][ T5942] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 943.352415][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 943.539514][ T5942] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.716249][ T5942] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.761594][ T5942] usb 3-1: config 0 interface 0 has no altsetting 0 [ 944.356105][ T5942] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 944.417283][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.524887][ T5942] usb 3-1: config 0 descriptor?? [ 945.942613][ T5942] usbhid 3-1:0.0: can't add hid device: -71 [ 945.969161][ T5942] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 945.986854][ T5942] usb 3-1: USB disconnect, device number 11 [ 946.291949][T12756] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 946.454606][T12756] usb 8-1: Using ep0 maxpacket: 8 [ 946.467385][T12756] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.477968][T12756] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 946.507951][T12756] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.520049][T12756] usb 8-1: config 0 descriptor?? [ 946.550959][T12756] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 947.023921][ T36] team0 (unregistering): Port device team_slave_1 removed [ 947.162325][ T36] team0 (unregistering): Port device team_slave_0 removed [ 947.467495][T12922] loop2: detected capacity change from 0 to 32768 [ 947.507694][T12922] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1315 (12922) [ 947.564251][T12922] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 947.619036][T12922] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 947.640058][T12922] BTRFS info (device loop2): disk space caching is enabled [ 947.651054][T12922] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 947.883457][T12922] BTRFS info (device loop2): rebuilding free space tree [ 947.977511][T12922] BTRFS info (device loop2): disabling free space tree [ 947.985947][T12922] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 948.015724][T12756] gspca_vc032x: reg_w err -71 [ 948.020524][T12756] vc032x 8-1:0.0: probe with driver vc032x failed with error -71 [ 948.029574][T12922] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 948.030510][T12756] usb 8-1: USB disconnect, device number 29 [ 948.230505][ T30] audit: type=1800 audit(1741877685.497:96): pid=12922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1315" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 948.742997][T11252] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 948.979870][T12886] netlink: 'syz.1.1305': attribute type 12 has an invalid length. [ 949.039685][T12886] netlink: 'syz.1.1305': attribute type 29 has an invalid length. [ 949.068856][T12886] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1305'. [ 949.088763][T12886] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 949.109188][T12886] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1305'. [ 950.364735][T12964] netlink: 'syz.2.1327': attribute type 39 has an invalid length. [ 950.763678][T12692] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.791388][T12692] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.809247][T12692] bridge_slave_0: entered allmulticast mode [ 950.843517][T12692] bridge_slave_0: entered promiscuous mode [ 950.913283][T12692] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.920464][T12692] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.981493][T12692] bridge_slave_1: entered allmulticast mode [ 950.989565][T12692] bridge_slave_1: entered promiscuous mode [ 951.882034][T12692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.021759][T12984] sch_fq: defrate 2048 ignored. [ 952.119592][T12692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.602312][T12692] team0: Port device team_slave_0 added [ 952.658226][T12692] team0: Port device team_slave_1 added [ 952.741441][T12966] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 952.931274][T12966] usb 3-1: Using ep0 maxpacket: 8 [ 952.938570][T12966] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 952.960638][T12692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.978639][T12966] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 952.999866][T12692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.032890][T12966] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 953.050464][T12966] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 953.069766][T12692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.096948][T12966] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 953.128584][T12692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.149173][T12966] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 953.202872][T12692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.237675][T12966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.537191][T12692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.556814][T13019] netlink: 'syz.4.1336': attribute type 39 has an invalid length. [ 954.887620][T12966] usb 3-1: usb_control_msg returned -32 [ 954.893541][T12966] usbtmc 3-1:16.0: can't read capabilities [ 955.606176][T13028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1339'. [ 957.171624][T12692] hsr_slave_0: entered promiscuous mode [ 957.183277][T12692] hsr_slave_1: entered promiscuous mode [ 957.190494][T12692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 957.221553][T12692] Cannot create hsr debugfs directory [ 957.323250][ T9114] usb 3-1: USB disconnect, device number 12 [ 957.566037][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1344'. [ 958.787087][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.962750][ T9114] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 959.131355][ T9114] usb 2-1: Using ep0 maxpacket: 8 [ 959.142172][ T9114] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 959.167736][ T9114] usb 2-1: config 0 has no interface number 0 [ 959.174751][ T9114] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 959.201791][ T9114] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 959.228757][ T9114] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 959.242132][ T9114] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 959.256073][ T9114] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 959.266370][ T9114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.281019][ T9114] usb 2-1: config 0 descriptor?? [ 959.335204][ T9114] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 