last executing test programs: 5m30.027339738s ago: executing program 3 (id=77): r0 = eventfd2(0x76, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40015b19, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0xf, 0xef, 0x6, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0xb, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x4}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x200, 0x4, 0x8, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xd, 0xa}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x8002, 0x0) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, 0x0, 0x0) 5m26.912236005s ago: executing program 3 (id=83): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(&(0x7f0000000440)=@nullb, &(0x7f0000000300)='./cgroup\x00', &(0x7f00000001c0)='hfs\x00', 0x200480, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, 0x0, 0xc885) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) 5m24.758840676s ago: executing program 3 (id=90): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x60e02, 0x0) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x96fe, 0x10000, 0x0, 0x100002cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 5m23.390983617s ago: executing program 3 (id=94): syz_usb_connect(0x4, 0x164, &(0x7f0000000200)=ANY=[], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 5m22.787931396s ago: executing program 3 (id=99): socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250100000008000100040000002c00048005000300010000000500038270de00000080000000000000050003008f00000005000300010000000800020002"], 0x50}}, 0x40c4) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x7386bb22f0e74460) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d73590010000007f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, r5) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) 5m21.81436907s ago: executing program 3 (id=101): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(&(0x7f0000000440)=@nullb, &(0x7f0000000300)='./cgroup\x00', &(0x7f00000001c0)='hfs\x00', 0x200480, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, 0x0, 0xc885) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) 5m5.884222367s ago: executing program 32 (id=101): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(&(0x7f0000000440)=@nullb, &(0x7f0000000300)='./cgroup\x00', &(0x7f00000001c0)='hfs\x00', 0x200480, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, 0x0, 0xc885) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) 1m56.765334112s ago: executing program 5 (id=519): r0 = socket$nl_route(0x10, 0x3, 0x0) semget$private(0x0, 0x1, 0x729) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffff998, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}, {0x3, 0x2}}}, 0x24}}, 0x0) 1m53.53758837s ago: executing program 5 (id=523): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="d93c3979db996d1c840ab40697d7281cd758d64c70f852a5e15edbe646cd0f03dd2d697423615b73684c141e61752f8c91460dfe6ce21bd90f07f28c2298b4656d0797ea974269736565b91ddd7ed5ab144acb8f4c23d228b2"], 0x1c}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) openat$incfs(r3, &(0x7f0000000280)='.log\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xce, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) r5 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r5, 0x107, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000040)=ANY=[]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a0101000000000000000001000000"], 0xc0}}, 0x0) 1m38.484034174s ago: executing program 5 (id=561): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) 1m37.251834633s ago: executing program 5 (id=563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0xffffffff, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c091}, 0x9004) 1m35.964441992s ago: executing program 5 (id=566): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250100000008000100040000002c00048005000300010000000500038270de00000080000000000000050003008f00000005000300010000000800020002"], 0x50}}, 0x40c4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x7386bb22f0e74460) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d73590010000007f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, r5) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) 1m34.110078559s ago: executing program 5 (id=571): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="d93c3979db996d1c840ab40697d7281cd758d64c70f852a5e15edbe646cd0f03dd2d697423615b73684c141e61752f8c91460dfe6ce21bd90f07f28c2298b4656d0797ea974269736565b91ddd7ed5ab144acb8f4c23d228b2"], 0x1c}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) openat$incfs(r3, &(0x7f0000000280)='.log\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xce, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) r5 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r5, 0x107, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000040)=ANY=[]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a3100000000280004800800024000000002080001400000000514000300"], 0xc0}}, 0x0) 1m18.689106769s ago: executing program 33 (id=571): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="d93c3979db996d1c840ab40697d7281cd758d64c70f852a5e15edbe646cd0f03dd2d697423615b73684c141e61752f8c91460dfe6ce21bd90f07f28c2298b4656d0797ea974269736565b91ddd7ed5ab144acb8f4c23d228b2"], 0x1c}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) openat$incfs(r3, &(0x7f0000000280)='.log\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xce, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) r5 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r5, 0x107, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000040)=ANY=[]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a3100000000280004800800024000000002080001400000000514000300"], 0xc0}}, 0x0) 6.976119066s ago: executing program 2 (id=782): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x1c9, 0x0, 0x1, 0x200000000000000}, {0x7ff, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast, 0xffffffff, 0x3}}, 0xe8) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) getrlimit(0x6, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300), 0x2, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000040)=[0x2], &(0x7f0000000240)=[r4, r5], &(0x7f0000000340)}) 5.301596221s ago: executing program 1 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) kexec_load(0x4, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r2, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 5.290498471s ago: executing program 6 (id=795): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xf2ac331184bcd2e2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) 5.288868371s ago: executing program 2 (id=796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 5.084020435s ago: executing program 0 (id=798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 5.076310634s ago: executing program 2 (id=799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="c6", 0x33fe0}], 0x1}, 0xc0) 4.994408716s ago: executing program 2 (id=800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 4.920034007s ago: executing program 6 (id=801): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.851546598s ago: executing program 1 (id=802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000033bc0e00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x40047452, 0xf0ff1f00000000) 4.800559409s ago: executing program 4 (id=803): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x22) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000480)={'\x00', 0x40, 0xa, 0x1fe, 0x40000004, 0x10}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') lseek(r5, 0x2, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x58, r6, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}]}, 0x58}, 0x1, 0x40030000000000, 0x0, 0x40c0091}, 0x0) 4.531296733s ago: executing program 6 (id=804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.195703338s ago: executing program 1 (id=805): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.738828924s ago: executing program 4 (id=806): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x1c9, 0x0, 0x1, 0x200000000000000}, {0x7ff, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast, 0xffffffff, 0x3}}, 0xe8) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) getrlimit(0x6, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000040)=[0x2], &(0x7f0000000240)=[r5, r6], &(0x7f0000000340)}) 3.738400415s ago: executing program 6 (id=807): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x40c4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x7386bb22f0e74460) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d73590010000007f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, r4) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) 3.738093035s ago: executing program 0 (id=808): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) 3.295865461s ago: executing program 1 (id=809): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180500000200000000000000000000001800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 2.783430389s ago: executing program 2 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b79da42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4f000093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e63fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5649209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9eb0641fd6d5e80979a3d985089e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469f242119ad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000180)={'syzkaller0\x00', @random="110000000002"}) 2.779077439s ago: executing program 6 (id=811): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.73933762s ago: executing program 0 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x20, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001400010000000000ff94df250400008008000280ec"], 0x59}], 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fallocate(r1, 0x11, 0x9, 0xfd) shutdown(0xffffffffffffffff, 0x2) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='host1x_cdma_push\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mknodat(0xffffffffffffffff, 0x0, 0x100, 0x0) chdir(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 1.770011824s ago: executing program 4 (id=813): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1.769186214s ago: executing program 0 (id=814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) unlink(&(0x7f00000007c0)='./cgroup\x00') 1.651181636s ago: executing program 0 (id=815): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b, 0x6}}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {0x0, 0x1000, 0x80, 0xfffc}, 0x7, [0x0, 0x80000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x401, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtaction={0x20, 0x12, 0xbf68af9d17701201, 0x70bd2d, 0x25dfdbff, {0x7}, [{0x4}, {0x4}, {0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008040}, 0x4c050) syz_clone(0x51320280, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000001f80)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xadd, &(0x7f0000000380)="$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") rmdir(&(0x7f0000000200)='./file0\x00') 1.650771496s ago: executing program 6 (id=816): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x22) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000480)={'\x00', 0x40, 0xa, 0x1fe, 0x40000004, 0x10}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') lseek(r5, 0x2, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x58, r6, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}]}, 0x58}, 0x1, 0x40030000000000, 0x0, 0x40c0091}, 0x0) 1.610282746s ago: executing program 4 (id=817): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 460.569194ms ago: executing program 4 (id=818): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 391.922315ms ago: executing program 2 (id=819): socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x7c, 0xcc, 0x2d, 0x40, 0xc45, 0x62a0, 0xa822, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xed, 0xe3}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x2) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[], 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x20) 391.618284ms ago: executing program 1 (id=820): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 335.347925ms ago: executing program 4 (id=821): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x40c4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x7386bb22f0e74460) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d73590010000007f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, r4) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) 179.145927ms ago: executing program 1 (id=822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x9, 0x0, 0x0) 0s ago: executing program 0 (id=823): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x1c9, 0x0, 0x1, 0x200000000000000}, {0x7ff, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast, 0xffffffff, 0x3}}, 0xe8) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) getrlimit(0x6, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000040)=[0x2], &(0x7f0000000240)=[r5, r6], &(0x7f0000000340)}) kernel console output (not intermixed with test programs): 61:4D15.0002: unknown main item tag 0x0 [ 