last executing test programs: 14.205832446s ago: executing program 2 (id=4497): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000140)='./bus\x00', 0x14000, &(0x7f0000000000)=ANY=[], 0x4, 0x293, &(0x7f0000000900)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x0) ftruncate(r1, 0xf598) (async) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)={0x1c, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4015}, 0x10) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) syz_usb_connect(0x4, 0x57c, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x76, 0x71, 0xb, 0x40, 0x1b3d, 0x9307, 0x1416, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56a, 0x2, 0x4, 0x9, 0xd0, 0x4, [{{0x9, 0x4, 0x85, 0x8, 0xa, 0x2c, 0x21, 0xa5, 0x0, [], [{{0x9, 0x5, 0x6, 0x10, 0x40, 0x3, 0x0, 0x9}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0xc, 0x5, 0xb0, [@generic={0x32, 0xf, "df5a47bee5179b09f6a49878b0615c64cd99c4470f54cdedc423261fc291d0f081dde9a032ccd7e4dd966ea480f553f9"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xe7, 0x7a}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xed, 0xf8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xfff9}]}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x6, 0x2, 0x8b}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x1, 0x7, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff}, @generic={0xd8, 0x22, "2db41d0519118bb5ac4346f18c248862d7a6837bdc0efdcf4bca7145097ba01dd4a6c07af7a8157374b151b40721989ad5b96e97af60e5e568746a8f770bf61f9776d65e3d81bf4bd17b44b32b3907c8cef298e02b59ee754da319e93de34d20e6d95c4ca6f212658d36f47fcd94965910cab8f709b1baf027d37cf9adc0849fb0dbd86f12e8e05cbcca0b3a1fd4a5f5b9b69d2229d3c11832f9647b5c6e713d1e7f46433857aea4ecc04dff3fd6750723beb7830e21dcab73967a29decd60c6cc61274d9a306dbd9b72400e70dbbd61e6c89bab909c"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x28, 0x4, 0x7, [@generic={0x3, 0x21, "aa"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x8, 0xb3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xfffc}]}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0xb, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x0, 0x0, 0xd8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8a, 0x6}]}}, {{0x9, 0x5, 0x7, 0xc, 0x108, 0x81, 0x1e, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x100}, @generic={0xeb, 0x0, "42eacfa355fa21972ed582007adcae7386a973e144a498dbc0cab0586f6ea3edff79083a13d547d21872d99268715dd2b64451f0807fa2268edd74e1aca8837af3b805808f95f2c67ce4af77d5360723d6a5e0389f2f0750008b79a323ebb9846a517b73a7cfc804a15ce43b979147fcac8a907a3679abccd3ba0b900cc17c2364e7bcedf628cb3585b95e030351c8183f87cff5002855c1562fd34fd0fbb05fa8d74ddb514b34bab0e019b1240b47b2a136298427a40faa16ec1b8b46ff9a3718feed287854d3dab08c238de1936c5aa3c35fa42bee92d8312b5216319ed5f1fd2e82e9bd0a12763b"}]}}]}}, {{0x9, 0x4, 0x91, 0x6, 0xd, 0x32, 0x7b, 0x1b, 0x74, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "77e26f71af"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xc7a, 0x1, 0x1f}, {0x6, 0x24, 0x1a, 0x10}, [@mbim={0xc, 0x24, 0x1b, 0xe9, 0x48f, 0x6, 0x0, 0x7e51, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x0, 0xd9, 0x79}, @mdlm_detail={0x25, 0x24, 0x13, 0x1, "13c627edccfd59afde97ee7ed6cd9c01101c16cbd6289067b3391317d489bbe608"}, @obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0xa, 0x949c169897166d62, 0x1bf, 0x2, 0xd3, 0x2}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x9, 0x5, 0x6, [@generic={0x74, 0x22, "ca262f1a15562158ba333122fdd76619f4720127b6b136d57a33954e46497f4756fbab82171357d2324a25ff141b29133fde6c211efcb561fc4540453145a8defbd4f3207810e8050cec95a02c929bd1b014400afaead63a13419bf7bd0c2427b4e5da54b23999d710006c14d7d7737b0969"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x6, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x30272197b6ceba34, 0x2, 0x7}]}}, {{0x9, 0x5, 0x8, 0x3, 0x48, 0x6, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x18, 0xcd, 0x8, 0xf9}}, {{0x9, 0x5, 0x1, 0x0, 0xceb6be108521e650, 0x9, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x10, 0x9}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x8c, 0x2, 0x6e}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xa, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0x0, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x180}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x5, 0x40, 0x6}}, {{0x9, 0x5, 0x8, 0x15, 0x10, 0x1, 0x64, 0x4c, [@generic={0x7d, 0x0, "50b385e73830a9b02a3942fb615868aa8fc06d9a3e50e6dc2c64248fdb8c54caf7040474bc1edd0bacb6852acd5ea5c035e53f9d6cad3425acc959f4668bad28154f146b5051f169a5549b2ae17409b554abc1c8222b5a164102cc3c98d2074de24056b0dc4ff2b10eba7117eae90556d95a26f51070799e999e6f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb2, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x9, 0x8c, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x200}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x1, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x1}, @generic={0xc1, 0x21, "9dbcdf8fa7771054a125c853cbfeda9cab6a31e508128c104865350a9f9a4fce298a2ed42a5358a9c0e65865ecb850a7ea44f3cceb62c78385be3144542afde2b46ede2ccf02dc714837a063969f737e3bf572ef885f7ac2840418b06160ce0898b2bd6b00f90f257b9c94f57f50025f7e4cbb3cb02854ebd4f1aaa2f15319cebdff1c181f1b153b060a937cb95ed7693fb6b061a39cf0e5d15e51fb36dfe1936ff0574d62f19f6cdfef68187e86e4b3da5901c2a91494589da820d91b4844"}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x6, 0x7, 0x7c, 0x8, 0x2}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x409}}]}) (async) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e20, 0x200, @empty, 0x10}, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0xffffffffffffffff, {[0x1000, 0x3, 0xfc000000, 0x2, 0x332, 0xfffffffb, 0x7fffffff, 0x2]}}, 0x5c) 13.090358346s ago: executing program 2 (id=4500): openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.pending_reads\x00', 0x0, 0x2b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109025c0002010e"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000000)={0x23, 0x0, 0x2}, 0x10) bind$phonet(r3, &(0x7f0000000000)={0x23, 0x0, 0x2}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000100)="617d49fe89b30263fadff3cf74204a9e9ad322268ee94306f18ec12e", &(0x7f0000000140)=@buf="d4715a56a4c6e1d1c045c2a6ca221e92db17bee3060c936d06b41336b0805fd5af828c39b5c66700dc66c3adb97a2792a2bffd5850c2dc011869581c193de588e7193f79", 0x4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x42) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c200000e86dd60122d9200283a01fe8000000000000000000000000000bbfe8000060000000000000000000000aa8900907800000000fc020000000000000300000000000000fc0100"/94], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 10.828406466s ago: executing program 0 (id=4439): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x7, 0xf08, &(0x7f0000001e40)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) pwrite64(r3, &(0x7f0000000140)="9e7f", 0x2, 0xfecc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003540)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) recvmsg$unix(r6, &(0x7f00000005c0)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000540)=""/59, 0x3b}], 0x3}, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r6}) r8 = fsopen(&(0x7f0000000600)='ufs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000640)='\x00', &(0x7f0000000680)='nl80211\x00', 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000300)={r7, 0x80000}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6d}]}], {0x14, 0x10}}, 0x94}}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000700), &(0x7f0000000200), &(0x7f00000006c0)=[0xff, 0x8, 0xff, 0x1], 0x0, 0xfffffffffffffffc}) 9.628227006s ago: executing program 2 (id=4508): epoll_create1(0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x80}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) mq_open(&(0x7f0000000240)='\x00', 0x1, 0xbfaa42892b70d432, &(0x7f0000000280)={0x7, 0x1, 0x28db, 0x5}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000680)=ANY=[@ANYBLOB="726fed36826d6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c6e6e6f6e756d74bcbbaf4f31372aa9fb69613af2c2776c8295fa65706167653d3836352c726f6448722c696fe07c1ad67365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c726f6469722c756e695f786c6174653d312c00"], 0x1, 0x26c, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfe) 9.017938767s ago: executing program 2 (id=4510): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xb8ffffff, &(0x7f0000000200), 0x1, 0x177, &(0x7f0000000240)="$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") 8.63369985s ago: executing program 0 (id=4512): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@empty}}, {{@in6=@private2}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4}}, 0xe8) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="05000000000000000054679200b8b0d8b42471790669e56ad38bca92d72342dd0d8f4009a1527e544d6d6fbe02000000000000001e15d1b86f3ce206c875e40dcabbe724fba9be5483de3e4d452ed8846d33f6e70217cafc96f2d9f7702710695c8dcfd0b50383581b6cd6bca96c6bf6cd4f5de91241e0966ca4e8860194b0805b817be2037c1cecd1535ee74948d2431b390ebaa6a5088ab58780288d921ddde98478d6516c350b6d6eb2426441aa5376b44f87e69f66741086d9218200"/199], 0xd) syz_usb_connect(0x3, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0xb3, 0xcc, 0x9d, 0x10, 0x499, 0x1037, 0x2f21, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9, 0x10, 0xe3, [{{0x9, 0x4, 0x10, 0x2, 0x0, 0x56, 0x3a, 0x6, 0x18}}]}}]}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000390cc230337351ad8adfc62f74bbdac79a2ecfaf8dd282ea7ed6b5b5fcd51058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1f, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES8=r0, @ANYRES64=0x0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0xb}]}, {0x0, [0x61, 0x61, 0x61, 0x30]}}, 0xffffffffffffffff, 0x2a, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4001010}, 0x20000000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000001300)=0x1, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x300, 0x0, 0x7fff}, 0x1c) ioctl$SNDCTL_TMR_SELECT(r5, 0x40045408) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000b0605000000000000000000000000000900020073797a3000000700070004000780"], 0x2c}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) 8.322869011s ago: executing program 1 (id=4513): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5f, 0xdf, 0xc5, 0x8, 0x421, 0x8f, 0xbade, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}]}}]}}]}}]}}, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x6) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x3216, 0x0) chdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRES8=r1], 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x50, r2, 0x22215000) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0'}, 0xb) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getdents(r5, &(0x7f0000000300)=""/190, 0xbe) 8.319998379s ago: executing program 2 (id=4514): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000080)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x240000c4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000180), 0x4) (async) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x0, 0x37, 0x61, 0xeb, 0x8, 0x5ac, 0x223, 0x74f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xa4, 0x2}}]}}]}}, 0x0) 7.226653384s ago: executing program 3 (id=4515): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0x43, 0xa0, 0xd8, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'ipvlan0\x00', 'veth0\x00', {}, {}, 0x6f}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7fff, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4, 0xfffffffb}}}}, 0x2a0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x1000000, 0x0) 6.590824982s ago: executing program 3 (id=4517): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") chown(&(0x7f0000000280)='./file0\x00', 0xee01, 0xffffffffffffffff) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)='c', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file1\x00', 0x100080d, &(0x7f0000000700)=ANY=[@ANYRES32=r6, @ANYRES16, @ANYBLOB="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", @ANYRESDEC, @ANYRESOCT, @ANYRES32=r3, @ANYRES8=r5, @ANYRES32, @ANYRES8=r4], 0x1, 0x1f7, &(0x7f0000000200)="$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") r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r8) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r10, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001fc0)='.', 0x1}], 0x1}}], 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x1000, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7fffffffffffffff}}], [{@smackfsdef={'smackfsdef', 0x3d, '*(\\'}}, {@flag='ro'}, {@euid_lt={'euid<', r8}}]}}, 0x1, 0x0, &(0x7f00000001c0)="61146b96513f467122f8aa50695b91c97ec11c8eeea9845e3434e8c9e98d84b84f564c9e9f95d43d846df0d5cb7783b666c8b6341e4bbfcde1c71211a2f1439873ecc4e9e6fb4d348bc996f2f1872d3802d065f1972f0a4fbb3bd175daa997a4123b1a909b1b4489b4e074dba407a349e666a4b854a2b54acf8343f0a621376ddc126d9cf7f7ef360dacae8664605321cdc8c3d5863e0f467874e24e84f9c8fb2265") setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180)=0x2, 0x4) 6.177784615s ago: executing program 2 (id=4518): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES16=r2, @ANYRES32, @ANYRES32=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), 0x0}, 0x20) r5 = syz_io_uring_complete(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000540)='.pending_reads\x00', 0x2041, 0xa0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) write$UHID_INPUT(r9, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x25, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x54dd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000340)='GPL\x00', 0x5b46, 0x0, &(0x7f0000000380), 0x41100, 0x41, '\x00', 0x0, @cgroup_sock_addr=0x1e, r6, 0x8, &(0x7f00000004c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xd, 0x4, 0xff}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r9], 0x0, 0x10, 0x5, @void, @value}, 0x94) dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syslog(0x0, 0x0, 0x0) 5.809912049s ago: executing program 3 (id=4520): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)="22b721d0c5fa3cc7411cda2213ec1358ab5d9222f5acddd80ba58cd7b610e22adc3442871b8405edb1f6eae03443cbda39966408852249a649200f56a3d53f4c92c03a4f7d4ecca548252a254a4e4f53a18982ca14d3fc905c5a0e43fae3fba3f1508e39b8129781d50cbff3285883a79f9f9ba870", 0x75}, {&(0x7f0000000440)="8fb118ea4b014d21bba29131237027001666112fede371612bee459037f5759491da1d100cad6085fea8ae67bc48739ad3ae18b9e2b4f5a96d19c0fa65832db6c4ef2ac4e49ee5123bda22e0affb80c751e01cde98360a9db0d881e2388afeea6d49f08f776066a173b74e", 0x6b}, {&(0x7f0000000500)="30e6d6a622", 0x5}, {&(0x7f0000000a40)="d5bb66a57a681717ea55c9361c006310ec04ba436375fc36ed15788f51af5de9def19fa4a01829d4ba293e06b6d389ffffff7f000000005183880b9f9893b074e7602eb331c9be8e3ae7da054323817ab51f8a1031787a862ba4575039e007b3f6e64268533dd3c6122b6c6ac42904743b5e3282f121884e121cc71348a35b1550c4e4ad204e14b93e801587b8a517c281c3bfdd523d3b757e85bbd4f8e17fac117b59b76957adbf448929bb8856da7baf1a3fecd19cc9f66e341b507ee33a9da33dcb2e1238407c37e4f21fb4", 