959.586611][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.621682][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.708281][ T5891] usb 2-1: USB disconnect, device number 27 [ 959.724231][ T5891] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 961.280242][T12966] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 961.457937][T12966] usb 2-1: Using ep0 maxpacket: 32 [ 961.468662][T12966] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 961.481260][T12966] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 961.491738][T12966] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 961.500925][T12966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 961.521852][T12966] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 961.541332][T12966] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 961.580071][T12966] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 961.599858][T12966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.629084][T12966] usb 2-1: config 0 descriptor?? [ 961.886621][T12966] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 961.914362][T12966] usb 2-1: USB disconnect, device number 28 [ 961.948460][T12966] usblp0: removed [ 962.437573][T12966] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 962.592805][T12966] usb 2-1: Using ep0 maxpacket: 32 [ 962.620948][T12966] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 962.630512][T12966] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 962.641445][T12966] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 962.650519][T12966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 962.660608][T12966] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 962.670787][T12966] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 962.684667][T12966] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 962.694383][T12966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.716416][T12966] usb 2-1: config 0 descriptor?? [ 962.934964][T12966] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 963.250593][ T5891] usb 2-1: USB disconnect, device number 29 [ 963.291272][ T5891] usblp0: removed [ 963.352676][T13083] loop7: detected capacity change from 0 to 128 [ 963.579638][T13083] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 963.652349][T13083] ext4 filesystem being mounted at /241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 964.342760][ T30] audit: type=1800 audit(1741877701.617:97): pid=13083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1357" name="file1" dev="loop7" ino=12 res=0 errno=0 [ 964.481892][ T30] audit: type=1800 audit(1741877701.757:98): pid=13089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1357" name="file2" dev="loop7" ino=13 res=0 errno=0 [ 964.598292][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 964.814012][T13097] loop2: detected capacity change from 0 to 256 [ 965.008439][ T6990] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 965.056287][T13100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 965.125432][T13104] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 965.134034][T13104] syzkaller0: group set to 60929 [ 965.226504][T11252] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 965.239756][T11252] FAT-fs (loop2): Filesystem has been set read-only [ 965.275669][T12692] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 965.297394][T11252] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 965.299524][T12692] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 965.382154][T12692] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 965.458923][T12692] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 965.987510][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.302589][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.570759][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.807988][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.909188][T12692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.008549][T12692] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.173724][T10694] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.180983][T10694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.292806][T10694] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.300003][T10694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.322821][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 968.354326][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 968.367769][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 968.384914][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 968.563718][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 968.574685][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 969.673714][ T52] bridge_slave_1: left allmulticast mode [ 969.690029][ T52] bridge_slave_1: left promiscuous mode [ 969.705054][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.746257][ T52] bridge_slave_0: left allmulticast mode [ 969.755460][ T52] bridge_slave_0: left promiscuous mode [ 970.061618][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.466189][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1376'. [ 970.714371][ T9114] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 970.731493][ T5836] Bluetooth: hci0: command tx timeout [ 970.882592][ T9114] usb 5-1: Using ep0 maxpacket: 32 [ 970.905604][ T9114] usb 5-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 970.921260][ T9114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.963030][ T9114] usb 5-1: config 0 descriptor?? [ 970.975729][ T9114] usb 5-1: dvb_usb_v2: found a 'Anysee' in warm state [ 970.986410][ T9114] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 971.007517][ T9114] dvb_usb_anysee 5-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 971.263156][ T10] usb 5-1: USB disconnect, device number 8 [ 972.811245][ T5836] Bluetooth: hci0: command tx timeout [ 972.980034][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.029291][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.082868][ T52] bond0 (unregistering): Released all slaves [ 974.484925][T12692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.702527][ C1] vkms_vblank_simulate: vblank timer overrun [ 974.867946][T13125] chnl_net:caif_netlink_parms(): no params data found [ 974.891255][ T5836] Bluetooth: hci0: command tx timeout [ 976.493337][T13174] loop7: detected capacity change from 0 to 32768 [ 976.590810][ T52] hsr_slave_0: left promiscuous mode [ 976.667026][ T52] hsr_slave_1: left promiscuous mode [ 