138.333170][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.341600][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.349629][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.357578][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.365193][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.373138][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.380942][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.388754][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.396854][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.404771][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.412493][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.420549][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.428106][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.436012][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.444374][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.452435][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.460238][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.468349][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.476287][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.483823][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.491700][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.499786][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.508182][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.516471][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.524045][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.531623][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.539730][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.548074][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.556449][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.564390][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.573590][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.581752][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.589618][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.597701][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.605872][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.613593][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.621373][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.629128][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.636763][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.644415][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.652989][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.661108][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.669008][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.677198][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.685318][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.693011][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.700430][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.708083][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.715867][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.723837][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.731938][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.739506][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.747002][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.755145][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.762938][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.770836][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.778429][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.786323][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.794745][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.802447][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.810374][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.818019][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.825887][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.833403][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.841187][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.848650][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.856674][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.864363][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.872086][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.879810][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.887579][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.895237][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.902722][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.910210][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.917725][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.925453][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.933159][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.940774][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.948296][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.957088][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.964704][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.972411][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.980085][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.987881][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 138.995577][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.003918][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.011752][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.019439][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.027002][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.034918][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.042897][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.050674][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.059450][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.067265][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.074735][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.082465][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.090115][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.097666][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.105503][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.113248][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.121017][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.129009][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.139505][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.148088][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.156134][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.164228][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.172203][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.179787][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.187233][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.195183][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.202855][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.212436][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.220094][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.227732][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.236895][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.244380][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.252273][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.259952][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.268120][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.275897][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.284037][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.292391][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.299967][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.307662][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.316200][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.323887][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.331756][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.339167][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.346982][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.354979][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.363676][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.372057][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.380097][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.387580][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.395341][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.403367][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.412504][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.420308][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.428982][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.436534][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.444093][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.452787][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.460711][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.468739][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.476454][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.484027][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.491795][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.499220][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.506902][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.514708][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.522414][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.530281][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.538181][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.545906][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.553528][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.561302][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.569318][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.577379][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.585517][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.593518][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.601476][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.609194][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.617186][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.624880][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.632718][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.640400][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.648161][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.656295][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.664083][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.672075][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.679716][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.687658][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.695246][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.703303][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.711212][ T23] hid-generic 0003:6161:4D15.0002: unknown main item tag 0x0 [ 139.892012][ T4219] usb 1-1: USB disconnect, device number 6 [ 139.912622][ T23] hid-generic 0003:6161:4D15.0002: hidraw1: USB HID v0.00 Device [HID 6161:4d15] on usb-dummy_hcd.2-1/input0 [ 140.025788][ T23] usb 3-1: USB disconnect, device number 4 [ 140.199253][ T4668] loop4: detected capacity change from 0 to 4096 [ 140.487718][ T4665] loop0: detected capacity change from 0 to 8192 [ 140.550352][ T4672] fido_id[4672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 140.665184][ T4677] ptrace attach of "./syz-executor exec"[4171] was attempted by "./syz-executor exec"[4677] [ 140.691832][ T4677] binder: 4673:4677 ioctl c0306201 2000000003c0 returned -14 [ 141.118040][ T4681] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 141.127048][ T4681] FAT-fs (loop0): Filesystem has been set read-only [ 141.594713][ T4325] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.208518][ T4325] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.338167][ T4325] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.551997][ T4325] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.892141][ T4694] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 142.954243][ T4694] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 143.263127][ T4679] chnl_net:caif_netlink_parms(): no params data found [ 143.532496][ T4217] Bluetooth: hci2: command 0x0409 tx timeout [ 144.391996][ T4716] zonefs (nullb0) ERROR: Not a zoned block device [ 145.621416][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 145.894400][ T4679] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.918132][ T4679] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.969168][ T4679] device bridge_slave_0 entered promiscuous mode [ 145.997515][ T4743] loop0: detected capacity change from 0 to 1024 [ 146.038414][ T4679] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.046330][ T4679] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.172996][ T4679] device bridge_slave_1 entered promiscuous mode [ 146.658028][ T4758] ptrace attach of "./syz-executor exec"[4171] was attempted by "./syz-executor exec"[4758] [ 146.867408][ T4679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.932782][ T4679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.994263][ T4679] team0: Port device team_slave_0 added [ 147.031509][ T4679] team0: Port device team_slave_1 added [ 147.044506][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 147.151623][ T4679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.168148][ T4679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.231243][ T4679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.588704][ T4679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.614126][ T4679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.690745][ T4159] Bluetooth: hci2: command 0x040f tx timeout [ 147.816325][ T4679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.000959][ T4679] device hsr_slave_0 entered promiscuous mode [ 148.018543][ T4679] device hsr_slave_1 entered promiscuous mode [ 148.026861][ T4679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.042709][ T4679] Cannot create hsr debugfs directory [ 148.210567][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.263324][ T4773] sctp: failed to load transform for md5: -2 [ 148.611417][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 149.737559][ T4799] sctp: failed to load transform for md5: -2 [ 149.770586][ T4217] Bluetooth: hci2: command 0x0419 tx timeout [ 150.126063][ T7] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 150.143343][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.602301][ T7] usb 5-1: config 0 has no interface number 0 [ 151.660654][ T7] usb 5-1: string descriptor 0 read error: -71 [ 151.680640][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 151.720499][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.731854][ T7] usb 5-1: config 0 descriptor?? [ 151.767429][ T7] usb 5-1: can't set config #0, error -71 [ 151.787105][ T7] usb 5-1: USB disconnect, device number 3 [ 151.862068][ T4219] Bluetooth: hci2: command 0x0405 tx timeout [ 152.477828][ T4833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.144'. [ 153.317955][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 153.368377][ T4679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.662643][ T4846] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.686870][ T4679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.744730][ T4679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.968314][ T4679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.760593][ T4325] device hsr_slave_0 left promiscuous mode [ 155.046866][ T4325] device hsr_slave_1 left promiscuous mode [ 155.056979][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.066029][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.103867][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.447226][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.701647][ T4325] device bridge_slave_1 left promiscuous mode [ 155.716448][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.816121][ T4325] device bridge_slave_0 left promiscuous mode [ 155.894797][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.943799][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.004309][ T4325] device veth1_macvtap left promiscuous