0xcd}, {&(0x7f0000000180)="cba58236f517dd3dc12459cf4bb13fe4aa325078f2430db3f50394b793", 0x1d}, {&(0x7f0000000740)="eb5c68d16ce2b94bad855199fdae03b6c5dc50e11b69a1200a876cb911b02efc6f6aec91c18d624c212c5bfafdbbc4613eeda4622aebdae1b41eedbb37c9386b593fd78fe8675f96b0cfb2c96cf8af5ea4822ac22b8586f9791c37485046f7af432b3263799a7a0163f8f4a3c4fbf5298531efa67e143e2ad778b771d1644f04c2e576247fc9612e79824511a95dc5ff2ffc6ad4d99f8173ae20a12c73367f2a53d98e003203105a1536a1256f08cff1813635c9efe5a84782c5bf6762206a2d71a40edc470f5978e361fccef6330e57fc1400ebac34f1036d6d288d002787f8598c737af5927db1da234c91b48447a62ab53f6bf5", 0xf5}, {&(0x7f0000000840)="d60dab60bb93a3795f3edda910b78eb66e95441e1e5005b8655195e38122b98977c8098bc792", 0x26}, {&(0x7f00000008c0)="d883996a8bce1860272afd6946b8340b04461452dcfd9bf3e632873c0fbe22cf27dfc15a9a2ca4e2e7ff809aa9177bcf2755aa59986e6e660f9b6802b45903cf45ba3f5598fa30a697f39ab597860d4f3b3023a08c1622c081308b3d0665c5cc52bc5a58690f5462b4cac824f3e7fb26fc83352e2cd559828cf8caea857f5a733df2bfb34b19210fb4a601fe9e0e56236783f25316bc6853486fd0945a92ffe6117a0df4974d5341a21a4b767f848e72754b2f3e529e", 0xb6}], 0x8}}], 0x1, 0x8000) sendmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 5.757783257s ago: executing program 0 (id=4521): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioperm(0x0, 0x444, 0x1) bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0), 0xc) 5.558074826s ago: executing program 1 (id=4522): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x7, 0xf08, &(0x7f0000001e40)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) pwrite64(r3, &(0x7f0000000140)="9e7f", 0x2, 0xfecc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003540)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) recvmsg$unix(r6, &(0x7f00000005c0)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000540)=""/59, 0x3b}], 0x3}, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r6}) r8 = fsopen(&(0x7f0000000600)='ufs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000640)='\x00', &(0x7f0000000680)='nl80211\x00', 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000300)={r7, 0x80000}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6d}]}], {0x14, 0x10}}, 0x94}}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000700), &(0x7f0000000200), &(0x7f00000006c0)=[0xff, 0x8, 0xff, 0x1], 0x0, 0xfffffffffffffffc}) 5.273833512s ago: executing program 3 (id=4523): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x868f2000) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x1a1c, 0x0, 0x5}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 5.248021532s ago: executing program 0 (id=4524): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000480)={[{@bsdgroups}, {@orlov}]}, 0x1c, 0x4e3, &(0x7f0000000580)="$eJzs3c9vG1kdAPDvTOImm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7dkLhRFDuOYqc0oYf0bwCJSpzgT+CAxAGpJ+7c4MalHJAKVKAGqUhGY4/bNLGTtKQZNf58pCf7zXPn+311573xa+IXwMi6GBG7EXEhIj6NiJn8eJKX+LBXstc9fHBrae/BraUkOp1P/pF027Njse/PZF7NzzkZET/4bsSPk8NxW9s7a4v1em0zr1fajY1Ka3vnympjcaW2UluvVhfmF+bev/pe9dT6+lbjN/e/s/rRD3//uy/f++Put36apTWdt+3vx2nqdb30OE5mPCI+ehHBCjCW9+dC0YnwXNKI+ExEvJ1d/52iswEAzkKnMxOdmf11AOC8S7trYElaztcCpiNNy+XeGt6bMZXWm6325evNrfXl3lrZbJTS66v12ly+VjgbpSSrz3efP6lXD9SvRsQbEfHziVe69fJSs75c5I0PAIywVw/M//+e6M3/AMA5N1l0AgDAmTP/A8DoMf8DwOgx/wPA6DH/A8DoMf8DwOgx/wPASPn+xx9npbOXf//18o3trbXmjSvLtdZaubG1VF5qbm6UV5rNle539jSOO1+92dyYfze2blbatVa70treudZobq23r3W/1/tarXQmvQIAjvLGW3f/nETE7gevdEvs28vBXA3nW1p0AkBhxopOACjMeNEJAIXxGR8YsEXvUw79iFB/kfBOuIuAl9SlL1j/h1Fl/R9Gl/V/GF0+ucPo6nSSQXv+J90mAOBcssYPPPP///fdOf1cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GUx3S1JWs73Ap+ONC2XI16LiNkoJddX67W5iHg9Iv40UZrI6vNFJw0A/J/SvyX5/l+XZt6ZPth6IfnPRPcxIn7yy09+cXOx3d6cz47/c6K/e3j7Tn68WkD6AMCx+vN0fx7ve/jg1lK/nGU+97/d21w0i7uXl17LeH53MRmliJj6V5LXe7L7lbFTiL97OyI+P6j/SXdtZDbf+fRg/Cz2a2caP30qftpt6z1mfxefPYVcYNTczcafDwddf2lc7D4Ovv4nI56qP6/++Ld3aPxLH49/Y0PGv4tHnLezb3C8/+4fvjc0/u2IL44Pip88jp8Mif/OCfv4ly995e2hef4q4lIMjr8/VqXd2Ki0tneurDYWV2ortfVqdWF+Ye79q+9VK9016kp/pfqwv39w+fWj+j81JP7kMf3/+gn7/+tHn/7oq0fE/+bXBr//bx4RP5sTv3HC+ItTvx26fXcWf3lI/497/y+fMP69v+4sn/ClAMAZaG3vrC3W67XNc/Gkf89YcBr/7fQMeU2p+AxfkicTUXwaP4uI0z5z9i9gQNOjzjOe53MvsO8FD0zAC/fkoi86EwAAAAAAAAAAAAAAYJiz+A2qovsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA+fW/AAAA//9m09PR") 4.321594699s ago: executing program 0 (id=4526): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYRES16=r0], 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000001000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100004000000000bf91000000000000b70200000000000085000000000000009f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x103, &(0x7f0000000700)=""/259, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}]}}]}, 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300), 0x1, 0x5ed, &(0x7f0000006b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf823}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24008081) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x21, {0x21, 0xa, "85b45de9f2d960f2fb4359f3a08584c6d3e17bc8205797b7fa9b5d4e8ba370"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) 4.24211148s ago: executing program 3 (id=4528): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000040)=""/54, 0x36}], 0x1) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0x40184810, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.88487821s ago: executing program 1 (id=4529): r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000280)={0x0, 0x1, 0x6, @remote}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="7a74915720e4ecaff99ef3c53bbbbc", 0xf}, {&(0x7f00000001c0)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155903a9fd29eb82199bc56ead7890000000000000000c4451745a1c3e0902361c33e5afc3540e1ad6b5d21c4885692cfa6729d4fe474c6c2decc410b8fd7f72c2b4c3be6379b009cfe7fb3e84113cb47104b73afced2d4894dbb3677921b569af13bf78c33c7a7c03022a14ebb06", 0xa6}], 0x2}, 0x0) 3.253606091s ago: executing program 1 (id=4530): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') mkdir(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="030000006163630f4ce6cbf638a4a6f24874209de8c7cd8bd45debd0598066b455d3fec9a28f672b4e1c86122819593d36ec30288970b5b4964f43f478b05ef4d6da9e4912e5aa0f9f3d9f5cdeba799c1d206a36afd3de996bb2f2a6ed70c739ff3e89eaecdf7f2ddb2857f3aee961cba98d2b5de338a7ee53f6b92b38450b9894d6d709669408a72ff9d9f0edab8cab90da8af3e8072bff904641915ea3eacccbba705eeaf6b352f64add7bcf762a872e2a68ccd45946c8e8940e2ffd7c8c526226b5586cb351f43ca34e5fbe0c5ce979baca6ba9fc537a59ee6350d600"/236], 0x9) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043d0eaa"], 0x11) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x4d, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[], 0x20) 3.252534227s ago: executing program 4 (id=4531): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@empty}}, {{@in6=@private2}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4}}, 0xe8) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="05000000000000000054679200b8b0d8b42471790669e56ad38bca92d72342dd0d8f4009a1527e544d6d6fbe02000000000000001e15d1b86f3ce206c875e40dcabbe724fba9be5483de3e4d452ed8846d33f6e70217cafc96f2d9f7702710695c8dcfd0b50383581b6cd6bca96c6bf6cd4f5de91241e0966ca4e8860194b0805b817be2037c1cecd1535ee74948d2431b390ebaa6a5088ab58780288d921ddde98478d6516c350b6d6eb2426441aa5376b44f87e69f66741086d9218200"/199], 0xd) syz_usb_connect(0x3, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0xb3, 0xcc, 0x9d, 0x10, 0x499, 0x1037, 0x2f21, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9, 0x10, 0xe3, [{{0x9, 0x4, 0x10, 0x2, 0x0, 0x56, 0x3a, 0x6, 0x18}}]}}]}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000390cc230337351ad8adfc62f74bbdac79a2ecfaf8dd282ea7ed6b5b5fcd51058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1f, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES8=r0, @ANYRES64=0x0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0xb}]}, {0x0, [0x61, 0x61, 0x61, 0x30]}}, 0xffffffffffffffff, 0x2a, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4001010}, 0x20000000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000001300)=0x1, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x300, 0x0, 0x7fff}, 0x1c) ioctl$SNDCTL_TMR_SELECT(r5, 0x40045408) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000b0605000000000000000000000000000900020073797a3000000700070004000780"], 0x2c}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) 2.504892754s ago: executing program 1 (id=4532): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000640)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4, 0x0, @loopback, 0x1000000}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) 2.214454621s ago: executing program 4 (id=4533): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)="22b721d0c5fa3cc7411cda2213ec1358ab5d9222f5acddd80ba58cd7b610e22adc3442871b8405edb1f6eae03443cbda39966408852249a649200f56a3d53f4c92c03a4f7d4ecca548252a254a4e4f53a18982ca14d3fc905c5a0e43fae3fba3f1508e39b8129781d50cbff3285883a79f9f9ba870", 0x75}, {&(0x7f0000000440)="8fb118ea4b014d21bba29131237027001666112fede371612bee459037f5759491da1d100cad6085fea8ae67bc48739ad3ae18b9e2b4f5a96d19c0fa65832db6c4ef2ac4e49ee5123bda22e0affb80c751e01cde98360a9db0d881e2388afeea6d49f08f776066a173b74e", 0x6b}, {&(0x7f0000000500)="30e6d6a622", 0x5}, {&(0x7f0000000a40)="d5bb66a57a681717ea55c9361c006310ec04ba436375fc36ed15788f51af5de9def19fa4a01829d4ba293e06b6d389ffffff7f000000005183880b9f9893b074e7602eb331c9be8e3ae7da054323817ab51f8a1031787a862ba4575039e007b3f6e64268533dd3c6122b6c6ac42904743b5e3282f121884e121cc71348a35b1550c4e4ad204e14b93e801587b8a517c281c3bfdd523d3b757e85bbd4f8e17fac117b59b76957adbf448929bb8856da7baf1a3fecd19cc9f66e341b507ee33a9da33dcb2e1238407c37e4f21fb4", 0xcd}, {&(0x7f0000000180)="cba58236f517dd3dc12459cf4bb13fe4aa325078f2430db3f50394b793", 0x1d}, {&(0x7f0000000740)="eb5c68d16ce2b94bad855199fdae03b6c5dc50e11b69a1200a876cb911b02efc6f6aec91c18d624c212c5bfafdbbc4613eeda4622aebdae1b41eedbb37c9386b593fd78fe8675f96b0cfb2c96cf8af5ea4822ac22b8586f9791c37485046f7af432b3263799a7a0163f8f4a3c4fbf5298531efa67e143e2ad778b771d1644f04c2e576247fc9612e79824511a95dc5ff2ffc6ad4d99f8173ae20a12c73367f2a53d98e003203105a1536a1256f08cff1813635c9efe5a84782c5bf6762206a2d71a40edc470f5978e361fccef6330e57fc1400ebac34f1036d6d288d002787f8598c737af5927db1da234c91b48447a62ab53f6bf5", 0xf5}, {&(0x7f0000000840)="d60dab60bb93a3795f3edda910b78eb66e95441e1e5005b8655195e38122b98977c8098bc792", 0x26}, {&(0x7f00000008c0)="d883996a8bce1860272afd6946b8340b04461452dcfd9bf3e632873c0fbe22cf27dfc15a9a2ca4e2e7ff809aa9177bcf2755aa59986e6e660f9b6802b45903cf45ba3f5598fa30a697f39ab597860d4f3b3023a08c1622c081308b3d0665c5cc52bc5a58690f5462b4cac824f3e7fb26fc83352e2cd559828cf8caea857f5a733df2bfb34b19210fb4a601fe9e0e56236783f25316bc6853486fd0945a92ffe6117a0df4974d5341a21a4b767f848e72754b2f3e529e", 0xb6}], 0x8}}], 0x1, 0x8000) sendmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 2.006591985s ago: executing program 1 (id=4534): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = userfaultfd(0x1) r2 = epoll_create1(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x80000010}) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0e8000000400000004000000e6df4d930400000080010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000070000000000000000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8ad8ff00000000bca2000000000000a6020000f8ffffffb70300000800008ab7040000000000008500000033000000850000000800000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xf1, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000040, 0x20000070, 0x200000a0], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000020000000000000000000000000000000000000000000000000000000000000000000fe1400ff0000000000000000000000000000000000000000000000000000000000000000000000000000000020000000feffffff000000000000000000000000000000000000000000000000002b0000000000003200"/144]}, 0x108) ioctl$TIOCNXCL(r0, 0x540d) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000001780)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x2, @in6={0xa, 0x0, 0x0, @private2}}}, 0xa0) r7 = openat$vicodec1(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="020c00000000000000000000000000000000000056c51a107bf08b5f4152985a4a1b16f8dd42f78e29bcc7abaa", @ANYRES32=r4, @ANYRES32, @ANYBLOB="02000000020000000200"/28], 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f000067f000/0x1000)=nil, 0x930, 0x3, 0x13, r8, 0x0) r9 = dup(r0) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000000)) 1.738865076s ago: executing program 4 (id=4535): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000090000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x2}}]}, {0x0, [0x6f, 0x61, 0x61]}}, &(0x7f00000001c0)=""/98, 0x35, 0x62, 0x1, 0x1, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000040)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x1000, &(0x7f0000000940)=""/4096, 0x41100, 0x4, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x8, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r0], &(0x7f0000000580)=[{0x2, 0x2, 0x6, 0x9}, {0x0, 0x3, 0x5, 0x8}, {0x5, 0x2, 0xf, 0x2}, {0x0, 0x5, 0xb, 0x8bf3ad86ad7d5d11}, {0x1, 0x1, 0xf, 0x8}, {0x3, 0x5, 0xc, 0xc}], 0x10, 0x5, @void, @value}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) unshare(0x20000400) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r5, r1, 0x4, r2}, 0x10) 1.301433647s ago: executing program 4 (id=4536): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x80}, {0x5}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc03e0000}}], 0x1, 0x0) 828.767474ms ago: executing program 3 (id=4537): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x78, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "055b10e0"}]}}, 0x0}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000001000000008000100", @ANYRES32=0x0, @ANYBLOB="0500110000000000060011000e0a0000"], 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x10}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc841}, 0x8004) 746.625275ms ago: executing program 4 (id=4538): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x868f2000) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x1a1c, 0x0, 0x5}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 684.943555ms ago: executing program 0 (id=4539): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x7, 0xf08, &(0x7f0000001e40)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) pwrite64(r3, &(0x7f0000000140)="9e7f", 0x2, 0xfecc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003540)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={0x0}) recvmsg$unix(r6, &(0x7f00000005c0)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000540)=""/59, 0x3b}], 0x3}, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r6}) r8 = fsopen(&(0x7f0000000600)='ufs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000640)='\x00', &(0x7f0000000680)='nl80211\x00', 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000300)={r7, 