976.743549][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.752252][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.818428][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.866579][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.971735][ T5836] Bluetooth: hci0: command tx timeout [ 977.006987][ T52] veth1_macvtap: left promiscuous mode [ 977.031263][ T52] veth0_macvtap: left promiscuous mode [ 977.037057][ T52] veth1_vlan: left promiscuous mode [ 977.061320][ T52] veth0_vlan: left promiscuous mode [ 978.199389][T13222] loop7: detected capacity change from 0 to 4096 [ 978.246949][T13222] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 980.667234][T13248] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 983.462988][ T5889] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 983.661900][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 983.670019][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.684920][ T5889] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 983.698744][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.733702][ T5889] usb 2-1: config 0 descriptor?? [ 983.760711][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 984.012949][T13271] input: syz1 as /devices/virtual/input/input19 [ 984.138806][ T5188] bcm5974 2-1:0.0: could not read from device [ 984.171429][ T52] team0 (unregistering): Port device team_slave_1 removed [ 984.184356][ T5188] bcm5974 2-1:0.0: could not read from device [ 984.232350][ T5889] usb 2-1: USB disconnect, device number 30 [ 984.570619][ T52] team0 (unregistering): Port device team_slave_0 removed [ 986.223619][T13125] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.241503][T13125] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.248833][T13125] bridge_slave_0: entered allmulticast mode [ 986.291978][T13125] bridge_slave_0: entered promiscuous mode [ 986.327918][T13125] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.361574][T13125] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.369206][T13125] bridge_slave_1: entered allmulticast mode [ 986.398636][T13125] bridge_slave_1: entered promiscuous mode [ 986.717845][T13125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.855320][T13125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.293168][T12692] veth0_vlan: entered promiscuous mode [ 991.396020][T13357] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 991.654495][T13125] team0: Port device team_slave_0 added [ 991.896161][T13125] team0: Port device team_slave_1 added [ 992.192639][T13125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.199647][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.361202][T13125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.450265][T13125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.488029][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.741165][T13125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.761394][ T5892] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 994.062711][ T5892] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.228800][ T5892] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 994.441136][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.494836][ T5892] usb 8-1: config 0 descriptor?? [ 994.607250][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 994.703900][T13125] hsr_slave_0: entered promiscuous mode [ 994.743660][T13125] hsr_slave_1: entered promiscuous mode [ 994.772533][T13125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 994.788159][T13125] Cannot create hsr debugfs directory [ 994.918185][ T5892] pwc: recv_control_msg error -32 req 02 val 2b00 [ 994.933143][ T5892] pwc: recv_control_msg error -32 req 02 val 2700 [ 994.968263][ T5892] pwc: recv_control_msg error -32 req 02 val 2c00 [ 995.024017][ T5892] pwc: recv_control_msg error -32 req 04 val 1000 [ 995.080763][ T5892] pwc: recv_control_msg error -32 req 04 val 1300 [ 995.108524][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 995.123495][ T5892] pwc: recv_control_msg error -32 req 04 val 1400 [ 995.135792][ T5892] pwc: recv_control_msg error -32 req 02 val 2000 [ 995.142539][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 995.143410][ T5892] pwc: recv_control_msg error -32 req 02 val 2100 [ 995.325525][ T10] IPVS: starting estimator thread 0... [ 995.616554][ T5892] pwc: recv_control_msg error -32 req 04 val 1500 [ 995.656384][ T5892] pwc: recv_control_msg error -32 req 02 val 2500 [ 995.695417][ T5892] pwc: recv_control_msg error -32 req 02 val 2400 [ 995.704306][T13392] IPVS: using max 16 ests per chain, 38400 per kthread [ 995.745780][ T5892] pwc: recv_control_msg error -32 req 02 val 2600 [ 995.964424][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 995.978608][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 995.991514][ T5892] pwc: recv_control_msg error -71 req 02 val 2800 [ 996.000418][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 996.012589][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 996.034866][ T5892] pwc: recv_control_msg error -71 req 04 val 1100 [ 996.086210][ T5892] pwc: recv_control_msg error -71 req 04 val 1200 [ 996.111536][ T5892] pwc: Registered as video103. [ 996.143099][ T5892] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input20 [ 996.207657][ T5892] usb 8-1: USB disconnect, device number 30 [ 998.326604][T13420] Cannot find add_set index 0 as target [ 999.019413][ T54] Bluetooth: hci2: command tx timeout [ 1001.051270][ T54] Bluetooth: hci2: command tx timeout [ 1003.053669][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.641710][ T54] Bluetooth: hci2: command tx timeout [ 1005.721261][ T54] Bluetooth: hci2: command tx timeout [ 1006.869104][T13475] loop7: detected capacity change from 0 to 8 [ 1006.938108][T13475] SQUASHFS error: Failed to read block 0x4de: -5 [ 1006.983613][T13475] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.034369][T13475] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.044992][ T30] audit: type=1800 audit(1741877744.287:99): pid=13475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1434" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1007.093092][T13477] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.124469][T13475] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.143048][T13477] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.173126][T13475] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.200918][T13477] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.245553][T13477] SQUASHFS