mode [ 156.028792][ T4325] device veth0_macvtap left promiscuous mode [ 156.047439][ T4325] device veth1_vlan left promiscuous mode [ 156.077577][ T4325] device veth0_vlan left promiscuous mode [ 156.226858][ T4858] loop1: detected capacity change from 0 to 32768 [ 156.230519][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 156.357147][ T4858] XFS (loop1): Mounting V5 Filesystem [ 156.390891][ T21] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 156.428722][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.454579][ T21] usb 3-1: config 0 has no interface number 0 [ 156.534884][ T4858] XFS (loop1): Starting recovery (logdev: internal) [ 156.580144][ T4858] XFS (loop1): Ending recovery (logdev: internal) [ 156.619855][ T4858] XFS (loop1): Quotacheck needed: Please wait. [ 156.673906][ T4892] ptrace attach of "./syz-executor exec"[4174] was attempted by "./syz-executor exec"[4892] [ 156.690204][ T4892] binder: 4889:4892 ioctl c0306201 2000000003c0 returned -14 [ 156.697426][ T21] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 156.820836][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.829765][ T21] usb 3-1: Product: syz [ 156.834148][ T21] usb 3-1: Manufacturer: syz [ 156.841168][ T21] usb 3-1: SerialNumber: syz [ 156.886363][ T21] usb 3-1: config 0 descriptor?? [ 156.913854][ T4891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.155'. [ 156.947453][ T4858] XFS (loop1): Quotacheck: Done. [ 157.083518][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 157.138837][ T4169] XFS (loop1): Unmounting Filesystem [ 157.147298][ T23] usb 3-1: USB disconnect, device number 5 [ 157.167950][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 157.199946][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.220207][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.696649][ T4325] bond0 (unregistering): Released all slaves [ 157.697665][ T4902] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.896812][ T4904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 158.095209][ T4679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.158053][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.176651][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.199411][ T4911] loop1: detected capacity change from 0 to 256 [ 158.222980][ T4679] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.257243][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.271534][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.301151][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.308688][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.420197][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.420883][ T4911] FAT-fs (loop1): Directory bread(block 64) failed [ 158.463849][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.499616][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.513893][ T4911] FAT-fs (loop1): Directory bread(block 65) failed [ 158.534350][ T4911] FAT-fs (loop1): Directory bread(block 66) failed [ 158.567089][ T4911] FAT-fs (loop1): Directory bread(block 67) failed [ 158.604998][ T4911] FAT-fs (loop1): Directory bread(block 68) failed [ 158.645465][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.652830][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.670662][ T4911] FAT-fs (loop1): Directory bread(block 69) failed [ 158.709990][ T4911] FAT-fs (loop1): Directory bread(block 70) failed [ 158.717575][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.740637][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.748716][ T4911] FAT-fs (loop1): Directory bread(block 71) failed [ 158.750281][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.760914][ T4911] FAT-fs (loop1): Directory bread(block 72) failed [ 158.879309][ T4911] FAT-fs (loop1): Directory bread(block 73) failed [ 159.187458][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.361781][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.481601][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.564487][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.596987][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.622103][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.645974][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.666353][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.820625][ T4285] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.852375][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.040698][ T4285] usb 1-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 161.105183][ T4285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.162487][ T4285] usb 1-1: config 0 descriptor?? [ 161.189947][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.220209][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.238568][ T4285] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 161.253548][ T4679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.439637][ T4930] udc-core: couldn't find an available UDC or it's busy [ 161.473912][ T4930] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 161.530912][ T4285] gspca_sn9c20x: Write register 1000 failed -71 [ 161.544965][ T4285] gspca_sn9c20x: Device initialization failed [ 161.576731][ T4959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.165'. [ 161.657117][ T4285] gspca_sn9c20x: probe of 1-1:0.0 failed with error -71 [ 161.887202][ T4285] usb 1-1: USB disconnect, device number 7 [ 163.499128][ T4968] loop1: detected capacity change from 0 to 32768 [ 163.874685][ T4974] ptrace attach of "./syz-executor exec"[4168] was attempted by "./syz-executor exec"[4974] [ 163.889167][ T4974] binder: 4972:4974 ioctl c0306201 2000000003c0 returned -14 [ 163.970306][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 164.110241][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.134987][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.206669][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.224852][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.242524][ T4679] device veth0_vlan entered promiscuous mode [ 164.260029][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.274491][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.316244][ T4679] device veth1_vlan entered promiscuous mode [ 164.400198][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.421117][ T4285] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.433328][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 164.449956][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.462481][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.477066][ T4679] device veth0_macvtap entered promiscuous mode [ 164.524640][ T4679] device veth1_macvtap entered promiscuous mode [ 164.544529][ T4679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.560133][ T4679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.578854][ T4679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.596695][ T4679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.607015][ T4679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.623785][ T4679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.636461][ T4679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.653240][ T4679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.730889][ T4285] usb 2-1: Using ep0 maxpacket: 16 [ 164.743294][ T4679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.808512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.834094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.872818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.891936][ T4285] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 164.905293][ T4285] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.915276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.941642][ T4285] usb 2-1: config 0 has no interface number 0 [ 164.973601][ T4679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.014840][ T4679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.051418][ T4679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.106293][ T4285] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 165.119046][ T4679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.132018][ T4285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.147808][ T4679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.158731][ T4285] usb 2-1: Product: syz [ 165.177527][ T4285] usb 2-1: Manufacturer: syz [ 165.195170][ T4285] usb 2-1: SerialNumber: syz [ 165.207655][ T4679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.245740][ T4285] usb 2-1: config 0 descriptor?? [ 165.288034][ T4679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.679713][ T4679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.747613][ T4216] usb 2-1: USB disconnect, device number 3 [ 166.008983][ T4679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.087217][ T4679] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.126234][ T4679] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.136516][ T4679] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.145591][ T4679] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.172784][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.208345][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.437060][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.485318][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.527701][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.551098][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.560411][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.607990][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.890660][ T4285] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 166.899273][ T5026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.178'. [ 167.818366][ T5025] netlink: 24 bytes leftover after parsing attributes in process `syz.5.113'. [ 167.970861][ T4285] usb 2-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 167.980036][ T4285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.016356][ T4285] usb 2-1: config 0 descriptor?? [ 168.062761][ T4285] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 170.010708][ T4285] gspca_sn9c20x: Write register 1000 failed -110 [ 170.012983][ T5019] udc-core: couldn't find an available UDC or it's busy [ 170.017970][ T4285] gspca_sn9c20x: Device initialization failed [ 170.018051][ T4285] gspca_sn9c20x: probe of 2-1:0.0 failed with error -110 [ 170.063856][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 170.273774][ T5019] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 170.327344][ T5037] ptrace attach of "./syz-executor exec"[4174] was attempted by "./syz-executor exec"[5037] [ 170.339999][ T5037] binder: 5036:5037 ioctl c0306201 2000000003c0 returned -14 [ 170.385530][ T4285] usb 2-1: USB disconnect, device number 4 [ 172.176438][ T5076] Zero length message leads to an empty skb [ 173.180738][ T5082] loop4: detected capacity change from 0 to 4096 [ 173.894481][ T5091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.190'. [ 174.146221][ T5094] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.358372][ T5097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.192'. [ 176.267649][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 176.873986][ T5124] ptrace attach of "./syz-executor exec"[4171] was attempted by "./syz-executor exec"[5124] [ 176.886635][ T5124] binder: 5111:5124 ioctl c0306201 2000000003c0 returned -14 [ 177.508895][ T5133] loop4: detected capacity change from 0 to 1024 [ 179.456876][ T5151] hfsplus: xattr search failed [ 179.499003][ T5149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'. [ 179.767668][ T5157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.205'. [ 180.794162][ T5161] netlink: 32 bytes leftover after parsing attributes in process `syz.5.204'. [ 182.454804][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 183.140802][ T5179] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 183.148580][ T5179] UDF-fs: Scanning with blocksize 512 failed [ 183.171766][ T5179] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 183.179720][ T5179] UDF-fs: Scanning with blocksize 1024 failed [ 183.191216][ T5179] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 183.198832][ T5179] UDF-fs: Scanning with blocksize 2048 failed [ 183.230510][ T5179] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 183.238541][ T5179] UDF-fs: Scanning with blocksize 4096 failed [ 184.469203][ T5195] ptrace attach of "./syz-executor exec"[4679] was attempted by "./syz-executor exec"[5195] [ 184.488138][ T5191] binder: 5186:5191 ioctl c0306201 2000000003c0 returned -14 [ 184.890627][ T5202] loop5: detected capacity change from 0 to 512 [ 185.031415][ T5202] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 185.326194][ T5202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 185.528289][ T5202] System zones: 1-12 [ 185.676474][ T5202] EXT4-fs (loop5): 1 truncate cleaned up [ 185.751040][ T5202] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 185.869904][ T5212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'. [ 186.716807][ T5220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.218'. [ 186.972745][ T5224] loop2: detected capacity change from 0 to 512 [ 187.103590][ T5224] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.114956][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.221'. [ 187.172923][ T5224] EXT4-fs (loop2): 1 truncate cleaned up [ 187.185298][ T5224] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 187.275728][ T5223] loop1: detected capacity change from 0 to 8192 [ 188.324786][ T5223] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 188.333984][ T5223] FAT-fs (loop1): Filesystem has been set read-only [ 188.569185][ T5238] lo speed is unknown, defaulting to 1000 [ 188.576841][ T5238] lo speed is unknown, defaulting to 1000 [ 188.600169][ T5238] lo speed is unknown, defaulting to 1000 [ 188.634333][ T5238] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.683263][ T5238] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 188.890943][ T5238] lo speed is unknown, defaulting to 1000 [ 188.898340][ T5238] lo speed is unknown, defaulting to 1000 [ 188.906020][ T5238] lo speed is unknown, defaulting to 1000 [ 188.913561][ T5238] lo speed is unknown, defaulting to 1000 [ 188.921842][ T5238] lo speed is unknown, defaulting to 1000 [ 189.918120][ T5261] ptrace attach of "./syz-executor exec"[4679] was attempted by "./syz-executor exec"[5261] [ 189.930529][ T5261] binder: 5245:5261 ioctl c0306201 2000000003c0 returned -14 [ 191.107767][ T5266] ptrace attach of "./syz-executor exec"[4168] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 191.117333][ T5266] binder: 5252:5266 ioctl c0306201 2000000003c0 returned -14 [ 