0x80000}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6d}]}], {0x14, 0x10}}, 0x94}}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000700), &(0x7f0000000200), &(0x7f00000006c0)=[0xff, 0x8, 0xff, 0x1], 0x0, 0xfffffffffffffffc}) 0s ago: executing program 4 (id=4540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000058, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0xa0, 0x0, 0x9, 0x2, 0x8, "886d26264822190b"}) futex(&(0x7f0000004000), 0x3, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 2389.793245][ T4087] tipc: Disabling bearer [ 2389.823643][ T4087] tipc: Left network mode [ 2389.838719][T22634] chnl_net:caif_netlink_parms(): no params data found [ 2389.963596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2390.002425][T22617] bridge0: port 1(bridge_slave_0) entered blocking state [ 2390.012986][T22617] bridge0: port 1(bridge_slave_0) entered disabled state [ 2390.023493][T22617] bridge_slave_0: entered allmulticast mode [ 2390.038820][T22617] bridge_slave_0: entered promiscuous mode [ 2390.209602][T22617] bridge0: port 2(bridge_slave_1) entered blocking state [ 2390.217275][T22617] bridge0: port 2(bridge_slave_1) entered disabled state [ 2390.225363][T22617] bridge_slave_1: entered allmulticast mode [ 2390.234585][T22617] bridge_slave_1: entered promiscuous mode [ 2390.399751][T20210] Bluetooth: hci9: command tx timeout [ 2390.400431][T21567] Bluetooth: hci3: command tx timeout [ 2390.766347][T22617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2390.887866][ T4087] hsr_slave_0: left promiscuous mode [ 2390.916707][ T4087] hsr_slave_1: left promiscuous mode [ 2390.942528][ T4087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2390.950616][ T4087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2390.986635][ T4087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2390.994673][ T4087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2391.018440][ T4087] veth1_macvtap: left promiscuous mode [ 2391.024482][ T4087] veth0_macvtap: left promiscuous mode [ 2391.032723][ T4087] veth1_vlan: left promiscuous mode [ 2391.038284][ T4087] veth0_vlan: left promiscuous mode [ 2391.397286][ T4087] pimreg (unregistering): left allmulticast mode [ 2391.526333][T21567] Bluetooth: hci0: command tx timeout [ 2391.720521][ T4087] team0 (unregistering): Port device team_slave_1 removed [ 2391.783280][ T4087] team0 (unregistering): Port device team_slave_0 removed [ 2391.841363][T21567] Bluetooth: hci5: command tx timeout [ 2392.118451][T22617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2392.212021][T22621] bridge0: port 1(bridge_slave_0) entered blocking state [ 2392.219815][T22621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2392.227732][T22621] bridge_slave_0: entered allmulticast mode [ 2392.237181][T22621] bridge_slave_0: entered promiscuous mode [ 2392.309544][T22624] bridge0: port 1(bridge_slave_0) entered blocking state [ 2392.317222][T22624] bridge0: port 1(bridge_slave_0) entered disabled state [ 2392.325225][T22624] bridge_slave_0: entered allmulticast mode [ 2392.334343][T22624] bridge_slave_0: entered promiscuous mode [ 2392.437057][T22624] bridge0: port 2(bridge_slave_1) entered blocking state [ 2392.444877][T22624] bridge0: port 2(bridge_slave_1) entered disabled state [ 2392.452853][T22624] bridge_slave_1: entered allmulticast mode [ 2392.462029][T22624] bridge_slave_1: entered promiscuous mode [ 2392.495986][T21567] Bluetooth: hci9: command tx timeout [ 2392.501783][T21567] Bluetooth: hci3: command tx timeout [ 2392.550527][T22621] bridge0: port 2(bridge_slave_1) entered blocking state [ 2392.558199][T22621] bridge0: port 2(bridge_slave_1) entered disabled state [ 2392.566186][T22621] bridge_slave_1: entered allmulticast mode [ 2392.575369][T22621] bridge_slave_1: entered promiscuous mode [ 2392.730748][T22617] team0: Port device team_slave_0 added [ 2392.913780][T22617] team0: Port device team_slave_1 added [ 2392.941317][T22621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2393.027167][T22634] bridge0: port 1(bridge_slave_0) entered blocking state [ 2393.035067][T22634] bridge0: port 1(bridge_slave_0) entered disabled state [ 2393.049580][T22634] bridge_slave_0: entered allmulticast mode [ 2393.058588][T22634] bridge_slave_0: entered promiscuous mode [ 2393.089719][T22624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2393.099774][T22634] bridge0: port 2(bridge_slave_1) entered blocking state [ 2393.118647][T22634] bridge0: port 2(bridge_slave_1) entered disabled state [ 2393.134912][T22634] bridge_slave_1: entered allmulticast mode [ 2393.144183][T22634] bridge_slave_1: entered promiscuous mode [ 2393.246054][T22621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2393.290763][T22624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2393.343075][ T4087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2393.387554][T22617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2393.394886][T22617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2393.428013][T22617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2393.599227][T20210] Bluetooth: hci0: command tx timeout [ 2393.645256][ T4087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2393.662436][T22617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2393.669789][T22617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2393.697219][T22617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2393.726830][T22621] team0: Port device team_slave_0 added [ 2393.776270][T16211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2393.778076][T22634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2393.784997][T16211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2393.837700][ T4087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2393.858244][T22621] team0: Port device team_slave_1 added [ 2393.913426][T22624] team0: Port device team_slave_0 added [ 2393.942649][T22634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2393.943227][T20210] Bluetooth: hci5: command tx timeout [ 2393.974042][ T4087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2394.075029][T22624] team0: Port device team_slave_1 added [ 2394.084918][T22621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2394.092421][T22621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2394.118982][T22621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2394.242962][T22621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2394.251067][T22621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2394.277996][T22621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2394.342452][T22634] team0: Port device team_slave_0 added [ 2394.497413][ T3357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2394.505754][ T3357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2394.560077][T20210] Bluetooth: hci9: command tx timeout [ 2394.563919][T22634] team0: Port device team_slave_1 added [ 2394.620326][T22617] hsr_slave_0: entered promiscuous mode [ 2394.630044][T22617] hsr_slave_1: entered promiscuous mode [ 2394.637848][T22617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2394.656237][T22617] Cannot create hsr debugfs directory [ 2394.667995][T22624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2394.675635][T22624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2394.702069][T22624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2394.875865][T22624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2394.883925][T22624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2394.910592][T22624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2394.960434][T22621] hsr_slave_0: entered promiscuous mode [ 2394.979799][T22621] hsr_slave_1: entered promiscuous mode [ 2394.990067][T22621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2394.997827][T22621] Cannot create hsr debugfs directory [ 2395.039409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2395.241545][T22634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2395.248732][T22634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2395.281177][T22634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2395.411596][ T4087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2395.685490][T20210] Bluetooth: hci0: command tx timeout [ 2395.693173][ T4087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2395.823403][T22634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2395.830848][T22634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2395.857208][T22634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2395.919157][T22624] hsr_slave_0: entered promiscuous mode [ 2395.944251][T22624] hsr_slave_1: entered promiscuous mode [ 2395.967058][T22624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2395.981084][T22624] Cannot create hsr debugfs directory [ 2396.029010][ T4087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2396.107309][ T4087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2396.640874][T22634] hsr_slave_0: entered promiscuous mode [ 2396.651779][T22634] hsr_slave_1: entered promiscuous mode [ 2396.661337][T22634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2396.669398][T22634] Cannot create hsr debugfs directory [ 2396.857114][ T4087] bridge_slave_1: left allmulticast mode [ 2396.863427][ T4087] bridge_slave_1: left promiscuous mode [ 2396.871515][ T4087] bridge0: port 2(bridge_slave_1) entered disabled state [ 2396.917839][ T4087] bridge_slave_0: left allmulticast mode [ 2396.918018][T22673] loop0: detected capacity change from 0 to 4096 [ 2396.924316][ T4087] bridge_slave_0: left promiscuous mode [ 2396.937627][ T4087] bridge0: port 1(bridge_slave_0) entered disabled state [ 2396.946636][T22673] ntfs3: Bad value for 'fmask' [ 2396.965299][ T4087] bridge_slave_1: left allmulticast mode [ 2396.972271][ T4087] bridge_slave_1: left promiscuous mode [ 2396.978763][ T4087] bridge0: port 2(bridge_slave_1) entered disabled state [ 2397.026463][ T4087] bridge_slave_0: left allmulticast mode [ 2397.032741][ T4087] bridge_slave_0: left promiscuous mode [ 2397.039611][ T4087] bridge0: port 1(bridge_slave_0) entered disabled state [ 2397.528023][ T4087] bond0: left promiscuous mode [ 2397.533194][ T4087] bond_slave_0: left promiscuous mode [ 2397.546240][ T4087] bond_slave_1: left promiscuous mode [ 2398.145684][ T4087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2398.165279][ T4087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2398.183944][ T4087] bond0 (unregistering): Released all slaves [ 2398.216852][ T4087] team0: Port device vlan2 removed [ 2398.245587][ T4087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2398.277187][ T4087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2398.295730][ T4087] bond0 (unregistering): Released all slaves [ 2398.514900][T22680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4400'. [ 2399.447344][ T4087] hsr_slave_0: left promiscuous mode [ 2399.462758][ T4087] hsr_slave_1: left promiscuous mode [ 2399.471658][ T4087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2399.480450][ T4087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2399.501859][ T4087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2399.510575][ T4087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2399.564779][ T4087] hsr_slave_0: left promiscuous mode [ 2399.584388][ T4087] hsr_slave_1: left promiscuous mode [ 2399.593118][ T4087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2399.601778][ T4087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2399.635130][ T4087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2399.643092][ T4087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2399.710731][ T4087] veth1_macvtap: left promiscuous mode [ 2399.716580][ T4087] veth0_macvtap: left promiscuous mode [ 2399.722627][ T4087] veth1_vlan: left promiscuous mode [ 2399.728293][ T4087] veth0_vlan: left promiscuous mode [ 2399.736550][ T4087] veth1_macvtap: left promiscuous mode [ 2399.743004][ T4087] veth0_macvtap: left promiscuous mode [ 2399.749033][ T4087] veth1_vlan: left promiscuous mode [ 2399.754587][ T4087] veth0_vlan: left promiscuous mode [ 2400.087586][T22684] loop0: detected capacity change from 0 to 4096 [ 2400.186866][T22685] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2400.791514][T22687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4403'. [ 2400.895194][ T4087] team0 (unregistering): Port device team_slave_1 removed [ 2400.921487][ T4087] team0 (unregistering): Port device team_slave_0 removed [ 2401.651219][ T4087] team0 (unregistering): Port device team_slave_1 removed [ 2401.668483][T20210] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 2401.690233][ T4087] team0 (unregistering): Port device team_slave_0 removed [ 2402.059290][T15316] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2402.239276][T15316] usb 1-1: Using ep0 maxpacket: 16 [ 2402.252748][T15316] usb 1-1: config 5 has an invalid interface number: 16 but max is 0 [ 2402.261467][T15316] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 2402.270512][T15316] usb 1-1: config 5 has no interface number 0 [ 2402.276992][T15316] usb 1-1: config 5 interface 16 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2402.288126][T15316] usb 1-1: config 5 interface 16 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 2402.299482][T15316] usb 1-1: config 5 interface 16 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2402.310727][T15316] usb 1-1: config 5 interface 16 altsetting 2 endpoint 0x7 has invalid maxpacket 528, setting to 64 [ 2402.325647][T15316] usb 1-1: config 5 interface 16 altsetting 2 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2402.338836][T15316] usb 1-1: config 5 interface 16 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 2402.350177][T15316] usb 1-1: config 5 interface 16 has no altsetting 0 [ 2402.369697][T15316] usb 1-1: New USB device found, idVendor=0499, idProduct=1037, bcdDevice=2f.21 [ 2402.379171][T15316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.387430][T15316] usb 1-1: Product: syz [ 2402.392024][T15316] usb 1-1: Manufacturer: syz [ 2402.396854][T15316] usb 1-1: SerialNumber: syz [ 2402.646010][T22693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2402.658492][T22693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2402.702120][T22693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4405'. [ 2402.714978][T22693] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4405'. [ 2402.780767][T15316] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2402.853446][T15316] snd-usb-audio 1-1:5.16: probe with driver snd-usb-audio failed with error -2 [ 2402.885124][T22624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2402.887738][T15316] usb 1-1: USB disconnect, device number 76 [ 