error: Failed to read block 0x4de: -5 [ 1008.761689][ T5892] IPVS: starting estimator thread 0... [ 1008.835721][T13386] chnl_net:caif_netlink_parms(): no params data found [ 1008.867257][T13499] IPVS: using max 17 ests per chain, 40800 per kthread [ 1009.981460][ T5838] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1010.364101][ T5838] usb 8-1: Using ep0 maxpacket: 8 [ 1010.953295][ T5838] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1011.031176][ T5838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.061325][ T5838] usb 8-1: Product: syz [ 1011.066484][ T5838] usb 8-1: Manufacturer: syz [ 1011.095447][ T5838] usb 8-1: SerialNumber: syz [ 1011.124841][ T5838] usb 8-1: config 0 descriptor?? [ 1011.363999][ T2913] bridge_slave_1: left allmulticast mode [ 1011.381770][ T2913] bridge_slave_1: left promiscuous mode [ 1011.385694][ T5838] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1011.435853][ T2913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.624319][ T2913] bridge_slave_0: left allmulticast mode [ 1011.742479][ T2913] bridge_slave_0: left promiscuous mode [ 1011.818654][ T2913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.176254][ T5838] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1013.242879][ T5838] usb 8-1: USB disconnect, device number 31 [ 1019.241452][ T9114] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1020.142820][ T2913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.178946][ T2913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.194461][ T2913] bond0 (unregistering): Released all slaves [ 1020.225454][ T9114] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.252452][ T9114] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1020.310317][ T9114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.333762][ T9114] usb 2-1: config 0 descriptor?? [ 1020.382088][ T9114] pwc: Askey VC010 type 2 USB webcam detected. [ 1020.870929][ T9114] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1020.924486][ T9114] pwc: recv_control_msg error -32 req 02 val 2700 [ 1020.985432][ T9114] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1021.015054][ T9114] pwc: recv_control_msg error -32 req 04 val 1000 [ 1021.231256][ T2913] hsr_slave_0: left promiscuous mode [ 1021.247360][ T9114] pwc: recv_control_msg error -32 req 04 val 1300 [ 1021.275162][ T9114] pwc: recv_control_msg error -32 req 04 val 1400 [ 1021.284353][ T2913] hsr_slave_1: left promiscuous mode [ 1021.300533][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.361395][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.372441][ T9114] pwc: recv_control_msg error -32 req 02 val 2000 [ 1021.387309][ T9114] pwc: recv_control_msg error -32 req 02 val 2100 [ 1021.416959][ T2913] veth0_vlan: left promiscuous mode [ 1021.431310][ T9114] pwc: recv_control_msg error -32 req 04 val 1500 [ 1021.663725][ T9114] pwc: recv_control_msg error -71 req 02 val 2400 [ 1021.682281][ T9114] pwc: recv_control_msg error -71 req 02 val 2600 [ 1021.971002][ T9114] pwc: recv_control_msg error -71 req 02 val 2900 [ 1021.991484][ T9114] pwc: recv_control_msg error -71 req 02 val 2800 [ 1021.998998][ T9114] pwc: recv_control_msg error -71 req 04 val 1100 [ 1022.011574][ T9114] pwc: recv_control_msg error -71 req 04 val 1200 [ 1022.031409][ T9114] pwc: Registered as video103. [ 1022.037832][ T9114] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 1022.432748][ T9114] usb 2-1: USB disconnect, device number 31 [ 1023.215354][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 1025.835926][ T2913] team0 (unregistering): Port device team_slave_1 removed [ 1026.082693][ T2913] team0 (unregistering): Port device team_slave_0 removed [ 1029.084121][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1029.106589][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1029.118753][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1029.127526][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1029.142522][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1029.183045][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1030.354983][T13386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.384479][T13386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.420485][T13386] bridge_slave_0: entered allmulticast mode [ 1030.457050][T13386] bridge_slave_0: entered promiscuous mode [ 1030.557449][T13386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.851283][T13386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.881614][T13386] bridge_slave_1: entered allmulticast mode [ 1030.980082][T13386] bridge_slave_1: entered promiscuous mode [ 1031.881336][ T54] Bluetooth: hci3: command tx timeout [ 1032.185690][T13386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.492930][T13386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.559664][T13386] team0: Port device team_slave_0 added [ 1033.645998][T13386] team0: Port device team_slave_1 added [ 1033.935336][ T5836] Bluetooth: hci3: command tx timeout [ 1035.201825][T13386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.246652][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.612362][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 1035.619081][T13386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.133753][ T54] Bluetooth: hci3: command tx timeout [ 1036.718355][T13386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.732594][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.770446][T13386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.516577][ T30] audit: type=1800 audit(1741877774.377:100): pid=13670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1474" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1037.776775][T13386] hsr_slave_0: entered promiscuous mode [ 1037.812322][T13386] hsr_slave_1: entered promiscuous mode [ 1037.818539][T13386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1037.871585][T13386] Cannot create hsr debugfs directory [ 1038.171234][ T54] Bluetooth: hci3: command tx timeout [ 1039.494147][T13628] chnl_net:caif_netlink_parms(): no params data found [ 1041.650832][T13706] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1044.338884][T13628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.363663][T13628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.371041][T13628] bridge_slave_0: entered allmulticast mode [ 1044.377892][T13733] loop7: detected capacity change from 0 to 128 [ 1044.412552][T13628] bridge_slave_0: entered