191.211386][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 191.245722][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 191.279094][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 191.340603][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 191.549638][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 191.574159][ T5281] loop1: detected capacity change from 0 to 8192 [ 191.640932][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 191.780870][ T5281] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 191.789963][ T5281] FAT-fs (loop1): Filesystem has been set read-only [ 191.812809][ T4217] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 192.312833][ T21] usb 6-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 192.361280][ T4217] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.529582][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.568821][ T4217] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.851846][ T21] usb 6-1: config 0 descriptor?? [ 192.881863][ T4217] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.932925][ T21] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 192.963144][ T4217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.134155][ T5279] udc-core: couldn't find an available UDC or it's busy [ 193.201091][ T5279] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.321215][ T21] gspca_sn9c20x: Write register 1000 failed -71 [ 193.328709][ T4217] usb 1-1: usb_control_msg returned -32 [ 193.335295][ T21] gspca_sn9c20x: Device initialization failed [ 193.341577][ T4217] usbtmc 1-1:16.0: can't read capabilities [ 193.349330][ T21] gspca_sn9c20x: probe of 6-1:0.0 failed with error -71 [ 193.375875][ T21] usb 6-1: USB disconnect, device number 2 [ 194.258381][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.264995][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.369184][ T5325] ptrace attach of "./syz-executor exec"[4679] was attempted by "./syz-executor exec"[5325] [ 194.381556][ T5325] binder: 5321:5325 ioctl c0306201 2000000003c0 returned -14 [ 195.329764][ T4215] usb 1-1: USB disconnect, device number 8 [ 195.725933][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 195.843332][ T5357] netlink: 24 bytes leftover after parsing attributes in process `syz.5.248'. [ 196.320842][ T4215] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 196.551153][ T5359] loop0: detected capacity change from 0 to 1024 [ 196.640674][ T4215] usb 5-1: Using ep0 maxpacket: 16 [ 196.753865][ T5359] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.781026][ T4215] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 196.793592][ T26] audit: type=1800 audit(1747182402.948:4): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.251" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 197.150668][ T4215] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.170501][ T4215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.179116][ T4215] usb 5-1: Product: syz [ 197.183843][ T5376] ptrace attach of "./syz-executor exec"[4169] was attempted by "./syz-executor exec"[5376] [ 197.195814][ T5376] binder: 5372:5376 ioctl c0306201 2000000003c0 returned -14 [ 197.230887][ T4215] usb 5-1: Manufacturer: syz [ 197.235837][ T4215] usb 5-1: SerialNumber: syz [ 197.261251][ T4215] usb 5-1: config 0 descriptor?? [ 197.500988][ T21] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 197.870635][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.495461][ T21] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.509084][ T21] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.518679][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.783172][ T21] usb 1-1: usb_control_msg returned -32 [ 198.789472][ T21] usbtmc 1-1:16.0: can't read capabilities [ 198.812693][ T5395] ptrace attach of "./syz-executor exec"[4169] was attempted by " Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 198.814614][ T5395] binder: 5392:5395 ioctl c0306201 2000000003c0 returned -14 [ 198.860912][ T4217] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 199.081845][ T21] usb 5-1: USB disconnect, device number 4 [ 199.710612][ T4217] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.174356][ T5401] input: syz0 as /devices/virtual/input/input6 [ 202.055936][ T4217] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 202.737110][ T4217] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 202.747196][ T4217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.031655][ T4217] usb 3-1: config 0 descriptor?? [ 204.261320][ T4159] usb 1-1: USB disconnect, device number 9 [ 204.480945][ T4217] usb 3-1: can't set config #0, error -71 [ 204.541565][ T4217] usb 3-1: USB disconnect, device number 6 [ 205.027435][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 205.356461][ T5434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.264'. [ 206.189158][ T5436] ptrace attach of "./syz-executor exec"[4174] was attempted by "./syz-executor exec"[5436] [ 206.244772][ T5441] binder: 5431:5441 ioctl c0306201 2000000003c0 returned -14 [ 207.461532][ T5451] ptrace attach of "./syz-executor exec"[4168] was attempted by " Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 207.463223][ T5451] binder: 5450:5451 ioctl c0306201 2000000003c0 returned -14 [ 207.554544][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.282917][ T5464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.273'. [ 208.467051][ T5456] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 208.519152][ T5456] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 208.604002][ T5474] input: syz0 as /devices/virtual/input/input7 [ 211.550988][ T5492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.277'. [ 212.371518][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 213.962761][ T5506] ptrace attach of "./syz-executor exec"[4174] was attempted by " Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 213.964556][ T5506] binder: 5500:5506 ioctl c0306201 2000000003c0 returned -14 [ 214.640605][ T5519] ptrace attach of "./syz-executor exec"[4174] was attempted by "./syz-executor exec"[5519] [ 214.652932][ T5519] binder: 5513:5519 ioctl c0306201 2000000003c0 returned -14 [ 215.173305][ T5522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.284'. [ 215.471010][ T5530] input: syz0 as /devices/virtual/input/input8 [ 217.774554][ T5540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.289'. [ 219.879986][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 221.154680][ T5578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.298'. [ 222.757022][ T5608] netlink: 24 bytes leftover after parsing attributes in process `syz.5.304'. [ 222.846537][ T5609] x_tables: ip_tables: osf match: only valid for protocol 6 [ 224.195966][ T5625] loop5: detected capacity change from 0 to 512 [ 224.254410][ T5625] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.357006][ T5625] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 224.450291][ T5625] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 224.497223][ T5625] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 224.539516][ T5625] System zones: 0-2, 18-18, 34-34 [ 224.624365][ T5625] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 224.677686][ T5625] EXT4-fs (loop5): 1 truncate cleaned up [ 224.702463][ T5625] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.951717][ T26] audit: type=1800 audit(1747182431.098:5): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.307" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 225.029386][ T26] audit: type=1800 audit(1747182431.148:6): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.307" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 225.098597][ T26] audit: type=1800 audit(1747182431.248:7): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.307" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 226.591757][ T5638] netlink: 24 bytes leftover after parsing attributes in process `syz.5.309'. [ 227.174681][ T5661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.316'. [ 227.770550][ T1107] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 227.866020][ T5673] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.026276][ T5677] loop2: detected capacity change from 0 to 1024 [ 228.076050][ T5677] EXT4-fs (loop2): Ignoring removed bh option [ 228.092967][ T5677] EXT4-fs (loop2): inline encryption not supported [ 228.098387][ T5673] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.121514][ T5677] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 228.125170][ T5682] loop1: detected capacity change from 0 to 512 [ 228.159246][ T5677] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.320: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.198580][ T5677] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 228.240619][ T5677] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.320: lblock 0 mapped to illegal pblock 48 (length 1) [ 228.263250][ T5673] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.280833][ T5682] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.301901][ T5677] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 228.321252][ T1107] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 228.336959][ T5682] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.359652][ T5677] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.320: Failed to acquire dquot type 0 [ 228.364086][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.380260][ T5677] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 228.398032][ T5677] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.320: mark_inode_dirty error [ 228.420551][ T5677] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 228.437479][ T5677] EXT4-fs (loop2): 1 orphan inode deleted [ 228.444038][ T5677] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,dioread_lock,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 228.471068][ T154] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 228.500101][ T1107] usb 6-1: Product: syz [ 228.501302][ T154] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 228.530269][ T154] EXT4-fs error (device loop2): ext4_release_dquot:6240: comm kworker/u4:2: Failed to release dquot type 0 [ 228.543983][ T1107] usb 6-1: Manufacturer: syz [ 228.548843][ T1107] usb 6-1: SerialNumber: syz [ 228.644910][ T1107] usb 6-1: config 0 descriptor?? [ 228.702122][ T5677] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 228.800250][ T1107] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 229.914988][ T5673] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.050833][ T1107] gspca_sunplus: reg_r err -110 [ 231.341359][ T1107] sunplus: probe of 6-1:0.0 failed with error -110 [ 231.589852][ T5695] usb 6-1: USB disconnect, device number 3 [ 231.847274][ T5708] loop5: detected capacity change from 0 to 2048 [ 231.926707][ T5673] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.382739][ T5708] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.421004][ T5673] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.685990][ T5673] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.717745][ T5673] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.312439][ T5727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.328'. [ 234.691174][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 235.131004][ T13] usb 3-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 235.150848][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.253773][ T13] usb 3-1: config 0 descriptor?? [ 235.259657][ T5754] process 'syz.1.332' launched './file0' with NULL argv: empty string added [ 235.322914][ T13] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 235.545377][ T5728] udc-core: couldn't find an available UDC or it's busy [ 235.583503][ T5728] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 235.680458][ T13] gspca_sn9c20x: Write register 1000 failed -71 [ 235.687010][ T13] gspca_sn9c20x: Device initialization failed [ 235.695877][ T13] gspca_sn9c20x: probe of 3-1:0.0 failed with error -71 [ 235.705164][ T13] usb 3-1: USB disconnect, device number 7 [ 235.789853][ T5765] ptrace attach of "./syz-executor exec"[4679] was attempted by "./syz-executor exec"[5765] [ 235.822403][ T5765] binder: 5761:5765 ioctl c0306201 2000000003c0 returned -14 [ 236.517156][ T5772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.339'. [ 236.725598][ T5777] loop2: detected capacity change from 0 to 2048 [ 236.926460][ T5790] loop1: detected capacity change from 0 to 2048 [ 237.077853][ T5790] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.712339][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.343'. [ 237.747320][ T5777] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 237.780819][ T5777] NILFS (loop2): mounting unchecked fs [ 237.833777][ T4265] udevd[4265]: incorrect nilfs2 checksum on /dev/loop2 [ 237.861948][ T5777] NILFS (loop2): recovery complete [ 237.944745][ T5797] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.767411][ T5825] ptrace attach of "./syz-executor exec"[4679] was attempted by "./syz-executor exec"[5825] [ 240.791781][ T5825] binder: 5818:5825 ioctl c0306201 2000000003c0 returned -14 [ 241.255122][ T5824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 241.584907][ T5695] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 242.546243][ T5695] usb 6-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 242.578483][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 242.584385][ T5822] loop0: detected capacity change from 0 to 32768 [ 242.594868][ T5695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.614236][ T5695] usb 6-1: config 0 descriptor?? [ 242.669240][ T5695] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 242.729707][ T5822] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.351 (5822) [ 242.877961][ T5828] udc-core: couldn't find an available UDC or it's busy [ 242.893129][ T5822] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 242.900359][ T5828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 242.913791][ T5822] BTRFS info (device loop0): setting nodatacow, compression disabled [ 242.965775][ T5695] gspca_sn9c20x: Write register 1000 failed -71 [ 242.975147][ T5695] gspca_sn9c20x: Device initialization failed [ 242.997922][ T5695] gspca_sn9c20x: probe of 6-1:0.0 failed with error -71 [ 243.007553][ T5822] BTRFS info (device loop0): enabling auto defrag [ 243.025570][ T5822] BTRFS info (device loop0): max_inline at 0 [ 243.044819][ T5822] BTRFS info (device loop0): using free space tree [ 243.063503][ T5695] usb 6-1: USB disconnect, device number 4 [ 243.089937][ T5822] BTRFS info (device loop0): has skinny extents [ 244.294365][ T5878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.364'. [ 244.384214][ T5884] ptrace