2402.927517][T22624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2402.975057][T22624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2402.994868][T22624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2403.396040][T22634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2403.457730][T22634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2403.552259][T22617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2403.591118][T22634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2403.630876][T22617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2403.713546][T22634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2403.744700][T22621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2403.799605][T22617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2403.843024][T22617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2403.889289][T22621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2403.963822][T22621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2404.076346][T22621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2404.372969][T22624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2404.572574][T22624] 8021q: adding VLAN 0 to HW filter on device team0 [ 2404.702387][T22634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2404.705572][T22696] loop0: detected capacity change from 0 to 4096 [ 2404.729886][ T3806] bridge0: port 1(bridge_slave_0) entered blocking state [ 2404.737534][ T3806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2404.858279][T22700] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2404.873666][ T3806] bridge0: port 2(bridge_slave_1) entered blocking state [ 2404.881380][ T3806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2404.923586][T22634] 8021q: adding VLAN 0 to HW filter on device team0 [ 2405.058226][ T29] audit: type=1800 audit(2000001464.379:682): pid=22696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4406" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 2405.227223][ T3806] bridge0: port 1(bridge_slave_0) entered blocking state [ 2405.234977][ T3806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2405.275935][ T29] audit: type=1800 audit(2000001464.599:683): pid=22701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4406" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 2405.377873][T22624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2405.424081][ T3806] bridge0: port 2(bridge_slave_1) entered blocking state [ 2405.431821][ T3806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2405.626972][T22617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2405.733450][T22621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2405.850415][T22617] 8021q: adding VLAN 0 to HW filter on device team0 [ 2405.913243][T22634] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2405.925957][T22634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2406.026542][T22617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2406.038383][T22617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2406.118172][ T3806] bridge0: port 1(bridge_slave_0) entered blocking state [ 2406.125960][ T3806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2406.141643][ T3806] bridge0: port 2(bridge_slave_1) entered blocking state [ 2406.149417][ T3806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2406.368520][T22621] 8021q: adding VLAN 0 to HW filter on device team0 [ 2406.395973][ T3357] bridge0: port 1(bridge_slave_0) entered blocking state [ 2406.403798][ T3357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2406.553936][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state [ 2406.561680][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2407.531481][T22624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2407.917991][T22634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2408.182346][T22617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2408.215745][T22624] veth0_vlan: entered promiscuous mode [ 2408.345251][T22624] veth1_vlan: entered promiscuous mode [ 2408.838201][T22624] veth0_macvtap: entered promiscuous mode [ 2408.901926][T22617] veth0_vlan: entered promiscuous mode [ 2408.951782][T22624] veth1_macvtap: entered promiscuous mode [ 2409.052051][T22617] veth1_vlan: entered promiscuous mode [ 2409.171704][T22621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2409.198624][T22624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.210961][T22624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.222262][T22624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.233693][T22624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.243903][T22624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.254725][T22624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.264928][T22624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.275711][T22624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.292344][T22624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2409.304753][T22624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.320480][T22624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2409.554013][T22617] veth0_macvtap: entered promiscuous mode [ 2409.637884][T22617] veth1_macvtap: entered promiscuous mode [ 2409.661607][T22624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2409.673175][T22624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.683430][T22624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2409.699503][T22624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.711551][T22624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2409.722574][T22624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.732835][T22624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2409.743652][T22624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.753808][T22624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2409.764806][T22624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.780194][T22624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2409.823993][T22624] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2409.833229][T22624] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2409.842654][T22624] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2409.851882][T22624] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.133631][T22617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2410.145464][T22617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.155831][T22617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2410.166860][T22617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.177064][T22617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2410.187833][T22617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.198038][T22617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2410.214056][T22617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.225706][T22617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2410.236553][T22617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.246814][T22617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2410.258706][T22617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.274241][T22617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2410.376477][T22621] veth0_vlan: entered promiscuous mode [ 2410.475748][T22621] veth1_vlan: entered promiscuous mode [ 2410.605635][T22621] veth0_macvtap: entered promiscuous mode [ 2410.652405][T22617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.663357][T22617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.673520][T22617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.684291][T22617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.694442][T22617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.705212][T22617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.720040][T22617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.732799][T22617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.745223][T22617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.756010][T22617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.766236][T22617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2410.777202][T22617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2410.794614][T22617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2410.873198][T22621] veth1_macvtap: entered promiscuous mode [ 2411.106619][T22617] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.118473][T22617] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.133401][T22617] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.145160][T22617] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.191134][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2411.201973][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.212211][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2411.223087][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.238416][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2411.242700][T22737] loop0: detected capacity change from 0 to 764 [ 2411.250992][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.266718][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2411.277528][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.287679][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2411.298485][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.308646][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2411.319472][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.334656][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2411.347367][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.363049][T22621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2411.467710][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2411.480073][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.492040][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2411.503646][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.514867][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2411.527261][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.542534][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2411.555282][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.565469][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2411.576333][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.586491][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2411.597272][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.608321][T22621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2411.619112][T22621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2411.634748][T22621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2411.758163][T22621] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.774942][T22621] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.786054][T22621] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.795269][T22621] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.923172][T22634] veth0_vlan: entered promiscuous mode [ 2412.067955][T22634] veth1_vlan: entered promiscuous mode [ 2412.509838][T22634] veth0_macvtap: entered promiscuous mode [ 2412.605691][T22634] veth1_macvtap: entered promiscuous mode [ 2412.808324][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.819301][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.829547][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.840320][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.850422][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.862430][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.877811][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.890371][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.900590][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.911347][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.921557][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.932309][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.942472][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.953196][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.964049][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.980497][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.997423][T22634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2413.208170][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.219017][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.229176][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.239921][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.250068][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.260878][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.271077][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.287927][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.300038][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.310773][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.320976][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.331709][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.341794][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.352573][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.363292][T22634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.374506][T22634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.395818][T22634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2413.661461][T22634] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.671207][T22634] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.680370][T22634] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.695041][T22634] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.016576][T20210] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 2414.280417][T15311] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2414.510282][T15311] usb 1-1: Using ep0 maxpacket: 16 [ 2414.529670][T15311] usb 1-1: config 5 has an invalid interface number: 16 but max is 0 [ 2414.538069][T15311] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 2414.547246][T15311] usb 1-1: config 5 has no interface number 0 [ 2414.553774][T15311] usb 1-1: config 5 interface 16 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2414.565602][T15311] usb 1-1: config 5 interface 16 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 2414.577846][T15311] usb 1-1: config 5 interface 16 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2414.589131][T15311] usb 1-1: config 5 interface 16 altsetting 2 endpoint 0x7 has invalid maxpacket 528, setting to 64 [ 2414.600345][T15311] usb 1-1: config 5 interface 16 altsetting 2 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2414.616513][T15311] usb 1-1: config 5 interface 16 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 2414.629256][T15311] usb 1-1: config 5 interface 16 has no altsetting 0 [ 2414.677844][T15311] usb 1-1: New USB device found, idVendor=0499, idProduct=1037, bcdDevice=2f.21 [ 2414.688723][T15311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.697172][T15311] usb 1-1: Product: syz [ 2414.701782][T15311] usb 1-1: Manufacturer: syz [ 2414.706615][T15311] usb 1-1: SerialNumber: syz [ 2415.028816][T22762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2415.096714][T22762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2415.242719][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4412'. [ 