promiscuous mode [ 1044.430451][T13628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.445112][T13733] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1044.459433][T13628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.580127][T13628] bridge_slave_1: entered allmulticast mode [ 1044.590799][T13733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1044.708905][T13628] bridge_slave_1: entered promiscuous mode [ 1046.943772][T13628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.307417][T13628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.242355][ T2913] bridge_slave_1: left allmulticast mode [ 1051.271340][ T2913] bridge_slave_1: left promiscuous mode [ 1051.277168][ T2913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.437403][ T2913] bridge_slave_0: left allmulticast mode [ 1051.462315][ T2913] bridge_slave_0: left promiscuous mode [ 1051.467776][T13774] loop7: detected capacity change from 0 to 512 [ 1051.468102][ T2913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.483279][T13774] EXT4-fs: Invalid want_extra_isize 73 [ 1054.369443][ T2913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.970852][ T2913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.102689][ T2913] bond0 (unregistering): Released all slaves [ 1055.307321][T13628] team0: Port device team_slave_0 added [ 1055.345277][T13628] team0: Port device team_slave_1 added [ 1055.647237][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1055.659217][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1055.668556][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1055.678098][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1055.686532][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1055.699321][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1056.929742][T13628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.984343][T13628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.032600][T13628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.108863][ T2913] hsr_slave_0: left promiscuous mode [ 1057.159725][ T2913] hsr_slave_1: left promiscuous mode [ 1057.201270][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.214242][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.784521][ T5836] Bluetooth: hci0: command tx timeout [ 1058.047177][ T2913] team0 (unregistering): Port device team_slave_1 removed [ 1058.167403][ T2913] team0 (unregistering): Port device team_slave_0 removed [ 1058.581660][T13628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.588734][T13628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.655404][T13628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.131314][ T5836] Bluetooth: hci0: command tx timeout [ 1062.172682][ T5836] Bluetooth: hci0: command tx timeout [ 1062.459223][T13628] hsr_slave_0: entered promiscuous mode [ 1062.480354][T13628] hsr_slave_1: entered promiscuous mode [ 1062.504786][T13628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1062.529191][T13628] Cannot create hsr debugfs directory [ 1064.301392][ T5836] Bluetooth: hci0: command tx timeout [ 1064.307616][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.630393][T13877] Cannot find add_set index 0 as target [ 1066.860954][T13887] 9pnet_fd: Insufficient options for proto=fd [ 1068.501405][T13895] Unsupported ieee802154 address type: 0 [ 1070.211621][ T2913] bridge_slave_1: left allmulticast mode [ 1070.217531][ T2913] bridge_slave_1: left promiscuous mode [ 1070.320948][ T2913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.572018][ T2913] bridge_slave_0: left allmulticast mode [ 1070.594719][ T2913] bridge_slave_0: left promiscuous mode [ 1070.621376][ T2913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.888047][T13912] loop4: detected capacity change from 0 to 1024 [ 1073.501293][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1518'. [ 1074.256675][ T2913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.350628][T13941] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1075.131725][ T2913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.400537][ T2913] bond0 (unregistering): Released all slaves [ 1078.216032][T13805] chnl_net:caif_netlink_parms(): no params data found [ 1079.773516][ T2913] hsr_slave_0: left promiscuous mode [ 1080.991426][ T2913] hsr_slave_1: left promiscuous mode [ 1080.992197][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.052104][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.298400][ T2913] team0 (unregistering): Port device team_slave_1 removed [ 1087.291574][T14008] ptrace attach of "./syz-executor exec"[11064] was attempted by ""[14008] [ 1090.022660][ T2913] team0 (unregistering): Port device team_slave_0 removed [ 1092.552632][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1092.570880][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1092.582833][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1092.590992][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1092.609168][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1092.617122][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1093.261657][ T9115] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1093.455466][ T9115] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.636252][ T9115] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1093.748949][ T9115] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1093.770387][ T9115] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1093.785353][ T9115] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.017059][ T9115] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1094.254495][ T9115] usb 8-1: invalid MIDI out EP 0 [ 1094.557326][T14056] overlayfs: failed to resolve './file1': -2 [ 1095.067381][ T54] Bluetooth: hci2: command tx timeout [ 1095.385204][ T9115] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1096.007914][T13805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.075798][T13805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.111371][T13805] bridge_slave_0: entered allmulticast mode [ 1097.141526][T13805] bridge_slave_0: entered promiscuous mode [ 1098.113635][ T54] Bluetooth: hci2: command tx timeout [ 1098.868344][T13805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.993583][T13805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.000990][T13805] bridge_slave_1: entered allmulticast mode [ 1099.053083][T14076] udevd[14076]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1099.103516][T13805] bridge_slave_1: entered promiscuous mode [ 1099.248178][T12966] usb 8-1: USB disconnect, device number 32 [ 1099.772724][T13805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.099015][T13805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.171606][ T54] Bluetooth: hci2: command tx timeout [ 1101.423071][T13805] team0: Port device team_slave_0 added [ 1101.432686][T13805] team0: Port device team_slave_1 added [ 1102.073035][T14104] ptrace attach of "./syz-executor exec"[9905] was attempted by ""[14104] [ 1102.436258][ T54] Bluetooth: hci2: command tx timeout [ 1102.977456][ C1] vkms_vblank_simulate: vblank timer overrun [ 1103.061552][T13805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.101467][T13805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.387824][T14114] overlayfs: failed to resolve './file1': -2 [ 1104.014452][T13805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.601911][T13805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.608934][T13805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.869276][T13805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.731332][ T2913] bridge_slave_1: left allmulticast mode [ 1105.909103][ T2913] bridge_slave_1: left promiscuous mode [ 1106.005807][ T2913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.158637][ T2913] bridge_slave_0: left allmulticast mode [ 1106.173939][ T2913] bridge_slave_0: left promiscuous mode [ 1106.221488][ T2913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.259283][ T2913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.331287][T14152] input: syz0 as /devices/virtual/input/input22 [ 1109.390195][ T2913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.737488][ T2913] bond0 (unregistering): Released all slaves [ 1109.892486][ T54] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 1112.143064][T14037] chnl_net:caif_netlink_parms(): no params data found [ 1112.542179][T13805] hsr_slave_0: entered promiscuous mode [ 1112.905105][T13805] hsr_slave_1: entered promiscuous mode [ 1112.966527][T13805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1113.130460][T13805] Cannot create hsr debugfs directory [ 1113.963881][ T54] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1113.980911][ T54] Bluetooth: hci4: Injecting HCI hardware error event [ 1114.021177][ T5836] Bluetooth: hci4: hardware error 0x00 [ 1114.638266][ T2913] hsr_slave_0: left promiscuous mode [ 1114.713540][T14194] overlayfs: failed to resolve './file1': -2 [ 1115.512751][ T2913] hsr_slave_1: left promiscuous mode [ 1115.710188][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.839195][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.336810][ T5836] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1116.818067][T14209] overlayfs: missing 'lowerdir' [ 1117.441313][T14223] trusted_key: syz.4.1567 sent an empty control message without MSG_MORE. [ 1119.823940][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1119.839119][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1120.811261][T13389] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1120.827690][T13389] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1120.838873][T13389] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1120.848527][T13389] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1121.889302][T14245] usb usb1: usbfs: process 14245 (syz.4.1571) did not claim interface 0 before use [ 1124.471022][ T2913] team0 (unregistering): Port device team_slave_1 removed [ 1124.589051][T14268] overlayfs: failed to resolve './file1': -2 [ 1124.605004][T13389] Bluetooth: hci3: command tx timeout [ 1125.325815][ T2913] team0 (unregistering): Port device team_slave_0 removed [ 1125.695293][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.076262][T14276] loop4: detected capacity change from 0 to 128 [ 1126.088467][T14276] ext4: Unknown parameter 'noacl' [ 1126.651418][T13389] Bluetooth: hci3: command tx timeout [ 1127.918446][T14292] loop7: detected capacity change from 0 to 1024 [ 1128.769921][T13389] Bluetooth: hci3: command tx timeout [ 1129.431659][T14292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1129.445101][T14037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.511232][T14037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.518550][T14037] bridge_slave_0: entered allmulticast mode [ 1129.552528][T14037] bridge_slave_0: entered promiscuous mode [ 1129.592303][T14037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.151220][T14037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.158578][T14037] bridge_slave_1: entered allmulticast mode [ 1130.234628][T14037] bridge_slave_1: entered promiscuous mode [ 1130.811976][T13389] Bluetooth: hci3: command tx timeout [ 1130.861588][T14305] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1131.080930][T13389] Bluetooth: hci6: unexpected event for opcode 0x0c6d [ 1133.829065][ T6990] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.465698][T14341] Trying to write to read-only block-device nullb0 [ 1136.752747][T14037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.795064][T14037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.658670][T14037] team0: Port device team_slave_0 added [ 1138.981594][T14037] team0: Port device team_slave_1 added [ 1140.381615][T14037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.224322][T14037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.543485][T14037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.573662][T14037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.580689][T14037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.791286][T14037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.227738][ T30] audit: type=1800 audit(1741877880.497:101): pid=14389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1599" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1143.334557][ T36] bridge_slave_1: left allmulticast mode [ 1143.347908][ T36] bridge_slave_1: left promiscuous mode [ 1144.018614][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.126728][ T36] bridge_slave_0: left allmulticast mode [ 1144.171732][ T36] bridge_slave_0: left promiscuous mode [ 1144.177600][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.916920][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.911548][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.932371][ T36] bond0 (unregistering): Released all slaves [ 1146.785094][T14422] dccp_close: ABORT with 180 bytes unread [ 