attach of "./syz-executor exec"[4168] was attempted by "./syz-executor exec"[5884] [ 244.403709][ T5884] binder: 5875:5884 ioctl c0306201 2000000003c0 returned -14 [ 246.092514][ T5822] BTRFS error (device loop0): open_ctree failed: -22 [ 246.210207][ T4265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4265) [ 247.021869][ T13] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 247.454273][ T13] usb 1-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 247.495918][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.688712][ T13] usb 1-1: config 0 descriptor?? [ 247.744340][ T13] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 248.184615][ T5917] udc-core: couldn't find an available UDC or it's busy [ 248.296486][ T5917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 248.530663][ T13] gspca_sn9c20x: Write register 1000 failed -71 [ 248.539330][ T13] gspca_sn9c20x: Device initialization failed [ 248.578715][ T13] gspca_sn9c20x: probe of 1-1:0.0 failed with error -71 [ 248.596473][ T13] usb 1-1: USB disconnect, device number 10 [ 248.880924][ T4278] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 249.200549][ T4278] usb 6-1: Using ep0 maxpacket: 16 [ 249.340882][ T4278] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 249.467262][ T5931] ptrace attach of "./syz-executor exec"[4168] was attempted by "./syz-executor exec"[5931] [ 249.486591][ T5931] binder: 5928:5931 ioctl c0306201 2000000003c0 returned -14 [ 250.002309][ T4278] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.019785][ T4278] usb 6-1: config 0 has no interface number 0 [ 250.031119][ T5942] loop4: detected capacity change from 0 to 256 [ 250.038961][ T5936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.378'. [ 250.853682][ C1] vcan0: j1939_simple_recv: Received already invalidated message [ 251.179060][ T4278] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 251.190240][ T4278] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.201070][ T4278] usb 6-1: config 0 descriptor?? [ 251.226051][ T4278] usb 6-1: can't set config #0, error -71 [ 251.407163][ T4278] usb 6-1: USB disconnect, device number 5 [ 254.148007][ T4285] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 254.829357][ T5982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.393'. [ 255.140889][ T4285] usb 6-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 255.350737][ T26] audit: type=1326 audit(1747182461.498:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.0.396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b163fc969 code=0x0 [ 255.693207][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.700184][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.230975][ T4285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.246418][ T4285] usb 6-1: config 0 descriptor?? [ 256.269093][ T5986] loop2: detected capacity change from 0 to 4096 [ 256.293166][ T4285] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 256.546307][ T5976] udc-core: couldn't find an available UDC or it's busy [ 256.585478][ T5976] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 257.104913][ T4285] gspca_sn9c20x: Write register 1000 failed -110 [ 257.120538][ T4285] gspca_sn9c20x: Device initialization failed [ 257.128399][ T4285] gspca_sn9c20x: probe of 6-1:0.0 failed with error -110 [ 257.171425][ T5695] usb 6-1: USB disconnect, device number 6 [ 258.280742][ T4285] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 259.315202][ T4285] usb 3-1: Using ep0 maxpacket: 16 [ 259.397455][ T6015] blktrace: Concurrent blktraces are not allowed on loop0 [ 260.000647][ T4285] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 260.019425][ T4285] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.219327][ T4285] usb 3-1: config 0 has no interface number 0 [ 261.057024][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.5.404'. [ 261.160876][ T4285] usb 3-1: string descriptor 0 read error: -71 [ 261.349832][ T4285] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 261.407190][ T4285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.497605][ T4285] usb 3-1: config 0 descriptor?? [ 261.540707][ T4285] usb 3-1: can't set config #0, error -71 [ 261.586682][ T4285] usb 3-1: USB disconnect, device number 8 [ 261.764271][ T6038] loop2: detected capacity change from 0 to 1024 [ 262.759497][ T6038] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 263.167068][ T6048] ptrace attach of "./syz-executor exec"[4168] was attempted by "./syz-executor exec"[6048] [ 263.187919][ T6048] binder: 6045:6048 ioctl 4018620d 0 returned -22 [ 263.201840][ T6048] binder: 6045:6048 ioctl c0306201 2000000003c0 returned -14 [ 264.137884][ T6053] ptrace attach of "./syz-executor exec"[4168] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 264.140257][ T6053] binder: 6051:6053 ioctl c0306201 2000000003c0 returned -14 [ 265.215235][ T26] audit: type=1400 audit(1747182470.708:9): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6054 comm="syz.5.414" [ 266.456044][ T6067] input: syz0 as /devices/virtual/input/input9 [ 266.588608][ T6067] loop5: detected capacity change from 0 to 2048 [ 266.610502][ T4217] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 268.034508][ T4253] Bluetooth: hci2: command 0x0406 tx timeout [ 268.181060][ T6068] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.235177][ T6067] NILFS error (device loop5): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 268.265043][ T6067] Remounting filesystem read-only [ 270.815610][ T6082] netlink: 24 bytes leftover after parsing attributes in process `syz.5.418'. [ 270.929834][ T6088] binder: 6087:6088 ioctl c0306201 0 returned -14 [ 271.011137][ T6092] ieee802154 phy0 wpan0: encryption failed: -22 [ 274.423370][ T6111] loop5: detected capacity change from 0 to 512 [ 274.619215][ T6111] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 274.701575][ T6111] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.724938][ T6120] input: syz0 as /devices/virtual/input/input10 [ 274.898852][ T6120] loop2: detected capacity change from 0 to 2048 [ 276.246227][ T6121] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.289161][ T6120] NILFS error (device loop2): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 276.326026][ T6120] Remounting filesystem read-only [ 276.811622][ T21] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 277.054195][ T6131] ptrace attach of "./syz-executor exec"[4171] was attempted by "./syz-executor exec"[6131] [ 277.079902][ T6131] binder: 6126:6131 ioctl 4018620d 0 returned -22 [ 277.090696][ T6131] binder: 6126:6131 ioctl c0306201 2000000003c0 returned -14 [ 277.867869][ T6136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.435'. [ 277.900567][ T21] usb 1-1: device not accepting address 11, error -71 [ 278.063926][ T6137] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 279.539136][ T6130] loop4: detected capacity change from 0 to 32768 [ 280.229574][ T6130] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 280.258716][ T6130] BTRFS info (device loop4): setting nodatacow, compression disabled [ 280.287627][ T6130] BTRFS info (device loop4): force zlib compression, level 3 [ 280.310022][ T6130] BTRFS info (device loop4): setting nodatacow [ 280.341524][ T6130] BTRFS info (device loop4): turning off barriers [ 280.389360][ T6130] BTRFS info (device loop4): turning on flush-on-commit [ 280.457699][ T6130] BTRFS info (device loop4): doing ref verification [ 280.521388][ T6130] BTRFS info (device loop4): force clearing of disk cache [ 280.590866][ T6130] BTRFS info (device loop4): enabling ssd optimizations [ 280.598869][ T6130] BTRFS info (device loop4): max_inline at 4096 [ 280.690784][ T6130] BTRFS info (device loop4): using free space tree [ 280.853690][ T6130] BTRFS info (device loop4): has skinny extents [ 281.024450][ T6162] loop5: detected capacity change from 0 to 4096 [ 281.098520][ T6162] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 283.048423][ T6163] input: syz0 as /devices/virtual/input/input11 [ 283.321606][ T6165] loop2: detected capacity change from 0 to 2048 [ 285.552938][ T6167] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.704443][ T6163] NILFS error (device loop2): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 285.728821][ T6163] Remounting filesystem read-only [ 286.578855][ T6130] BTRFS error (device loop4): open_ctree failed: -12 [ 286.977848][ T6193] binder: BINDER_SET_CONTEXT_MGR already set [ 287.103557][ T6199] binder: 6192:6199 ioctl c0306201 2000000003c0 returned -14 [ 287.110318][ T6193] binder: 6192:6193 ioctl 4018620d 200000000040 returned -16 [ 287.920625][ T6205] ptrace attach of "./syz-executor exec"[4171] was attempted by "./syz-executor exec"[6205] [ 288.330618][ T6205] binder: 6197:6205 ioctl c0306201 0 returned -14 [ 288.837707][ T6209] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 289.036151][ T4285] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 290.280996][ T6213] loop2: detected capacity change from 0 to 4096 [ 290.405670][ T6219] loop4: detected capacity change from 0 to 64 [ 290.439544][ T6213] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 290.571184][ T4285] usb 6-1: device not accepting address 7, error -71 [ 291.713864][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.454'. [ 292.557973][ T6235] blktrace: Concurrent blktraces are not allowed on loop8 [ 293.817461][ T6242] loop5: detected capacity change from 0 to 256 [ 294.157241][ T6233] input: syz0 as /devices/virtual/input/input12 [ 294.182489][ T6242] FAT-fs (loop5): Directory bread(block 64) failed [ 294.199250][ T6242] FAT-fs (loop5): Directory bread(block 65) failed [ 294.209467][ T6242] FAT-fs (loop5): Directory bread(block 66) failed [ 294.219696][ T6242] FAT-fs (loop5): Directory bread(block 67) failed [ 294.227921][ T6242] FAT-fs (loop5): Directory bread(block 68) failed [ 294.240970][ T6242] FAT-fs (loop5): Directory bread(block 69) failed [ 294.249098][ T6242] FAT-fs (loop5): Directory bread(block 70) failed [ 294.258204][ T6242] FAT-fs (loop5): Directory bread(block 71) failed [ 294.270298][ T6242] FAT-fs (loop5): Directory bread(block 72) failed [ 294.284731][ T6242] FAT-fs (loop5): Directory bread(block 73) failed [ 294.374618][ T6234] loop0: detected capacity change from 0 to 2048 [ 296.532546][ T6234] NILFS (loop0): error -4 creating segctord thread [ 296.834799][ T6254] ptrace attach of "./syz-executor exec"[4679] was attempted by "./syz-executor exec"[6254] [ 296.859826][ T6254] binder: 6251:6254 ioctl c0306201 0 returned -14 [ 299.560792][ T5407] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 299.840686][ T5407] usb 6-1: Using ep0 maxpacket: 16 [ 299.971179][ T5407] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 300.022179][ T5407] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.076249][ T5407] usb 6-1: config 0 has no interface number 0 [ 300.341766][ T5407] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 300.469330][ T5407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.521011][ T5407] usb 6-1: Product: syz [ 300.560220][ T5407] usb 6-1: Manufacturer: syz [ 300.579304][ T5407] usb 6-1: SerialNumber: syz [ 300.597308][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 300.626374][ T5407] usb 6-1: config 0 descriptor?? [ 300.925493][ T5695] usb 6-1: USB disconnect, device number 9 [ 302.324185][ T6295] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 302.586840][ T6299] blktrace: Concurrent blktraces are not allowed on loop8 [ 303.913606][ T6306] ptrace attach of "./syz-executor exec"[4171] was attempted by "./syz-executor exec"[6306] [ 303.926584][ T6306] binder: 6303:6306 ioctl c0306201 0 returned -14 [ 309.679411][ T6327] netlink: 100 bytes leftover after parsing attributes in process `syz.1.478'. [ 310.322875][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 310.861199][ T2856] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 311.921001][ T2856] usb 1-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 311.940634][ T2856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.016785][ T2856] usb 1-1: config 0 descriptor?? [ 312.062791][ T2856] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 312.274918][ T6339] udc-core: couldn't find an available UDC or it's busy [ 312.306114][ T6339] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 312.636250][ T2856] gspca_sn9c20x: Write register 1000 failed -110 [ 312.721787][ T2856] gspca_sn9c20x: Device initialization failed [ 312.755210][ T2856] gspca_sn9c20x: probe of 1-1:0.0 failed with error -110 [ 312.824791][ T2856] usb 1-1: USB disconnect, device number 13 [ 314.816656][ T6359] loop5: detected capacity change from 0 to 8192 [ 315.946490][ T6374] lo speed is unknown, defaulting to 1000 [ 316.328259][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 316.519956][ T6385] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 316.530710][ T6385] FAT-fs (loop5): Filesystem has been set read-only [ 317.821676][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.829789][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.150494][ T2856] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 318.450696][ T2856] usb 6-1: Using ep0 maxpacket: 8 [ 318.760983][ T2856] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 318.929197][ T2856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.940774][ T2856] usb 6-1: Product: syz [ 318.946239][ T2856] usb 6-1: Manufacturer: syz [ 318.954070][ T2856] usb 6-1: SerialNumber: syz [ 319.841006][ T2856] usb 6-1: config 0 descriptor?? [ 320.648836][ T2856] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 320.788046][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.501'. [ 321.800599][ T2856] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 322.668898][ T6425] bond1 (unregistering): Released all slaves [ 322.967172][ T6437] ptrace attach of "./syz-executor exec"[4174] was attempted by "./syz-executor exec"[6437] [ 323.000090][ T6437] binder: 6433:6437 ioctl c0306201 2000000003c0 returned -14 [ 323.651821][ T4216] usb 6-1: USB disconnect, device number 10 [ 324.140627][ T2856] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 324.430947][ T2856] usb 5-1: Using ep0 maxpacket: 16 [ 324.791458][ T6440] loop0: detected capacity change from 0 to 8192 [ 324.990579][ T2856] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 325.020776][ T2856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.051242][ T2856] usb 5-1: Product: syz [ 325.055731][ T2856] usb 5-1: Manufacturer: syz [ 325.066136][ T2856] usb 5-1: SerialNumber: syz [ 325.121978][ T2856] r8152-cfgselector 5-1: config 0 descriptor?? [ 325.780659][ T2856] r8152-cfgselector 5-1: Unknown version 0x0000 [ 325.804561][ T2856] r8152-cfgselector 5-1: bad CDC descriptors [ 325.891474][ T2856] r8152-cfgselector 5-1: Unknown version 0x0000 [ 325.955829][ T2856] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 326.403863][ T6461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 327.118514][ T6463] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 328.220739][ T6476] ptrace attach of "./syz-executor exec"[4171] was attempted by "./syz-executor exec"[6476] [ 328.630621][ T6476] binder: 6466:6476 ioctl c0306201 2000000003c0 returned -14 [ 331.752038][ T4216] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 332.846212][ T6503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.526'. [ 334.044039][ T6511] ptrace attach of "./syz-executor exec"[4168] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 334.045264][ T6511] binder: 6504:6511 ioctl c0306201 2000000003c0 returned -14 [ 336.370494][ T4215] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 336.399213][ T6537] blktrace: Concurrent blktraces are not allowed on loop0 [ 337.251710][ T6546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.539'. [ 337.360678][ T4215] usb 3-1: Using ep0 maxpacket: 8 [ 337.750165][ T4215] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 337.770582][ T4215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.786042][ T4215] usb 3-1: Product: syz [ 337.800549][ T4215] usb 3-1: Manufacturer: syz [ 337.805848][ T4215] usb 3-1: SerialNumber: syz [ 337.871406][ T6555] ptrace attach of "./syz-executor exec"[4168] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 337.877088][ T6555] binder: 6547:6555 ioctl c0306201 2000000003c0 returned -14 [ 338.191362][ T4215] usb 3-1: config 0 descriptor?? [ 338.270929][ T4215] usb 3-1: can't set config #0, error -71 [ 338.337719][ T4215] usb 3-1: USB disconnect, device number 10 [ 340.614451][ T6574] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 340.623682][ T6574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.633029][ T6574] vhci_hcd vhci_hcd.0: Device attached [ 340.642277][ T6575] vhci_hcd: connection closed [ 340.653077][ T4264] vhci_hcd: stop threads [ 341.150526][ T4264] vhci_hcd: release socket [ 341.196211][ T4264] vhci_hcd: disconnect device [ 342.150601][ T6583] loop2: detected capacity change from 0 to 2048 [ 342.802050][ T4265] Alternate GPT is invalid, using primary GPT. [ 342.868429][ T4265] loop2: p1 p2 p3 [ 343.711959][ T6592] blktrace: Concurrent blktraces are not allowed on loop0 [ 343.771088][ T6583] Alternate GPT is invalid, using primary GPT. [ 343.801544][ T6583] loop2: p1 p2 p3 [ 343.964044][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.552'. [ 344.051012][ T21] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 344.930502][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 345.218531][ T21] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 345.218610][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.218678][ T21] usb 5-1: Product: syz [ 345.218739][ T21] usb 5-1: Manufacturer: syz [ 345.218798][ T21] usb 5-1: SerialNumber: syz [ 345.316146][ T21] usb 5-1: config 0 descriptor?? [ 347.220783][ T21] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 347.312159][ T21] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -110 [ 347.475989][ T6616] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 347.484082][ T6616] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 347.493225][ T6616] vhci_hcd vhci_hcd.0: Device attached [ 347.641617][ T21] usb 5-1: USB disconnect, device number 7 [ 348.158916][ T6617] vhci_hcd: connection closed [ 348.166381][ T5720] vhci_hcd: stop threads [ 348.253304][ T5720] vhci_hcd: release socket [ 348.280641][ T4159] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 348.356063][ T5720] vhci_hcd: disconnect device [ 348.686592][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 348.686863][ T4332] udevd[4332]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 348.704687][ T4273] udevd[4273]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 348.855817][ T4273] udevd[4273]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 348.855942][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 349.076460][ T4332] udevd[4332]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 349.911224][ T6629] blktrace: Concurrent blktraces are not allowed on loop4 [ 350.355258][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.5.566'. [ 350.935398][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 350.949070][ T4273] udevd[4273]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 350.983896][ T6645] ptrace attach of "./syz-executor exec"[4174] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 350.985135][ T6645] binder: 6639:6645 ioctl c0306201 2000000003c0 returned -14 [ 351.082698][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.116639][ T4332] udevd[4332]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 351.855001][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 352.887604][ T6664] loop1: detected capacity change from 0 to 2048 [ 353.427348][ T6664] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 353.461046][ T4159] vhci_hcd: vhci_device speed not set [ 353.544838][ T6671] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 353.552389][ T6671] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 353.564322][ T6671] vhci_hcd vhci_hcd.0: Device attached [ 353.936357][ T6672] vhci_hcd: connection closed [ 353.938927][ T4264] vhci_hcd: stop threads [ 354.461058][ T6664] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.497464][ T4264] vhci_hcd: release socket [ 354.663979][ T4264] vhci_hcd: disconnect device [ 355.872527][ T6686] blktrace: Concurrent blktraces are not allowed on loop8 [ 357.931235][ T6693] ptrace attach of "./syz-executor exec"[4169] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 357.943693][ T6693] binder: 6690:6693 ioctl 4018620d 0 returned -22 [ 358.052091][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.079794][ T6693] binder: 6690:6693 ioctl c0306201 2000000003c0 returned -14 [ 358.764503][ T26] audit: type=1400 audit(1747182564.918:10): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6695 comm="syz.1.580" [ 359.813486][ T6704] loop1: detected capacity change from 0 to 2048 [ 361.298265][ T6704] NILFS (loop1): unrecognized mount option "" [ 363.174605][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 365.717438][ T6743] netlink: 'syz.0.589': attribute type 1 has an invalid length. [ 366.818664][ T6747] ptrace attach of "./syz-executor exec"[4168] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 366.820531][ T6747] binder: 6746:6747 ioctl 4018620d 0 returned -22 [ 366.911804][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.927698][ T6747] binder: 6746:6747 ioctl c0306201 2000000003c0 returned -14 [ 367.565314][ T6761] loop1: detected capacity change from 0 to 1024 [ 368.675875][ T6761] EXT4-fs (loop1): error: journal path ./file0 is not a block device [ 371.213570][ T6776] loop0: detected capacity change from 0 to 2048 [ 371.356434][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz.4.600'. [ 372.248927][ T6785] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.747070][ T26] audit: type=1400 audit(1747182578.698:11): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6786 comm="syz.4.602" [ 373.240933][ T6794] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 373.250457][ T6794] Remounting filesystem read-only [ 374.238797][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 374.287203][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 374.932076][ T6812] ptrace attach of "./syz-executor exec"[4174] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 374.934622][ T6812] binder: 6806:6812 ioctl 4018620d 0 returned -22 [ 375.041000][ T6812] binder: 6806:6812 ioctl c0306201 2000000003c0 returned -14 [ 375.671630][ T6779] lo speed is unknown, defaulting to 1000 [ 376.967848][ T4215] Bluetooth: hci5: command 0x041b tx timeout [ 379.224583][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.351965][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.467865][ T4215] Bluetooth: hci5: command 0x040f tx timeout [ 380.643459][ T6164] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.762644][ T6164] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.618485][ T6164] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.832268][ T6779] chnl_net:caif_netlink_parms(): no params data found [ 381.941734][ T6854] ptrace attach of "./syz-executor exec"[4174] was attempted by "./syz-executor exec"[6854] [ 381.965717][ T6854] binder: 6850:6854 ioctl c0306201 2000000003c0 returned -14 [ 383.355207][ T5695] Bluetooth: hci5: command 0x0419 tx timeout [ 383.413173][ T6861] syz.2.621 uses obsolete (PF_INET,SOCK_PACKET) [ 383.583135][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 383.594277][ T6164] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.239599][ T6868] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 384.246263][ T6868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.254487][ T6868] vhci_hcd vhci_hcd.0: Device attached [ 384.361063][ T6869] vhci_hcd: connection closed [ 384.362156][ T4339] vhci_hcd: stop threads [ 384.452333][ T4339] vhci_hcd: release socket [ 384.530617][ T4277] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 384.586569][ T4339] vhci_hcd: disconnect device [ 386.511146][ T5695] Bluetooth: hci5: command 0x0405 tx timeout [ 386.636515][ T6896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.625'. [ 387.369477][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.381643][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.070503][ T6779] device bridge_slave_0 entered promiscuous mode [ 388.189219][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.202154][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.218841][ T6779] device bridge_slave_1 entered promiscuous mode [ 388.673200][ T6913] ptrace attach of "./syz-executor exec"[4174] was attempted by "./syz-executor exec"[6913] [ 388.735953][ T6913] binder: 6905:6913 ioctl c0306201 2000000003c0 returned -14 [ 389.971951][ T4277] vhci_hcd: vhci_device speed not set [ 392.679857][ T6779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.761292][ T6779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.024611][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 393.295522][ T6936] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 393.302377][ T6936] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 393.311037][ T6936] vhci_hcd vhci_hcd.0: Device attached [ 394.128961][ T6937] vhci_hcd: connection closed [ 394.234817][ T4264] vhci_hcd: stop threads [ 394.389410][ T4264] vhci_hcd: release socket [ 394.440579][ T4264] vhci_hcd: disconnect device [ 394.753005][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.639'. [ 394.950956][ T4230] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 395.270463][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 395.665307][ T4230] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 395.743449][ T6963] ptrace attach of "./syz-executor exec"[4169] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 395.755589][ T6963] binder: 6957:6963 ioctl c0306201 0 returned -14 [ 396.074166][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.282801][ T4230] usb 5-1: config 0 descriptor?? [ 396.352824][ T4230] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 396.518357][ T6973] IPVS: sh: UDP 224.0.0.2:20004 - no destination available [ 396.561736][ T4230] gspca_vc032x: reg_r err -71 [ 396.566752][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.328710][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.334421][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.361412][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.377961][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.387983][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.432234][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 400.591098][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.597197][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.602579][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.616163][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.640560][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.646023][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.662010][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.686012][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.686028][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.686035][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.686042][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.686049][ T4230] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.686055][ T4230] gspca_vc032x: Unknown sensor... [ 400.686097][ T4230] vc032x: probe of 5-1:0.0 failed with error -22 [ 400.763341][ T4230] usb 5-1: USB disconnect, device number 8 [ 400.783532][ T6779] team0: Port device team_slave_0 added [ 400.806487][ T6779] team0: Port device team_slave_1 added [ 401.575361][ T6995] netlink: 'syz.1.653': attribute type 4 has an invalid length. [ 401.596681][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.610891][ T6996] loop6: detected capacity change from 0 to 524287999 [ 401.645520][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.682915][ T6779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.696363][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.707696][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 401.742729][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 401.753761][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 401.879126][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.893021][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.955269][ T6779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.982938][ T7006] ptrace attach of "./syz-executor exec"[4169] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 402.455978][ T7008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.655'. [ 402.712338][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.724073][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.763643][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.774721][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.839809][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.851009][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.867662][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.879034][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.895731][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.907157][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.915656][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.927459][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.936330][ T4265] ldm_validate_partition_table(): Disk