2415.282343][T22762] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4412'. [ 2415.371504][T15311] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2415.480846][T15311] snd-usb-audio 1-1:5.16: probe with driver snd-usb-audio failed with error -2 [ 2415.570445][T15311] usb 1-1: USB disconnect, device number 77 [ 2416.453738][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2416.462432][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2416.616883][T18958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2416.625477][T18958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2417.151209][ T29] audit: type=1326 audit(2000001476.469:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22801 comm="syz.3.4395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40d2f7dff9 code=0x0 [ 2417.610460][T22792] loop0: detected capacity change from 0 to 4096 [ 2417.704995][T22809] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2417.748853][ T29] audit: type=1800 audit(2000001477.049:685): pid=22792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4413" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 2417.899515][ T29] audit: type=1800 audit(2000001477.199:686): pid=22810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4413" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 2418.003366][T18959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2418.011502][T18959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2418.242088][T18959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2418.250569][T18959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2418.571131][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2418.580059][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2418.863686][T18959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2418.872593][T18959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2419.090276][ T44] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2419.129617][T22822] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (34504) [ 2419.141039][T22822] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 2419.279299][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 2419.345347][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2419.357216][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2419.375554][ T44] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2419.669619][ T44] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 2419.679156][ T44] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 2419.687789][ T44] usb 2-1: Product: syz [ 2419.692290][ T44] usb 2-1: Manufacturer: syz [ 2419.697148][ T44] usb 2-1: SerialNumber: syz [ 2419.780254][ T44] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input49 [ 2419.827458][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2419.841139][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2419.910804][T22292] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2419.984703][T22831] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 2420.052371][T22831] netlink: 'syz.2.4417': attribute type 10 has an invalid length. [ 2420.089178][T22292] usb 4-1: Using ep0 maxpacket: 8 [ 2420.108095][T22292] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2420.115948][T22292] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2420.124238][T22831] bridge0: port 2(bridge_slave_1) entered disabled state [ 2420.127507][T22292] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2420.136963][T22831] bridge0: port 1(bridge_slave_0) entered disabled state [ 2420.151534][T22292] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2420.166975][T22292] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2420.182974][T22831] bridge0: port 2(bridge_slave_1) entered blocking state [ 2420.184342][T22292] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2420.190741][T22831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2420.198281][T22292] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2420.206772][T22831] bridge0: port 1(bridge_slave_0) entered blocking state [ 2420.217033][T22292] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2420.224715][T22831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2420.236210][T22292] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2420.262234][T22292] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2420.267494][T22831] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2420.299200][T22292] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2420.307069][T22292] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2420.319129][T22292] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2420.322791][ T7018] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 2420.331432][T22292] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2420.331610][T22292] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2420.358043][T22292] usb 4-1: string descriptor 0 read error: -22 [ 2420.358551][T22292] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2420.358712][T22292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.376726][T22292] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2420.382183][ T3357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2420.417611][ T3357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2420.457084][T15318] usb 2-1: USB disconnect, device number 63 [ 2420.511432][T15318] appletouch 2-1:1.0: input: appletouch disconnected [ 2420.595855][T22292] usb 4-1: USB disconnect, device number 97 [ 2420.607720][T22834] loop0: detected capacity change from 0 to 1024 [ 2420.632339][T22834] EXT4-fs: Ignoring removed oldalloc option [ 2420.691667][T22834] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 2420.793306][T22834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2421.251129][T22466] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /19/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 2421.312491][T22847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2421.321544][T20210] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 2421.338545][T22847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2421.353576][T22847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2421.439895][T22847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2421.457155][T22466] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 2421.510706][T22847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4419'. [ 2421.550924][T22847] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4419'. [ 2421.550922][T22466] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 2421.552421][T22466] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /19/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 2421.650024][T22466] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 2421.691653][T22466] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 2421.791641][T22466] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /19/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 2421.850755][T22466] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 2421.903804][T22466] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 2421.917639][T22466] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /19/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 2421.956316][T22466] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 2421.978150][T22466] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 2422.017657][T22466] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /19/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 2422.141209][T22466] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 2422.149778][T22853] loop3: detected capacity change from 0 to 2048 [ 2422.211449][T22851] loop1: detected capacity change from 0 to 4096 [ 2422.224740][T22855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4424'. [ 2422.238715][T22466] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 2422.321810][T22466] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 2422.405448][T22857] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 2422.444960][T22859] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2422.461738][T22853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2422.606477][T22466] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 2422.631187][ T29] audit: type=1800 audit(2000001481.949:687): pid=22851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4422" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 2422.709184][T22466] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 2422.728431][ T29] audit: type=1800 audit(2000001482.009:688): pid=22851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4422" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 2422.756664][T22853] EXT4-fs error (device loop3): ext4_search_dir:1505: inode #12: block 9: comm syz.3.4423: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 2422.857697][T22864] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (34504) [ 2422.868037][T22864] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 2422.990299][T22466] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 2423.055675][T22466] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 2423.133547][T22624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2423.223696][T22857] loop2: detected capacity change from 0 to 4096 [ 2423.267092][T22857] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 2423.605563][T22868] loop3: detected capacity change from 0 to 4096 [ 2423.960646][T22870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4429'. [ 2423.970162][T22870] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4429'. [ 2424.593490][T22879] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 2424.929002][T22884] loop2: detected capacity change from 0 to 512 [ 2424.965374][T22884] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 2424.997519][T22888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2425.014046][T22887] FAULT_INJECTION: forcing a failure. [ 2425.014046][T22887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2425.028238][T22887] CPU: 0 UID: 0 PID: 22887 Comm: syz.3.4434 Not tainted 6.12.0-rc2-syzkaller #0 [ 2425.037584][T22887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2425.047981][T22887] Call Trace: [ 2425.051449][T22887] [ 2425.054571][T22887] dump_stack_lvl+0x216/0x2d0 [ 2425.059576][T22887] dump_stack+0x1e/0x30 [ 2425.064040][T22887] should_fail_ex+0x748/0x7f0 [ 2425.069032][T22887] should_fail+0x2a/0x40 [ 2425.073568][T22887] should_fail_usercopy+0x2e/0x40 [ 2425.078909][T22887] _copy_from_iter+0x1d8/0x2b40 [ 2425.084047][T22887] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2425.090156][T22887] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2425.096259][T22887] ? skb_put+0x189/0x230 [ 2425.100800][T22887] netlink_sendmsg+0xc1d/0x11e0 [ 2425.105983][T22887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2425.111587][T22887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2425.117185][T22887] __sock_sendmsg+0x30f/0x380 [ 2425.122184][T22887] ____sys_sendmsg+0x877/0xb60 [ 2425.127270][T22887] ___sys_sendmsg+0x28d/0x3c0 [ 2425.132227][T22887] ? kmsan_get_metadata+0x13e/0x1c0 [ 2425.137722][T22887] ? __rcu_read_unlock+0x7b/0xe0 [ 2425.142955][T22887] ? __fget_files+0x4f5/0x5c0 [ 2425.148056][T22887] ? kmsan_get_metadata+0x13e/0x1c0 [ 2425.153555][T22887] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2425.159680][T22887] __x64_sys_sendmsg+0x300/0x4a0 [ 2425.164922][T22887] ? perf_mmap+0x13e0/0x28d0 [ 2425.169839][T22887] x64_sys_call+0x2da0/0x3ba0 [ 2425.174838][T22887] do_syscall_64+0xcd/0x1e0 [ 2425.179657][T22887] ? clear_bhb_loop+0x25/0x80 [ 2425.184629][T22887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2425.190882][T22887] RIP: 0033:0x7f40d2f7dff9 [ 2425.195552][T22887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2425.215490][T22887] RSP: 002b:00007f40d3d08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2425.224728][T22887] RAX: ffffffffffffffda RBX: 00007f40d3135f80 RCX: 00007f40d2f7dff9 [ 2425.232972][T22887] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2425.241196][T22887] RBP: 00007f40d3d08090 R08: 0000000000000000 R09: 0000000000000000 [ 2425.249412][T22887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2425.257625][T22887] R13: 0000000000000000 R14: 00007f40d3135f80 R15: 00007fff529a94e8 [ 2425.265882][T22887] [ 2425.269251][ C0] vkms_vblank_simulate: vblank timer overrun [ 2425.320606][T22888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2425.356423][T22882] Falling back ldisc for ttyS3. [ 2425.377754][T22888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2425.391325][T22888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2425.555397][T20210] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 2425.568148][T22888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2425.594514][T22888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2425.657738][ T3357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2425.723115][T22466] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2425.821262][ T44] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2425.903887][ T3357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2425.999502][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 2426.021364][ T44] usb 3-1: config 5 has an invalid interface number: 16 but max is 0 [ 2426.030052][ T44] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 2426.039329][ T44] usb 3-1: config 5 has no interface number 0 [ 2426.045680][ T44] usb 3-1: config 5 interface 16 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2426.056925][ T44] usb 3-1: config 5 interface 16 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 2426.068234][ T44] usb 3-1: config 5 interface 16 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2426.086023][ T44] usb 3-1: config 5 interface 16 altsetting 2 endpoint 0x7 has invalid maxpacket 528, setting to 64 [ 2426.099115][ T44] usb 3-1: config 5 interface 16 altsetting 2 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2426.111077][ T44] usb 3-1: config 5 interface 16 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 2426.122419][ T44] usb 3-1: config 5 interface 16 has no altsetting 0 [ 2426.326393][ T3357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.443381][ T44] usb 3-1: New USB device found, idVendor=0499, idProduct=1037, bcdDevice=2f.21 [ 2426.453724][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2426.462102][ T44] usb 3-1: Product: syz [ 2426.466499][ T44] usb 3-1: Manufacturer: syz [ 2426.471620][ T44] usb 3-1: SerialNumber: syz [ 2426.527712][ T3357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2427.273738][T22890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2427.357138][T21567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2427.367403][ T3357] bridge_slave_1: left allmulticast mode [ 2427.367565][ T3357] bridge_slave_1: left promiscuous mode [ 2427.368757][ T3357] bridge0: port 2(bridge_slave_1) entered disabled state [ 