1148.778481][T14037] hsr_slave_0: entered promiscuous mode [ 1148.894837][T14037] hsr_slave_1: entered promiscuous mode [ 1149.442442][T14037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1149.450091][T14037] Cannot create hsr debugfs directory [ 1150.951271][ T36] hsr_slave_0: left promiscuous mode [ 1150.978936][ T36] hsr_slave_1: left promiscuous mode [ 1151.701866][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.863375][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1152.895450][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1153.102663][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1154.074073][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1155.175769][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1155.186822][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1155.197634][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1155.739617][T14482] usb usb9: usbfs: process 14482 (syz.4.1622) did not claim interface 0 before use [ 1157.653462][ T54] Bluetooth: hci0: command tx timeout [ 1158.645883][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1159.115688][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1159.691317][ T54] Bluetooth: hci0: command tx timeout [ 1161.890878][ T54] Bluetooth: hci0: command tx timeout [ 1162.556603][T14238] chnl_net:caif_netlink_parms(): no params data found [ 1162.978606][T14528] overlayfs: failed to clone upperpath [ 1163.961247][ T54] Bluetooth: hci0: command tx timeout [ 1164.359686][T14545] overlayfs: failed to clone upperpath [ 1165.190906][T14238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.228422][T14238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.251500][T14238] bridge_slave_0: entered allmulticast mode [ 1165.289669][T14238] bridge_slave_0: entered promiscuous mode [ 1165.329830][T14238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.367989][T14238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.401421][T14238] bridge_slave_1: entered allmulticast mode [ 1165.419108][T14238] bridge_slave_1: entered promiscuous mode [ 1166.305483][T14238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.618643][T14238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.217700][T14238] team0: Port device team_slave_0 added [ 1169.805358][T14238] team0: Port device team_slave_1 added [ 1171.395079][T14238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.445965][T14238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.826933][T14238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1171.900539][ T61] bridge_slave_1: left allmulticast mode [ 1172.072280][ T61] bridge_slave_1: left promiscuous mode [ 1172.230740][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.626424][ T61] bridge_slave_0: left allmulticast mode [ 1172.679662][ T61] bridge_slave_0: left promiscuous mode [ 1172.711423][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.292997][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.845241][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1174.199967][ T61] bond0 (unregistering): Released all slaves [ 1174.241391][T14238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.248398][T14238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.277392][T14238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.327403][T14471] chnl_net:caif_netlink_parms(): no params data found [ 1175.757195][ T61] hsr_slave_0: left promiscuous mode [ 1175.793244][ T61] hsr_slave_1: left promiscuous mode [ 1175.799272][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.909669][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.535135][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1179.381659][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1179.592137][T13389] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1179.608900][T13389] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1179.622428][T13389] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1179.638147][T13389] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1179.654574][T13389] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1179.663693][T13389] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1181.971220][ T54] Bluetooth: hci2: command tx timeout [ 1184.041275][ T54] Bluetooth: hci2: command tx timeout [ 1184.613210][T14471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.679097][T14471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.818569][T14471] bridge_slave_0: entered allmulticast mode [ 1184.852739][T14471] bridge_slave_0: entered promiscuous mode [ 1184.924575][T14471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.981047][T14471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.988671][T14471] bridge_slave_1: entered allmulticast mode [ 1185.040866][T14471] bridge_slave_1: entered promiscuous mode [ 1186.232615][ T54] Bluetooth: hci2: command tx timeout [ 1186.518026][T14471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.614399][T14471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.019876][T14471] team0: Port device team_slave_0 added [ 1187.059526][T14471] team0: Port device team_slave_1 added [ 1187.171574][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.246456][T14471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.311429][T14471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.431409][T14471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.802916][T14471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.809936][T14471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.271449][ T54] Bluetooth: hci2: command tx timeout [ 1188.629093][T14471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.109500][T14471] hsr_slave_0: entered promiscuous mode [ 1189.140141][T14471] hsr_slave_1: entered promiscuous mode [ 1189.171161][T14471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1189.180408][T14471] Cannot create hsr debugfs directory [ 1189.800981][ T61] bridge_slave_1: left allmulticast mode [ 1189.827526][ T61] bridge_slave_1: left promiscuous mode [ 1189.874130][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.930172][ T61] bridge_slave_0: left allmulticast mode [ 1189.970474][ T61] bridge_slave_0: left promiscuous mode [ 1189.998258][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.492895][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1191.527845][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1191.616233][ T61] bond0 (unregistering): Released all slaves [ 