read failed. [ 402.957217][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.968358][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 402.990568][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 403.001820][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.014857][ T6779] device hsr_slave_0 entered promiscuous mode [ 403.175670][ T4265] Dev loop6: unable to read RDB block 0 [ 403.186501][ T4265] loop6: unable to read partition table [ 403.194570][ T6779] device hsr_slave_1 entered promiscuous mode [ 403.201904][ T6996] ldm_validate_partition_table(): Disk read failed. [ 403.208968][ T6779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.214949][ T6996] Dev loop6: unable to read RDB block 0 [ 403.219566][ T6779] Cannot create hsr debugfs directory [ 403.229545][ T7017] tipc: Started in network mode [ 403.233803][ T6996] loop6: unable to read partition table [ 403.243688][ T6996] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾xИCÖ) failed (rc=-5) [ 403.255322][ T7017] tipc: Node identity ac1414aa, cluster identity 4711 [ 403.278941][ T7017] tipc: Enabled bearer , priority 10 [ 407.192173][ C1] print_req_error: 24 callbacks suppressed [ 407.192214][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.209120][ C1] buffer_io_error: 24 callbacks suppressed [ 407.209138][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.237044][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.248190][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.303541][ T4216] tipc: Node number set to 2886997162 [ 407.341584][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.353420][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.371797][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.383300][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.397235][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.408571][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.438198][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.449557][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.500645][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.512184][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.535869][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.547022][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.555914][ T6999] ldm_validate_partition_table(): Disk read failed. [ 407.563333][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.574857][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.594704][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.605906][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.647018][ T6999] Dev loop6: unable to read RDB block 0 [ 407.664947][ T6999] loop6: unable to read partition table [ 407.676167][ T6999] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾xИCÖ) failed (rc=-5) [ 407.809716][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 409.816617][ T7054] ptrace attach of "./syz-executor exec"[4169] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 410.392697][ T7063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.667'. [ 410.485824][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.550455][ T4230] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 411.251566][ T4230] usb 3-1: device descriptor read/64, error -71 [ 411.286291][ T7065] loop4: detected capacity change from 0 to 8192 [ 411.487382][ T6779] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 411.540563][ T4230] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 411.620483][ T6779] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 411.661855][ T6779] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 411.755556][ T7084] device ip6tnl1 entered promiscuous mode [ 411.770496][ T4230] usb 3-1: device descriptor read/64, error -71 [ 411.807179][ T6164] device hsr_slave_0 left promiscuous mode [ 411.847176][ T6164] device hsr_slave_1 left promiscuous mode [ 411.875808][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.898593][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.914281][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.925433][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.938143][ T6164] device bridge_slave_1 left promiscuous mode [ 411.948478][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.979254][ T6164] device bridge_slave_0 left promiscuous mode [ 412.004054][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.059509][ T4230] usb usb3-port1: attempt power cycle [ 412.069508][ T6164] device veth1_macvtap left promiscuous mode [ 412.086077][ T6164] device veth0_macvtap left promiscuous mode [ 412.096298][ T6164] device veth1_vlan left promiscuous mode [ 412.107380][ T6164] device veth0_vlan left promiscuous mode [ 412.586812][ T7095] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 412.612461][ T7095] FAT-fs (loop4): Filesystem has been set read-only [ 412.890463][ T4230] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 412.923271][ T6164] team0 (unregistering): Port device team_slave_1 removed [ 412.971000][ T6164] team0 (unregistering): Port device team_slave_0 removed [ 413.018008][ T4230] usb 3-1: device descriptor read/8, error -71 [ 413.033200][ T6164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.058742][ T6164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.340705][ T4230] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 413.379889][ T6164] bond0 (unregistering): Released all slaves [ 413.620510][ T4230] usb 3-1: device not accepting address 14, error -71 [ 413.629206][ T4230] usb usb3-port1: unable to enumerate USB device [ 413.642551][ T6779] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 413.737391][ T7103] ptrace attach of "./syz-executor exec"[4171] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 414.237693][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 415.202626][ T6779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.218788][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 415.301200][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 415.374414][ T6779] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.435281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 415.572299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 415.587029][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.594295][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.625562][ T7131] fuse: Unknown parameter 'grou00000000000000000000' [ 415.713483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 415.738161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 415.764603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 415.785805][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.793062][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.833442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 415.865307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 415.907714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 415.967127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 415.998541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 416.007990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 416.050654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 416.093862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 416.141597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.164417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 416.185045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 416.209403][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 416.267793][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 416.275863][ T4214] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 416.296939][ T7111] loop2: detected capacity change from 0 to 32768 [ 416.425428][ T7111] [ 416.425428][ T7111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 416.425428][ T7111] [ 416.480548][ T4214] usb 2-1: device descriptor read/64, error -71 [ 416.675509][ T7111] ERROR: (device loop2): diWrite: ixpxd invalid [ 416.675509][ T7111] [ 416.690827][ T7111] ERROR: (device loop2): txCommit: [ 416.690827][ T7111] [ 416.870429][ T4214] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 416.898957][ T4171] [ 416.898957][ T4171] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 416.898957][ T4171] [ 416.990623][ T4171] [ 416.990623][ T4171] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 416.990623][ T4171] [ 417.041093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 417.057835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 417.128090][ T6779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.167930][ T7170] ptrace attach of "./syz-executor exec"[4168] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 417.220953][ T4214] usb 2-1: device descriptor read/64, error -71 [ 418.060989][ T4214] usb usb2-port1: attempt power cycle [ 418.108557][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'. [ 418.270970][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 418.520689][ T4214] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 418.660793][ T4214] usb 2-1: device descriptor read/8, error -71 [ 418.885769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 418.907334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 418.941494][ T7208] fuse: Unknown parameter 'grou00000000000000000000' [ 418.957938][ T4214] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 419.014375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 419.061341][ T4214] usb 2-1: device descriptor read/8, error -71 [ 419.076190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 419.138139][ T6779] device veth0_vlan entered promiscuous mode [ 419.344343][ T4214] usb usb2-port1: unable to enumerate USB device [ 419.351885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 419.381935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 419.576415][ T6779] device veth1_vlan entered promiscuous mode [ 419.622680][ T7224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.703'. [ 419.821081][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 419.871347][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 419.915607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 419.958795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 420.006437][ T6779] device veth0_macvtap entered promiscuous mode [ 420.024182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 420.072130][ T6779] device veth1_macvtap entered promiscuous mode [ 420.144249][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.179040][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.195439][ T4216] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 420.211796][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.237013][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.257415][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.279576][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.302158][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.319313][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.339082][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.347304][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 420.388592][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 420.398436][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 420.410732][ T4216] usb 2-1: device descriptor read/64, error -71 [ 420.422425][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.440999][ T4285] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 420.456698][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.467643][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.488870][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.511508][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.517924][ T7226] loop0: detected capacity change from 0 to 32768 [ 420.528630][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.539802][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.596118][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.625725][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.663518][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 420.680468][ T4216] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 420.700556][ T4285] usb 5-1: Using ep0 maxpacket: 16 [ 420.717621][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 420.747044][ T26] audit: type=1800 audit(1747182626.898:12): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.702" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 420.759695][ T6779] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.785219][ T6779] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.794681][ T6779] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.808063][ T6779] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.825253][ T4285] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 420.870602][ T4216] usb 2-1: device descriptor read/64, error -71 [ 420.880437][ T4285] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.910605][ T4285] usb 5-1: config 0 has no interface number 0 [ 420.991450][ T4216] usb usb2-port1: attempt power cycle [ 421.081371][ T4285] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 421.121745][ T4285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.121778][ T4285] usb 5-1: Product: syz [ 421.121794][ T4285] usb 5-1: Manufacturer: syz [ 421.121810][ T4285] usb 5-1: SerialNumber: syz [ 421.163701][ T4285] usb 5-1: config 0 descriptor?? [ 421.280028][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.327497][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.356896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.390110][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.407154][ T4216] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 421.415868][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.434343][ T5695] usb 5-1: USB disconnect, device number 9 [ 421.458555][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 421.512982][ T4216] usb 2-1: device descriptor read/8, error -71 [ 421.800589][ T4216] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 421.901242][ T4216] usb 2-1: device descriptor read/8, error -71 [ 422.026423][ T4216] usb usb2-port1: unable to enumerate USB device [ 422.290563][ T7301] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 422.297196][ T7301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 422.305284][ T7301] vhci_hcd vhci_hcd.0: Device attached [ 422.326540][ T7302] vhci_hcd: connection closed [ 422.326989][ T4264] vhci_hcd: stop threads [ 422.337126][ T4264] vhci_hcd: release socket [ 422.360751][ T4264] vhci_hcd: disconnect device [ 422.493633][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.502822][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.178102][ T7282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.236041][ T7282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.485868][ T7282] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.500702][ T7282] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.509801][ T7282] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.526607][ T7282] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.672239][ T7282] syz.6.716 (7282) used greatest stack depth: 20096 bytes left [ 423.832321][ T7326] input: syz0 as /devices/virtual/input/input14 [ 423.866733][ T7326] loop0: detected capacity change from 0 to 2048 [ 424.773297][ T7326] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 424.791969][ T7326] Remounting filesystem read-only [ 424.866426][ T7334] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 425.234300][ T7346] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 425.240956][ T7346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 425.248714][ T7346] vhci_hcd vhci_hcd.0: Device attached [ 425.276300][ T7352] vhci_hcd: connection closed [ 425.276566][ T144] vhci_hcd: stop threads [ 425.300593][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 425.322367][ T144] vhci_hcd: release socket [ 425.327285][ T144] vhci_hcd: disconnect device [ 425.482734][ T7365] netlink: 80 bytes leftover after parsing attributes in process `syz.0.738'. [ 425.510531][ T21] usb 7-1: device descriptor read/64, error -71 [ 425.780553][ T21] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 425.978472][ T7393] input: syz0 as /devices/virtual/input/input15 [ 426.000513][ T21] usb 7-1: device descriptor read/64, error -71 [ 426.018144][ T7393] loop1: detected capacity change from 0 to 2048 [ 426.130477][ T21] usb usb7-port1: attempt power cycle [ 426.189149][ T7399] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 426.207355][ T7393] NILFS error (device loop1): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 426.224691][ T7393] Remounting filesystem read-only [ 426.458827][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 426.610688][ T21] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 426.731507][ T21] usb 7-1: device descriptor read/8, error -71 [ 427.030558][ T21] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 427.141024][ T21] usb 7-1: device descriptor read/8, error -71 [ 427.281366][ T21] usb usb7-port1: unable to enumerate USB device [ 427.333079][ T7418] blktrace: Concurrent blktraces are not allowed on loop4 [ 430.448524][ T7445] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 430.455338][ T7445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 430.465291][ T7445] vhci_hcd vhci_hcd.0: Device attached [ 430.506851][ T7450] vhci_hcd: connection closed [ 430.507035][ T144] vhci_hcd: stop threads [ 430.530585][ T144] vhci_hcd: release socket [ 430.535219][ T144] vhci_hcd: disconnect device [ 432.459645][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 432.932412][ T7488] device hsr_slave_1 left promiscuous mode [ 433.157489][ T7515] tipc: Enabled bearer , priority 0 [ 433.260200][ T7515] device syzkaller0 entered promiscuous mode [ 433.434861][ T7511] tipc: Resetting bearer [ 433.450738][ T7526] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 433.458174][ T7526] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.466900][ T7526] vhci_hcd vhci_hcd.0: Device attached [ 437.115456][ T7534] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 437.197451][ T7527] vhci_hcd: connection closed [ 437.197828][ T144] vhci_hcd: stop threads [ 437.209219][ T144] vhci_hcd: release socket [ 437.240496][ T5695] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 437.261620][ T144] vhci_hcd: disconnect device [ 437.301182][ T7511] tipc: Disabling bearer [ 437.596016][ T7550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.774'. [ 437.798474][ T7554] netlink: 176 bytes leftover after parsing attributes in process `syz.2.777'. [ 437.809910][ T7554] netlink: 176 bytes leftover after parsing attributes in process `syz.2.777'. [ 438.380728][ T7561] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 438.791656][ T7561] device bond1 entered promiscuous mode [ 438.847925][ T7561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.946276][ T7572] device wg2 entered promiscuous mode [ 439.050701][ T26] audit: type=1400 audit(1747182645.208:13): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7569 comm="syz.6.783" [ 439.183934][ T7573] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 439.190822][ T7573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 439.201907][ T7573] vhci_hcd vhci_hcd.0: Device attached [ 439.218716][ T7568] device wg2 left promiscuous mode [ 439.238939][ T7577] vhci_hcd: connection reset by peer [ 439.280917][ T144] vhci_hcd: stop threads [ 439.285526][ T144] vhci_hcd: release socket [ 439.326190][ T144] vhci_hcd: disconnect device [ 439.562141][ T7593] netlink: 'syz.1.790': attribute type 2 has an invalid length. [ 440.023681][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.032144][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.614427][ T7611] device pim6reg1 entered promiscuous mode [ 440.863333][ T26] audit: type=1400 audit(1747182647.018:14): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7608 comm="syz.1.794" [ 441.553841][ T7625] lo speed is unknown, defaulting to 1000 [ 442.480760][ T5695] vhci_hcd: vhci_device speed not set [ 442.958298][ T7648] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 442.966410][ T7648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 442.975221][ T7648] vhci_hcd vhci_hcd.0: Device attached [ 442.998513][ T7651] vhci_hcd: connection closed [ 442.998776][ T154] vhci_hcd: stop threads [ 443.018710][ T154] vhci_hcd: release socket [ 443.055580][ T154] vhci_hcd: disconnect device [ 444.053179][ T7658] device syzkaller0 entered promiscuous mode [ 445.680543][ T5695] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 550.760302][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 550.767395][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4264/1:b..l [ 550.776166][ C1] (detected by 1, t=10503 jiffies, g=30833, q=41) [ 550.782803][ C1] task:kworker/u4:7 state:R running task stack:22112 pid: 4264 ppid: 2 flags:0x00004000 [ 550.795386][ C1] Workqueue: bat_events batadv_nc_worker [ 550.801565][ C1] Call Trace: [ 550.805051][ C1] [ 550.808001][ C1] __schedule+0x11b8/0x43b0 [ 550.812717][ C1] ? mark_lock+0x94/0x320 [ 550.817257][ C1] ? mark_lock+0x94/0x320 [ 550.821706][ C1] ? release_firmware_map_entry+0x190/0x190 [ 550.827654][ C1] ? preempt_schedule_irq+0xd0/0x150 [ 550.833074][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 550.838573][ C1] preempt_schedule_irq+0xb1/0x150 [ 550.843715][ C1] ? __cond_resched+0xb0/0xb0 [ 550.848531][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 550.854476][ C1] irqentry_exit+0x63/0x70 [ 550.859110][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 550.865474][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 550.870961][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 550.891474][ C1] RSP: 0018:ffffc900032dfaa0 EFLAGS: 00000206 [ 550.897666][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 7d5bc66bb1246800 [ 550.906157][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2260 RDI: ffffffff8a59a2c0 [ 550.914160][ C1] RBP: ffffc900032dfbc0 R08: dffffc0000000000 R09: fffffbfff1ff3419 [ 550.922358][ C1] R10: fffffbfff1ff3419 R11: 1ffffffff1ff3418 R12: ffffffff8c11bea0 [ 550.930645][ C1] R13: 1ffff9200065bf60 R14: 0000000000000246 R15: dffffc0000000000 [ 550.938736][ C1] ? rcu_lock_release+0x5/0x20 [ 550.943728][ C1] ? read_lock_is_recursive+0x10/0x10 [ 550.949138][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 550.954477][ C1] rcu_lock_acquire+0x2a/0x30 [ 550.959414][ C1] ? rcu_lock_acquire+0x5/0x30 [ 550.964262][ C1] batadv_nc_worker+0xc9/0x5c0 [ 550.969246][ C1] process_one_work+0x863/0x1000 [ 550.974506][ C1] ? worker_detach_from_pool+0x240/0x240 [ 550.980380][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 550.985884][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 550.991032][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 550.996517][ C1] ? wq_worker_running+0x97/0x170 [ 551.001569][ C1] worker_thread+0xaa8/0x12a0 [ 551.006274][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 551.011810][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 551.017233][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 551.023398][ C1] kthread+0x436/0x520 [ 551.027604][ C1] ? rcu_lock_release+0x20/0x20 [ 551.032652][ C1] ? kthread_blkcg+0xd0/0xd0 [ 551.037368][ C1] ret_from_fork+0x1f/0x30 [ 551.041905][ C1] [ 551.044976][ C1] rcu: rcu_preempt kthread starved for 10528 jiffies! g30833 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 551.056368][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 551.066436][ C1] rcu: RCU grace-period kthread stack dump: [ 551.072331][ C1] task:rcu_preempt state:R running task stack:27848 pid: 15 ppid: 2 flags:0x00004000 [ 551.083319][ C1] Call Trace: [ 551.086717][ C1] [ 551.090021][ C1] __schedule+0x11b8/0x43b0 [ 551.094570][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 551.100469][ C1] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 551.106570][ C1] ? _raw_spin_unlock+0x40/0x40 [ 551.111649][ C1] ? rcu_is_watching+0x11/0xa0 [ 551.116729][ C1] ? release_firmware_map_entry+0x190/0x190 [ 551.122657][ C1] schedule+0x11b/0x1e0 [ 551.126921][ C1] schedule_timeout+0x15c/0x280 [ 551.131797][ C1] ? console_conditional_schedule+0x40/0x40 [ 551.137724][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 551.143727][ C1] ? update_process_times+0x200/0x200 [ 551.149127][ C1] ? prepare_to_swait_event+0x331/0x350 [ 551.154878][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 551.160035][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 551.165381][ C1] ? dump_blkd_tasks+0x7e0/0x7e0 [ 551.170703][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 551.175782][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 551.181089][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 551.186335][ C1] rcu_gp_kthread+0x98/0x350 [ 551.191035][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 551.196494][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 551.202550][ C1] ? __kthread_parkme+0x157/0x1b0 [ 551.207922][ C1] kthread+0x436/0x520 [ 551.212688][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 551.218331][ C1] ? kthread_blkcg+0xd0/0xd0 [ 551.223138][ C1] ret_from_fork+0x1f/0x30 [ 551.227737][ C1] [ 551.230868][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 551.237473][ C1] NMI backtrace for cpu 1 [ 551.242168][ C1] CPU: 1 PID: 7704 Comm: syz.4.821 Not tainted 5.15.182-syzkaller #0 [ 551.250627][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 551.261155][ C1] Call Trace: [ 551.264633][ C1] [ 551.268022][ C1] dump_stack_lvl+0x168/0x230 [ 551.273003][ C1] ? show_regs_print_info+0x20/0x20 [ 551.278421][ C1] ? load_image+0x3b0/0x3b0 [ 551.283260][ C1] ? irq_work_queue+0xbf/0x140 [ 551.288242][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 551.293212][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 551.299837][ C1] ? _printk+0xcc/0x110 [ 551.304281][ C1] ? cpu_online+0x1d/0x30 [ 551.308903][ C1] ? load_image+0x3b0/0x3b0 [ 551.313438][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 551.319708][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 551.325903][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 551.332376][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 551.338080][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 551.343400][ C1] ? ktime_get+0x7b/0x270 [ 551.347777][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 551.353115][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 551.358505][ C1] ? account_process_tick+0x227/0x3a0 [ 551.364274][ C1] update_process_times+0x193/0x200 [ 551.369713][ C1] tick_sched_timer+0x37d/0x560 [ 551.374734][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 551.380137][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 551.385857][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 551.391283][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 551.397577][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 551.402732][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 551.408754][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 551.414412][ C1] [ 551.417356][ C1] [ 551.420305][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 551.426391][ C1] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 551.432330][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 bf 2e c8 02 66 2e 0f 1f 84 00 00 00 00 00 [ 551.452052][ C1] RSP: 0018:ffffc9000314fcb0 EFLAGS: 00000246 [ 551.458431][ C1] RAX: 00000000000000f6 RBX: ffffffff8bbaea10 RCX: 000000000000083f [ 551.466690][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 551.474924][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10172267a7 [ 551.483009][ C1] R10: ffffed10172267a7 R11: 1ffff110172267a6 R12: ffff8880b9133b01 [ 551.491373][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000020 [ 551.499704][ C1] arch_irq_work_raise+0x82/0xd0 [ 551.504874][ C1] irq_work_queue+0x95/0x140 [ 551.509592][ C1] bpf_send_signal_common+0x2b2/0x420 [ 551.515002][ C1] ? rcu_lock_release+0x20/0x20 [ 551.519969][ C1] ? __cant_sleep+0x210/0x210 [ 551.524767][ C1] ? __context_tracking_exit+0x4c/0x80 [ 551.530254][ C1] bpf_send_signal+0x15/0x20 [ 551.534860][ C1] bpf_prog_7ba5217f62dcd359+0x38/0xcb4 [ 551.540425][ C1] bpf_trace_run2+0x15b/0x2d0 [ 551.545212][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 551.550186][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 551.556283][ C1] ? lock_chain_count+0x20/0x20 [ 551.561319][ C1] __bpf_trace_sys_enter+0x60/0x70 [ 551.566635][ C1] trace_sys_enter+0x65/0x80 [ 551.571256][ C1] syscall_trace_enter+0x115/0x180 [ 551.576749][ C1] do_syscall_64+0x24/0xa0 [ 551.581200][ C1] ? clear_bhb_loop+0x15/0x70 [ 551.585994][ C1] ? clear_bhb_loop+0x15/0x70 [ 551.590883][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 551.596845][ C1] RIP: 0033:0x7f983db3cb39 [ 551.601282][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 551.621623][ C1] RSP: 002b:00007f983b9e6b40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 551.630304][ C1] RAX: ffffffffffffffda RBX: 00007f983ddc8088 RCX: 00007f983db3cb39 [ 551.638691][ C1] RDX: 00007f983b9e6b40 RSI: 00007f983b9e6c70 RDI: 0000000000000011 [ 551.646951][ C1] RBP: 00007f983ddc8080 R08: 0000000000000000 R09: 0000000000000000 [ 551.655201][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f983ddc808c [ 551.663283][ C1] R13: 0000000000000000 R14: 00007ffd7f6384f0 R15: 00007ffd7f6385d8 [ 551.671839][ C1]