2427.376725][T21567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2427.400520][T22890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2427.453928][T21567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2427.479374][T22890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4436'. [ 2427.494086][ T3357] bridge_slave_0: left allmulticast mode [ 2427.500925][ T3357] bridge_slave_0: left promiscuous mode [ 2427.507991][ T3357] bridge0: port 1(bridge_slave_0) entered disabled state [ 2427.525482][T22890] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4436'. [ 2427.597293][ T44] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2427.603780][T21567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2427.697069][ T44] snd-usb-audio 3-1:5.16: probe with driver snd-usb-audio failed with error -2 [ 2427.757357][ T44] usb 3-1: USB disconnect, device number 57 [ 2427.853223][T21567] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2427.908841][T21567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2428.102073][ T3357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2428.149779][ T3357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2428.175251][ T3357] bond0 (unregistering): Released all slaves [ 2428.258641][T22900] bond1: entered promiscuous mode [ 2428.264338][T22900] bond1: entered allmulticast mode [ 2428.271234][T22900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2428.347957][T22900] bond1 (unregistering): Released all slaves [ 2428.507045][T22901] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (34504) [ 2428.517200][T22901] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 2428.955563][T22913] netlink: zone id is out of range [ 2428.961425][T22913] netlink: del zone limit has 8 unknown bytes [ 2429.101557][T22914] loop3: detected capacity change from 0 to 256 [ 2429.303143][T22914] loop3: detected capacity change from 0 to 8 [ 2429.570082][ T29] audit: type=1326 audit(2000001488.889:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22926 comm="syz.1.4448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f376c77dff9 code=0x0 [ 2429.691513][T22925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4447'. [ 2429.985481][ T3357] hsr_slave_0: left promiscuous mode [ 2429.995556][T22914] loop3: detected capacity change from 0 to 256 [ 2430.004112][ T3357] hsr_slave_1: left promiscuous mode [ 2430.050012][ T3357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2430.057929][ T3357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2430.095244][T20210] Bluetooth: hci2: command tx timeout [ 2430.145885][ T3357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2430.153838][ T3357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2430.193631][ T3357] veth1_macvtap: left promiscuous mode [ 2430.199687][ T3357] veth0_macvtap: left promiscuous mode [ 2430.205592][ T3357] veth1_vlan: left promiscuous mode [ 2430.211240][ T3357] veth0_vlan: left promiscuous mode [ 2430.431382][T22932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4450'. [ 2430.441133][T22932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4450'. [ 2430.708059][T22938] loop2: detected capacity change from 0 to 512 [ 2430.717520][T22938] ext3: Unknown parameter 'fsmagic' [ 2430.828586][T22938] loop2: detected capacity change from 0 to 512 [ 2430.844755][T22938] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2430.984685][T22938] EXT4-fs (loop2): 1 orphan inode deleted [ 2430.998551][T22938] EXT4-fs (loop2): 1 truncate cleaned up [ 2431.008835][T22938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2431.062232][T20210] Bluetooth: hci9: ISO packet for unknown connection handle 0 [ 2431.250279][ T3357] team0 (unregistering): Port device team_slave_1 removed [ 2431.296807][ T3357] team0 (unregistering): Port device team_slave_0 removed [ 2431.729205][ T5248] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2431.760169][T22944] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (34504) [ 2431.770454][T22944] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 2431.835266][ T9788] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2431.923045][ T5248] usb 4-1: Using ep0 maxpacket: 32 [ 2432.046835][ T5248] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2432.056497][ T5248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2432.064935][ T5248] usb 4-1: Product: syz [ 2432.069440][ T5248] usb 4-1: Manufacturer: syz [ 2432.074279][ T5248] usb 4-1: SerialNumber: syz [ 2432.150188][T22896] chnl_net:caif_netlink_parms(): no params data found [ 2432.171023][T20210] Bluetooth: hci2: command tx timeout [ 2432.214677][ T9788] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=ba.c5 [ 2432.231466][ T9788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2432.243405][ T9788] usb 3-1: Product: syz [ 2432.247818][ T9788] usb 3-1: Manufacturer: syz [ 2432.253094][ T9788] usb 3-1: SerialNumber: syz [ 2432.271857][ T5248] usb 4-1: config 0 descriptor?? [ 2432.335971][ T9788] usb 3-1: config 0 descriptor?? [ 2432.391845][ T9788] comedi comedi0: Wrong number of endpoints [ 2432.398185][ T9788] ni6501 3-1:0.0: driver 'ni6501' failed to auto-configure device. [ 2432.757324][T15318] usb 3-1: USB disconnect, device number 58 [ 2432.774715][ T5248] airspy 4-1:0.0: Board ID: 00 [ 2432.779922][ T5248] airspy 4-1:0.0: Firmware version: [ 2432.884251][T22621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2433.200365][T22942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4453'. [ 2433.231373][T22942] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4453'. [ 2433.344609][ T5248] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 2433.413019][ T5248] airspy 4-1:0.0: Registered as swradio16 [ 2433.420858][ T5248] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2433.486631][ T29] audit: type=1326 audit(2000001492.799:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22970 comm="syz.4.4463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30fe37dff9 code=0x0 [ 2433.499940][ T5248] usb 4-1: USB disconnect, device number 98 [ 2433.773054][T22896] bridge0: port 1(bridge_slave_0) entered blocking state [ 2433.780956][T22896] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.788839][T22896] bridge_slave_0: entered allmulticast mode [ 2433.794298][T22981] loop1: detected capacity change from 0 to 16 [ 2433.798370][T22896] bridge_slave_0: entered promiscuous mode [ 2433.893043][T22896] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.896919][T22981] erofs: (device loop1): erofs_read_inode: negative i_size @ nid 36 [ 2433.901155][T22896] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.916637][T22896] bridge_slave_1: entered allmulticast mode [ 2433.926071][T22896] bridge_slave_1: entered promiscuous mode [ 2434.239390][T20210] Bluetooth: hci2: command tx timeout [ 2434.282217][T22896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2434.312070][T22896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2434.471067][T22896] team0: Port device team_slave_0 added [ 2434.624376][T22896] team0: Port device team_slave_1 added [ 2435.043480][T22896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2435.050920][T22896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2435.069358][T22996] loop4: detected capacity change from 0 to 1024 [ 2435.077253][T22896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2435.127683][T23000] loop1: detected capacity change from 0 to 1 [ 2435.141668][T22996] ext4: Unknown parameter 'uid<00000000000000000000' [ 2435.164121][T22896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2435.171704][T22896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2435.207071][T22896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2435.254356][T23002] FAULT_INJECTION: forcing a failure. [ 2435.254356][T23002] name failslab, interval 1, probability 0, space 0, times 0 [ 2435.268208][T23002] CPU: 1 UID: 0 PID: 23002 Comm: syz.3.4469 Not tainted 6.12.0-rc2-syzkaller #0 [ 2435.277539][T23002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2435.287833][T23002] Call Trace: [ 2435.291305][T23002] [ 2435.294426][T23002] dump_stack_lvl+0x216/0x2d0 [ 2435.299407][T23002] dump_stack+0x1e/0x30 [ 2435.303852][T23002] should_fail_ex+0x748/0x7f0 [ 2435.308844][T23002] should_failslab+0x17f/0x210 [ 2435.313890][T23002] kmem_cache_alloc_node_noprof+0xeb/0xb80 [ 2435.320017][T23002] ? __alloc_skb+0x1e9/0x7b0 [ 2435.324890][T23002] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2435.330985][T23002] __alloc_skb+0x1e9/0x7b0 [ 2435.335676][T23002] netlink_ack+0x281/0xe80 [ 2435.340414][T23002] ? kmsan_get_metadata+0x13e/0x1c0 [ 2435.345909][T23002] netlink_rcv_skb+0x510/0x650 [ 2435.350984][T23002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2435.356290][T23002] ? __pfx_genl_rcv+0x10/0x10 [ 2435.361285][T23002] genl_rcv+0x40/0x60 [ 2435.365594][T23002] netlink_unicast+0xf52/0x1260 [ 2435.370729][T23002] netlink_sendmsg+0x10da/0x11e0 [ 2435.375970][T23002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2435.381555][T23002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2435.387138][T23002] __sock_sendmsg+0x30f/0x380 [ 2435.392130][T23002] ____sys_sendmsg+0x877/0xb60 [ 2435.397207][T23002] ___sys_sendmsg+0x28d/0x3c0 [ 2435.402171][T23002] ? kmsan_get_metadata+0x13e/0x1c0 [ 2435.407658][T23002] ? __rcu_read_unlock+0x7b/0xe0 [ 2435.412899][T23002] ? __fget_files+0x4f5/0x5c0 [ 2435.417881][T23002] ? kmsan_get_metadata+0x13e/0x1c0 [ 2435.423364][T23002] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2435.429458][T23002] __x64_sys_sendmsg+0x300/0x4a0 [ 2435.434674][T23002] ? perf_mmap+0x13e0/0x28d0 [ 2435.439554][T23002] x64_sys_call+0x2da0/0x3ba0 [ 2435.444523][T23002] do_syscall_64+0xcd/0x1e0 [ 2435.449298][T23002] ? clear_bhb_loop+0x25/0x80 [ 2435.454226][T23002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2435.460438][T23002] RIP: 0033:0x7f40d2f7dff9 [ 2435.465084][T23002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2435.484964][T23002] RSP: 002b:00007f40d3d08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2435.493671][T23002] RAX: ffffffffffffffda RBX: 00007f40d3135f80 RCX: 00007f40d2f7dff9 [ 2435.501883][T23002] RDX: 0000000004000004 RSI: 0000000020000400 RDI: 0000000000000004 [ 2435.510100][T23002] RBP: 00007f40d3d08090 R08: 0000000000000000 R09: 0000000000000000 [ 2435.518300][T23002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2435.526493][T23002] R13: 0000000000000000 R14: 00007f40d3135f80 R15: 00007fff529a94e8 [ 2435.534707][T23002] [ 2435.579820][T15318] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2435.726531][T23005] loop1: detected capacity change from 0 to 512 [ 2435.844610][T23009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2435.879750][T23005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2435.893728][T23005] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2435.924520][T23009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2435.967543][T22896] hsr_slave_0: entered promiscuous mode [ 2435.967999][T15318] usb 3-1: New USB device found, idVendor=04cb, idProduct=010b, bcdDevice=3d.e0 [ 2435.983086][T15318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2435.988112][T23009] loop4: detected capacity change from 0 to 128 [ 2435.991464][T15318] usb 3-1: Product: syz [ 2436.010994][T15318] usb 3-1: Manufacturer: syz [ 2436.015849][T15318] usb 3-1: SerialNumber: syz [ 2436.019941][T23009] udf: Unknown parameter '0x0000000000000000' [ 2436.076885][T23009] loop4: detected capacity change from 0 to 1024 [ 2436.084821][T22896] hsr_slave_1: entered promiscuous mode [ 2436.101324][T15318] usb 3-1: config 0 descriptor?? [ 2436.137599][T15318] gspca_main: finepix-2.14.0 probing 04cb:010b [ 2436.180328][T23009] hfsplus: bad catalog entry type [ 2436.281700][T22617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2436.329400][T22997] loop2: detected capacity change from 0 to 8 [ 2436.339170][T20210] Bluetooth: hci2: command tx timeout [ 2436.514583][T15318] usb 3-1: USB disconnect, device number 59 [ 2437.013502][T18958] hfsplus: b-tree write err: -5, ino 4 [ 2437.102465][T20210] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 2437.379506][T22896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2437.406885][T22896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2437.429632][T22896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2437.458627][T22896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2437.467467][ T29] audit: type=1326 audit(2000001496.769:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23024 comm="syz.4.4475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30fe37dff9 code=0x0 [ 2437.579155][T15318] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2438.014280][T22896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2438.235423][T23037] syzkaller0: entered promiscuous mode [ 2438.241373][T23037] syzkaller0: entered allmulticast mode [ 2438.257097][T15318] usb 3-1: Using ep0 maxpacket: 32 [ 2438.297350][T15318] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2438.301944][T22896] 8021q: adding VLAN 0 to HW filter on device team0 [ 2438.306999][T15318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2438.321890][T15318] usb 3-1: Product: syz [ 2438.326284][T15318] usb 3-1: Manufacturer: syz [ 2438.331230][T15318] usb 3-1: SerialNumber: syz [ 2438.348071][T15318] usb 3-1: config 0 descriptor?? [ 2438.428582][T12561] bridge0: port 1(bridge_slave_0) entered blocking state [ 2438.436439][T12561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2438.728206][T23041] loop4: detected capacity change from 0 to 16 [ 2438.746402][T23041] erofs: (device loop4): mounted with root inode @ nid 36. [ 2438.817752][T15318] airspy 3-1:0.0: Board ID: 00 [ 2438.823130][T15318] airspy 3-1:0.0: Firmware version: [ 2438.845893][ T29] audit: type=1800 audit(2000001498.169:692): pid=23041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4478" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 2438.914583][T12561] bridge0: port 2(bridge_slave_1) entered blocking state [ 2438.922613][T12561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2439.366501][T23023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4474'. [ 2439.379695][T23023] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4474'. [ 2439.416264][T15318] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 2439.426178][T15318] airspy 3-1:0.0: Registered as swradio16 [ 2439.427774][T23043] loop1: detected capacity change from 0 to 256 [ 2439.434673][T15318] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2439.456308][T15318] usb 3-1: USB disconnect, device number 60 [ 2439.586687][T23047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4480'. [ 2439.605968][T23048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4480'. [ 2439.653474][T23043] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 2440.288455][T23053] loop3: detected capacity change from 0 to 128 [ 2440.437447][T22896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2440.506577][T23057] loop2: detected capacity change from 0 