1192.561230][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1192.602082][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.492457][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1194.900268][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1196.490956][T14796] ptrace attach of "./syz-executor exec"[9905] was attempted by ""[14796] [ 1198.721024][T14812] overlayfs: failed to clone upperpath [ 1199.888804][T14646] chnl_net:caif_netlink_parms(): no params data found [ 1201.975384][T14646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.020905][T14646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.041408][T14646] bridge_slave_0: entered allmulticast mode [ 1202.061543][T14646] bridge_slave_0: entered promiscuous mode [ 1202.193966][T14646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.496822][T14646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.504954][T14646] bridge_slave_1: entered allmulticast mode [ 1202.522367][T14646] bridge_slave_1: entered promiscuous mode [ 1202.698124][T14646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.744143][T14646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.915255][T14646] team0: Port device team_slave_0 added [ 1202.933913][T14646] team0: Port device team_slave_1 added [ 1203.120550][T14859] Oops: general protection fault, probably for non-canonical address 0xffff1100e1fe5c00: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 1203.133394][T14859] KASAN: maybe wild-memory-access in range [0xfff8a8070ff2e000-0xfff8a8070ff2e007] [ 1203.142706][T14859] CPU: 0 UID: 0 PID: 14859 Comm: rm Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 1203.152806][T14859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1203.162884][T14859] RIP: 0010:refill_obj_stock+0x14e/0x610 [ 1203.168568][T14859] Code: 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 3d 04 00 00 48 8b 45 00 a8 03 0f 85 79 02 00 00 <65> 48 ff 00 e8 d9 62 ff ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df [ 1203.188213][T14859] RSP: 0018:ffffc900040df920 EFLAGS: 00010046 [ 1203.194312][T14859] RAX: ffff8880299e5c00 RBX: 0000000000039ac0 RCX: ffffffff822450b8 [ 1203.202306][T14859] RDX: 1ffffffff3582768 RSI: ffffffff8bd35960 RDI: ffffffff8dab0ce0 [ 1203.210300][T14859] RBP: ffffffff9ac13b40 R08: 0000000000000000 R09: fffffbfff2dd8598 [ 1203.218290][T14859] R10: ffffffff96ec2cc7 R11: 0000000000000002 R12: 0000000000000078 [ 1203.226282][T14859] R13: ffff8880b8639ac0 R14: ffff88802f93b300 R15: ffff8880b8639b00 [ 1203.234274][T14859] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1203.243227][T14859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1203.249833][T14859] CR2: 00007f629b63d440 CR3: 00000000250fa000 CR4: 0000000000350ef0 [ 1203.257827][T14859] Call Trace: [ 1203.261116][T14859] [ 1203.264056][T14859] ? die_addr+0x3b/0xa0 [ 1203.268255][T14859] ? exc_general_protection+0x155/0x230 [ 1203.273842][T14859] ? asm_exc_general_protection+0x26/0x30 [ 1203.279612][T14859] ? refill_obj_stock+0x108/0x610 [ 1203.284685][T14859] ? refill_obj_stock+0x14e/0x610 [ 1203.289765][T14859] __memcg_slab_free_hook+0x229/0x5a0 [ 1203.295209][T14859] kmem_cache_free+0x443/0x4d0 [ 1203.300019][T14859] ? unlink_anon_vmas+0x458/0x820 [ 1203.305106][T14859] unlink_anon_vmas+0x458/0x820 [ 1203.310001][T14859] free_pgtables+0x12c/0x950 [ 1203.314626][T14859] ? __pfx_free_pgtables+0x10/0x10 [ 1203.319774][T14859] ? lock_acquire+0x2f/0xb0 [ 1203.324319][T14859] ? exit_mmap+0x203/0xba0 [ 1203.328778][T14859] ? __pfx_down_write+0x10/0x10 [ 1203.333657][T14859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.339348][T14859] exit_mmap+0x406/0xba0 [ 1203.343631][T14859] ? __pfx_exit_mmap+0x10/0x10 [ 1203.348433][T14859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.354126][T14859] ? __pfx_mark_lock+0x10/0x10 [ 1203.358941][T14859] __mmput+0x12a/0x410 [ 1203.363056][T14859] mmput+0x62/0x70 [ 1203.366824][T14859] do_exit+0x9ba/0x2d70 [ 1203.371003][T14859] ? do_group_exit+0x1c3/0x2a0 [ 1203.375790][T14859] ? __pfx_lock_release+0x10/0x10 [ 1203.380875][T14859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.386552][T14859] ? do_raw_spin_lock+0x12d/0x2c0 [ 1203.391597][T14859] ? __pfx_do_exit+0x10/0x10 [ 1203.396224][T14859] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1203.401624][T14859] do_group_exit+0xd3/0x2a0 [ 1203.406154][T14859] __x64_sys_exit_group+0x3e/0x50 [ 1203.411205][T14859] x64_sys_call+0x151f/0x1720 [ 1203.415905][T14859] do_syscall_64+0xcd/0x250 [ 1203.420449][T14859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.426378][T14859] RIP: 0033:0x7f629b6fba90 [ 1203.430804][T14859] Code: Unable to access opcode bytes at 0x7f629b6fba66. [ 1203.437852][T14859] RSP: 002b:00007ffe225590a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1203.446288][T14859] RAX: ffffffffffffffda RBX: 00007f629b7ec860 RCX: 00007f629b6fba90 [ 1203.454309][T14859] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000 [ 1203.462301][T14859] RBP: 00007f629b7ec860 R08: 00007ffe22558f20 R09: 00007ffe22559000 [ 1203.470288][T14859] R10: 00007ffe22558f60 R11: 0000000000000246 R12: 0000000000000000 [ 1203.478277][T14859] R13: 0000000000000000 R14: 00007f629b7f0658 R15: 0000000000000001 [ 1203.486278][T14859] [ 1203.489305][T14859] Modules linked in: [ 1203.493215][T14859] ---[ end trace 0000000000000000 ]--- [ 1203.498674][T14859] RIP: 0010:refill_obj_stock+0x14e/0x610 [ 1203.504356][T14859] Code: 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 3d 04 00 00 48 8b 45 00 a8 03 0f 85 79 02 00 00 <65> 48 ff 00 e8 d9 62 ff ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df [ 1203.523996][T14859] RSP: 0018:ffffc900040df920 EFLAGS: 00010046 [ 1203.530113][T14859] RAX: ffff8880299e5c00 RBX: 0000000000039ac0 RCX: ffffffff822450b8 [ 1203.538106][T14859] RDX: 1ffffffff3582768 RSI: ffffffff8bd35960 RDI: ffffffff8dab0ce0 [ 1203.546106][T14859] RBP: ffffffff9ac13b40 R08: 0000000000000000 R09: fffffbfff2dd8598 [ 1203.554094][T14859] R10: ffffffff96ec2cc7 R11: 0000000000000002 R12: 0000000000000078 [ 1203.562103][T14859] R13: ffff8880b8639ac0 R14: ffff88802f93b300 R15: ffff8880b8639b00 [ 1203.570102][T14859] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1203.579054][T14859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1203.585658][T14859] CR2: 00007f629b63d440 CR3: 00000000250fa000 CR4: 0000000000350ef0 [ 1203.593661][T14859] Kernel panic - not syncing: Fatal exception [ 1203.599981][T14859] Kernel Offset: disabled [ 1203.604315][T14859] Rebooting in 86400 seconds..