to 512 [ 2440.556460][T23053] loop3: detected capacity change from 0 to 128 [ 2440.627530][T23057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2440.641238][T23057] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2440.793923][T22896] veth0_vlan: entered promiscuous mode [ 2440.862031][ T29] audit: type=1326 audit(2000001500.179:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23052 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d2f7dff9 code=0x7ffc0000 [ 2440.960637][T22896] veth1_vlan: entered promiscuous mode [ 2440.999278][ T29] audit: type=1326 audit(2000001500.219:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23052 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40d2f7dff9 code=0x7ffc0000 [ 2441.022447][ T29] audit: type=1326 audit(2000001500.219:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23052 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d2f7dff9 code=0x7ffc0000 [ 2441.052046][ T29] audit: type=1326 audit(2000001500.229:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23052 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f40d2f7dff9 code=0x7ffc0000 [ 2441.076728][ T29] audit: type=1326 audit(2000001500.229:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23052 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d2f7dff9 code=0x7ffc0000 [ 2441.099765][ T29] audit: type=1326 audit(2000001500.239:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23052 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f40d2f7dff9 code=0x7ffc0000 [ 2441.125973][ T29] audit: type=1326 audit(2000001500.239:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23052 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d2f7dff9 code=0x7ffc0000 [ 2441.157839][ T29] audit: type=1326 audit(2000001500.259:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23052 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d2f7dff9 code=0x7ffc0000 [ 2441.215486][T22621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2441.227582][T23064] pim6reg0: tun_chr_ioctl cmd 2147767519 [ 2441.324618][T22896] veth0_macvtap: entered promiscuous mode [ 2441.360672][T22896] veth1_macvtap: entered promiscuous mode [ 2441.525956][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2441.537420][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.556242][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2441.569198][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.579427][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2441.590210][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.600531][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2441.611310][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.621522][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2441.632288][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.650521][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2441.664038][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.674173][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2441.684993][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.695185][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2441.705955][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.721699][T22896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2441.738034][T23071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4486'. [ 2441.785457][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2441.796405][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.806618][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2441.817478][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.827636][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2441.838396][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.862082][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2441.875109][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.885357][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2441.898017][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.908171][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2441.923418][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.934547][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2441.945346][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.964195][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2441.977278][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2441.988559][T23062] loop1: detected capacity change from 0 to 4096 [ 2441.992448][T22896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2442.037651][T22896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.047499][T22896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.065557][T22896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.076910][T22896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2442.095913][T23062] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2442.106088][T23062] NILFS (loop1): mounting unchecked fs [ 2442.215278][T23062] NILFS (loop1): recovery complete [ 2442.287748][T23077] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2443.185790][T23086] loop3: detected capacity change from 0 to 4096 [ 2443.291478][T20210] Bluetooth: hci7: command 0x0406 tx timeout [ 2443.308751][T23064] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 2443.319391][T23086] ntfs3: Unknown parameter 'öD»õ×°' [ 2443.479899][T20210] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 2443.807603][T23095] loop2: detected capacity change from 0 to 1024 [ 2443.880105][T23064] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2443.886859][T23064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2443.902296][T23064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2443.908628][T23064] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2443.935884][T23064] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2443.955684][T23064] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2443.963464][T23064] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2443.970102][T23095] bio_check_eod: 13 callbacks suppressed [ 2443.970180][T23095] syz.2.4493: attempt to access beyond end of device [ 2443.970180][T23095] loop2: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 2443.970324][T23095] Buffer I/O error on dev loop2, logical block 2889, lost async page write [ 2444.029762][T23064] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2444.131501][T23064] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 2444.137940][T23064] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 2444.177686][T23064] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 2444.186696][T23064] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2444.193205][T23064] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2444.211783][T23064] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2444.220503][T23064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2444.226839][T23064] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2444.236444][T23064] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2444.430631][T23086] loop3: detected capacity change from 0 to 4096 [ 2444.530234][T15318] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2444.739247][T15318] usb 2-1: Using ep0 maxpacket: 32 [ 2444.770082][T15318] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2444.779652][T15318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.786478][T23103] input: syz1 as /devices/virtual/input/input50 [ 2444.787822][T15318] usb 2-1: Product: syz [ 2444.798738][T15318] usb 2-1: Manufacturer: syz [ 2444.803860][T15318] usb 2-1: SerialNumber: syz [ 2444.825020][T15318] usb 2-1: config 0 descriptor?? [ 2445.389870][T23110] loop3: detected capacity change from 0 to 512 [ 2445.502843][T21567] Bluetooth: hci4: command 0x0406 tx timeout [ 2445.699441][T15318] airspy 2-1:0.0: Board ID: 00 [ 2445.704595][T15318] airspy 2-1:0.0: Firmware version: [ 2445.824556][T23116] loop2: detected capacity change from 0 to 64 [ 2445.852101][T23120] loop3: detected capacity change from 0 to 512 [ 2445.862179][T23120] EXT4-fs: Ignoring removed orlov option [ 2445.868594][T23120] EXT4-fs: Ignoring removed oldalloc option [ 2445.900892][T23120] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4498'. [ 2446.004433][T21567] Bluetooth: hci3: command 0x0c1a tx timeout [ 2446.010916][T21567] Bluetooth: hci1: command 0x0406 tx timeout [ 2446.041358][ T9788] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2446.109363][T20210] Bluetooth: hci5: command 0x0c1a tx timeout [ 2446.160026][T20210] Bluetooth: hci9: command 0x0c1a tx timeout [ 2446.184317][T23090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4491'. [ 2446.259377][T20210] Bluetooth: hci2: command 0x0c1a tx timeout [ 2446.265837][T20210] Bluetooth: hci0: command 0x0c1a tx timeout [ 2446.275793][T23090] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4491'. [ 2446.292451][T15318] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 2446.303081][T15318] airspy 2-1:0.0: Registered as swradio16 [ 2446.309225][T15318] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2446.324500][T15318] usb 2-1: USB disconnect, device number 64 [ 2446.413008][T23124] syz.3.4499: attempt to access beyond end of device [ 2446.413008][T23124] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2446.981637][T23134] loop4: detected capacity change from 0 to 2048 [ 2446.990749][T23134] hpfs: bad mount options. [ 2447.103524][ T9788] usb 3-1: device descriptor read/64, error -71 [ 2447.724191][T23138] FAULT_INJECTION: forcing a failure. [ 2447.724191][T23138] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.737559][T23138] CPU: 1 UID: 0 PID: 23138 Comm: syz.3.4502 Not tainted 6.12.0-rc2-syzkaller #0 [ 2447.746888][T23138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2447.757178][T23138] Call Trace: [ 2447.760642][T23138] [ 2447.763758][T23138] dump_stack_lvl+0x216/0x2d0 [ 2447.768740][T23138] dump_stack+0x1e/0x30 [ 2447.773214][T23138] should_fail_ex+0x748/0x7f0 [ 2447.778204][T23138] should_failslab+0x17f/0x210 [ 2447.783329][T23138] __kmalloc_cache_noprof+0xbf/0xb00 [ 2447.788928][T23138] ? sctp_add_bind_addr+0xc0/0x650 [ 2447.794327][T23138] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2447.800434][T23138] sctp_add_bind_addr+0xc0/0x650 [ 2447.805660][T23138] ? sctp_bind_addr_state+0x27b/0x330 [ 2447.811335][T23138] sctp_copy_local_addr_list+0x335/0x500 [ 2447.817283][T23138] sctp_copy_one_addr+0x122/0x6b0 [ 2447.822606][T23138] sctp_bind_addr_copy+0xde/0x890 [ 2447.827916][T23138] ? sctp_association_new+0x32a0/0x3330 [ 2447.833779][T23138] ? kmsan_get_metadata+0x13e/0x1c0 [ 2447.839266][T23138] sctp_assoc_set_bind_addr_from_ep+0x1f3/0x260 [ 2447.845866][T23138] sctp_connect_new_asoc+0x51b/0xb30 [ 2447.851473][T23138] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2447.857575][T23138] __sctp_connect+0xac2/0x1480 [ 2447.862666][T23138] sctp_inet_connect+0x29b/0x2e0 [ 2447.867897][T23138] __sys_connect+0x600/0x690 [ 2447.872760][T23138] ? fput+0x286/0x320 [ 2447.877003][T23138] ? ksys_write+0x405/0x4c0 [ 2447.881792][T23138] ? ksys_write+0x416/0x4c0 [ 2447.886581][T23138] ? __pfx_sctp_inet_connect+0x10/0x10 [ 2447.892338][T23138] __x64_sys_connect+0x91/0xe0 [ 2447.897384][T23138] x64_sys_call+0x27a5/0x3ba0 [ 2447.902375][T23138] do_syscall_64+0xcd/0x1e0 [ 2447.903124][ T9788] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2447.907078][T23138] ? clear_bhb_loop+0x25/0x80 [ 2447.920052][T23138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2447.926271][T23138] RIP: 0033:0x7f40d2f7dff9 [ 2447.930926][T23138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2447.950838][T23138] RSP: 002b:00007f40d3ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2447.959578][T23138] RAX: ffffffffffffffda RBX: 00007f40d3136058 RCX: 00007f40d2f7dff9 [ 2447.967796][T23138] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000005 [ 2447.976006][T23138] RBP: 00007f40d3ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 2447.984264][T23138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2447.992473][T23138] R13: 0000000000000000 R14: 00007f40d3136058 R15: 00007fff529a94e8 [ 2448.000800][T23138] [ 2448.085931][ T9788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2448.103610][ T9788] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2448.163189][T20210] Bluetooth: hci3: command 0x0c1a tx timeout [ 2448.169783][T20210] Bluetooth: hci5: command 0x0c1a tx timeout [ 2448.183490][ T9788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2448.193018][ T9788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2448.208618][ T9788] usb 3-1: Product: syz [ 2448.215456][ T9788] usb 3-1: Manufacturer: syz [ 2448.220408][ T9788] usb 3-1: SerialNumber: syz [ 2448.244314][ T7018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2448.252677][ T7018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2448.272011][T21567] Bluetooth: hci9: command 0x0c1a tx timeout [ 2448.320180][T21567] Bluetooth: hci0: command 0x0c1a tx timeout [ 2448.326819][T21567] Bluetooth: hci2: command 0x0c1a tx timeout [ 2448.351099][ T7018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2448.360308][ T7018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2449.024489][T23150] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2449.032440][T23150] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 2449.059623][ T9788] usb 3-1: USB disconnect, device number 62 [ 2449.410374][T23155] loop4: detected capacity change from 0 to 512 [ 2449.477199][T23155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2449.490899][T23155] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2449.556375][T23146] loop0: detected capacity change from 0 to 4096 [ 2449.752772][T22634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2449.769354][T15318] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2449.893347][T23160] loop2: detected capacity change from 0 to 256 [ 2449.903859][T23160] vfat: Unknown parameter 'roí6‚mnonumtail' [ 2449.942167][T23160] loop2: detected capacity change from 0 to 128 [ 2449.955171][T23163] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2449.979662][T23164] loop4: detected capacity change from 0 to 512 [ 2449.987945][ T29] audit: type=1800 audit(2000001509.299:701): pid=23146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4439" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 2450.071488][T23164] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4509: invalid indirect mapped block 256 (level 2) [ 2450.092018][T15318] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 73, changing to 7 [ 2450.129678][T15318] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2450.133995][ T29] audit: type=1800 audit(2000001509.429:702): pid=23165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4439" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 2450.143961][T15318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2450.144107][T15318] usb 4-1: Product: syz [ 2450.144216][T15318] usb 4-1: Manufacturer: ë–욼귀 [ 2450.144330][T15318] usb 4-1: SerialNumber: syz [ 2450.185184][T23164] EXT4-fs (loop4): 2 truncates cleaned up [ 2450.201658][T23164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2450.257829][T20210] Bluetooth: hci5: command 0x0c1a tx timeout [ 2450.264046][T21567] Bluetooth: hci3: command 0x0c1a tx timeout [ 2450.319103][T20210] Bluetooth: hci9: command 0x0c1a tx timeout [ 2450.399231][T20210] Bluetooth: hci2: command 0x0c1a tx timeout [ 2450.405505][T20210] Bluetooth: hci0: command 0x0c1a tx timeout [ 2450.640644][T23153] pim6reg1: entered promiscuous mode [ 2450.646460][T23153] pim6reg1: entered allmulticast mode [ 2450.718481][T23169] loop2: detected capacity change from 0 to 16 [ 2450.730966][T22634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2451.112623][T20210] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 2451.132387][T15318] usb 4-1: 2:1 : sample bitwidth 12 in over sample bytes 1 [ 2451.147366][T15318] usb 4-1: 2:1: cannot set freq 3369493 to ep 0x82 [ 2451.202774][T15318] usb 4-1: USB disconnect, device number 99 [ 2451.428263][T23180] FAULT_INJECTION: forcing a failure. [ 2451.428263][T23180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2451.442356][T23180] CPU: 1 UID: 0 PID: 23180 Comm: syz.4.4511 Not tainted 6.12.0-rc2-syzkaller #0 [ 2451.451559][T23180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2451.461791][T23180] Call Trace: [ 2451.465254][T23180] [ 2451.468334][T23180] dump_stack_lvl+0x216/0x2d0 [ 2451.473236][T23180] dump_stack+0x1e/0x30 [ 2451.477662][T23180] should_fail_ex+0x748/0x7f0 [ 2451.482605][T23180] should_fail+0x2a/0x40 [ 2451.487009][T23180] should_fail_usercopy+0x2e/0x40 [ 2451.492251][T23180] _copy_from_iter+0x1d8/0x2b40 [ 2451.497352][T23180] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2451.503321][T23180] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2451.509334][T23180] ? skb_put+0x189/0x230 [ 2451.513810][T23180] netlink_sendmsg+0xc1d/0x11e0 [ 2451.518849][T23180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2451.524375][T23180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2451.529830][T23180] __sock_sendmsg+0x30f/0x380 [ 2451.534703][T23180] ____sys_sendmsg+0x877/0xb60 [ 2451.539642][T23180] ___sys_sendmsg+0x28d/0x3c0 [ 2451.544481][T23180] ? kmsan_get_metadata+0x13e/0x1c0 [ 2451.549835][T23180] ? __rcu_read_unlock+0x7b/0xe0 [ 2451.554933][T23180] ? __fget_files+0x4f5/0x5c0 [ 2451.559797][T23180] ? kmsan_get_metadata+0x13e/0x1c0 [ 2451.565140][T23180] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2451.571160][T23180] __x64_sys_sendmsg+0x300/0x4a0 [ 2451.576305][T23180] ? perf_mmap+0x13e0/0x28d0 [ 2451.581193][T23180] x64_sys_call+0x2da0/0x3ba0 [ 2451.586175][T23180] do_syscall_64+0xcd/0x1e0 [ 2451.590967][T23180] ? clear_bhb_loop+0x25/0x80 [ 2451.591048][ T9788] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2451.595819][T23180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2451.609574][T23180] RIP: 0033:0x7f30fe37dff9 [ 2451.611785][ T5248] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2451.614143][T23180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2451.641596][T23180] RSP: 002b:00007f30ff257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2451.650186][T23180] RAX: ffffffffffffffda RBX: 00007f30fe535f80 RCX: 00007f30fe37dff9 [ 2451.658305][T23180] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2451.666404][T23180] RBP: 00007f30ff257090 R08: 0000000000000000 R09: 0000000000000000 [ 2451.674503][T23180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2451.682645][T23180] R13: 0000000000000000 R14: 00007f30fe535f80 R15: 00007fff6d3ef628 [ 2451.690889][T23180] [ 2451.694119][ C1] vkms_vblank_simulate: vblank timer overrun [ 2451.769379][ T44] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2451.769911][ T9788] usb 1-1: Using ep0 maxpacket: 16 [ 2451.821347][ T9788] usb 1-1: config 5 has an invalid interface number: 16 but max is 0 [ 2451.830305][ T9788] usb 1-1: config 5 has no interface number 0 [ 2451.836635][ T9788] usb 1-1: config 5 interface 16 has no altsetting 0 [ 2451.869606][ T5248] usb 2-1: Using ep0 maxpacket: 8 [ 2451.895614][ T5248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2451.905926][ T5248] usb 2-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 2451.915338][ T5248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2451.929435][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 2451.990128][ T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=74.f4 [ 2452.004062][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2452.012495][ T44] usb 3-1: Product: syz [ 2452.016955][ T44] usb 3-1: Manufacturer: syz [ 2452.021906][ T44] usb 3-1: SerialNumber: syz [ 2452.037186][ T9788] usb 1-1: New USB device found, idVendor=0499, idProduct=1037, bcdDevice=2f.21 [ 2452.047218][ T9788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2452.056819][ T9788] usb 1-1: Product: syz [ 2452.061986][ T9788] usb 1-1: Manufacturer: syz [ 2452.066813][ T9788] usb 1-1: SerialNumber: syz [ 2452.084294][ T5248] usb 2-1: config 0 descriptor?? [ 2452.112035][ T44] usb 3-1: config 0 descriptor?? [ 2452.151236][ T44] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input51 [ 2452.287454][ T5248] rndis_host 2-1:0.0: invalid descriptor buffer length [ 2452.308435][ T5248] usb 2-1: bad CDC descriptors [ 2452.318274][ T5248] cdc_acm 2-1:0.0: invalid descriptor buffer length [ 2452.355065][ T4609] bcm5974 3-1:0.0: could not read from device [ 2452.371851][ T4609] bcm5974 3-1:0.0: could not read from device [ 2452.380896][ T44] usb 3-1: USB disconnect, device number 63 [ 2452.554157][T23172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2452.570925][T23172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2452.580654][T23175] random: crng reseeded on system resumption [ 2452.824976][T23172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4512'. [ 2452.877109][T23172] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4512'. [ 2452.957178][ T9788] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2452.965325][T23191] loop3: detected capacity change from 0 to 512 [ 2452.998600][ T9788] snd-usb-audio 1-1:5.16: probe with driver snd-usb-audio failed with error -2 [ 2452.999315][ T44] usb 2-1: USB disconnect, device number 65 [ 2453.094538][ T9788] usb 1-1: USB disconnect, device number 78 [ 2454.366034][T23207] loop0: detected capacity change from 0 to 512 [ 2454.368074][T23207] EXT4-fs: Ignoring removed orlov option [ 2454.680317][T23207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2454.680750][T23207] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2454.910770][T23204] loop1: detected capacity change from 0 to 4096 [ 2455.005982][T22896] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2455.014561][T23216] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2455.050415][ T29] audit: type=1800 audit(2000001514.369:703): pid=23204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4522" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 2455.108045][ T29] audit: type=1800 audit(2000001514.429:704): pid=23204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4522" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 2455.517859][T23218] loop4: detected capacity change from 0 to 2048 [ 2455.634877][ T44] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2455.657645][T23218] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2455.754568][T15318] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 2455.791814][T23225] Bluetooth: MGMT ver 1.23 [ 2455.827742][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2455.827928][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2455.828080][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2455.828309][ T44] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2455.828473][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2455.844484][ T44] usb 4-1: config 0 descriptor?? [ 2455.881084][T15318] usb 1-1: device descriptor read/64, error -71 [ 2456.119204][T15318] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 2456.254257][T15318] usb 1-1: device descriptor read/64, error -71 [ 2456.323859][ T44] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 2456.329900][ T44] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 2456.336790][T20210] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 2456.340826][T23229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2456.356863][ T44] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2456.368535][T23229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2456.373866][T15318] usb usb1-port1: attempt power cycle [ 2456.374265][T23229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2456.377126][T23229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2456.402585][T23229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4531'. [ 2456.404726][T23229] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4531'. [ 2456.446685][T23228] binder: 23226:23228 ioctl c0306201 20000080 returned -14 [ 2456.719675][T15318] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 2456.743991][T15318] usb 1-1: device descriptor read/8, error -71 [ 2457.012937][T15318] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 2457.038391][T15318] usb 1-1: device descriptor read/8, error -71 [ 2457.634825][T15318] usb usb1-port1: unable to enumerate USB device [ 2459.040046][T22292] usb 4-1: reset high-speed USB device number 100 using dummy_hcd [ 2459.054442][T22292] usb 4-1: device reset changed ep0 maxpacket size! [ 2459.066281][ T9788] usb 4-1: USB disconnect, device number 100 [ 2459.239614][ T9788] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2459.399446][ T9788] usb 4-1: Using ep0 maxpacket: 16 [ 2459.410165][ T9788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2459.410351][ T9788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2459.410501][ T9788] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2459.410725][ T9788] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 2459.410882][ T9788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2459.416916][ T9788] usb 4-1: config 0 descriptor?? [ 2460.570212][T23247] loop0: detected capacity change from 0 to 4096 [ 2464.879651][T23253] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2465.793998][T23252] netlink: 'syz.3.4537': attribute type 17 has an invalid length. [ 2471.095842][ T9788] usbhid 4-1:0.0: can't add hid device: -71 [ 2471.097301][ T9788] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2471.180346][ T9788] usb 4-1: USB disconnect, device number 101 [ 2471.247246][T21567] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2471.250240][T21567] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2471.344880][T21567] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2471.455278][T21567] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2471.459417][T21567] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2471.461517][T21567] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2473.642878][T20210] Bluetooth: hci6: command tx timeout [ 2474.010472][T20210] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2474.012686][T20210] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2474.019069][T20210] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2474.025047][T20210] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2474.029021][T20210] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2474.031022][T20210] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2474.441363][T21567] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2474.952327][T21567] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2474.954452][T21567] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2474.960582][T21567] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2474.964534][T21567] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2474.966560][T21567] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2475.552100][T23256] chnl_net:caif_netlink_parms(): no params data found [ 2475.873967][T20210] Bluetooth: hci6: command tx timeout [ 2476.080985][T20210] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2476.082954][T20210] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2476.084898][T20210] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2476.479237][T20210] Bluetooth: hci8: command tx timeout [ 2476.520222][T20210] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2476.593388][T18104] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2476.595628][ T5195] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2476.610647][ T5195] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2476.643867][T23264] chnl_net:caif_netlink_parms(): no params data found [ 2476.656563][T18104] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2476.670393][ T5195] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2476.706245][T18104] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2476.730643][T18104] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 2476.733302][T18104] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2477.101793][T18104] Bluetooth: hci10: command tx timeout [ 2477.950038][T18104] Bluetooth: hci6: command tx timeout [ 2478.651647][T20210] Bluetooth: hci8: command tx timeout [ 2478.779366][T20210] Bluetooth: hci11: command tx timeout [ 2478.999364][T20210] Bluetooth: hci12: command tx timeout [ 2479.137151][T20210] Bluetooth: hci10: command tx timeout [ 2479.999304][T20210] Bluetooth: hci6: command tx timeout [ 2480.724829][T20210] Bluetooth: hci8: command tx timeout [ 2480.836784][T20210] Bluetooth: hci11: command tx timeout [ 2481.079628][T18104] Bluetooth: hci12: command tx timeout [ 2481.151241][T23256] bridge0: port 1(bridge_slave_0) entered blocking state [ 2481.151716][T23256] bridge0: port 1(bridge_slave_0) entered disabled state [ 2481.152507][T23256] bridge_slave_0: entered allmulticast mode [ 2481.155691][T23256] bridge_slave_0: entered promiscuous mode [ 2481.164496][T23256] bridge0: port 2(bridge_slave_1) entered blocking state [ 2481.164975][T23256] bridge0: port 2(bridge_slave_1) entered disabled state [ 2481.165740][T23256] bridge_slave_1: entered allmulticast mode [ 2481.182204][T23256] bridge_slave_1: entered promiscuous mode [ 2481.200409][T18104] Bluetooth: hci10: command tx timeout [ 2481.300332][T18959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2481.309083][T23263] chnl_net:caif_netlink_parms(): no params data found [ 2481.625029][T18959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2481.670553][T23264] bridge0: port 1(bridge_slave_0) entered blocking state [ 2481.671051][T23264] bridge0: port 1(bridge_slave_0) entered disabled state [ 2481.671752][T23264] bridge_slave_0: entered allmulticast mode [ 2481.674898][T23264] bridge_slave_0: entered promiscuous mode [ 2481.706637][T23256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2481.741883][T23275] chnl_net:caif_netlink_parms(): no params data found [ 2481.755057][T23264] bridge0: port 2(bridge_slave_1) entered blocking state [ 2481.755548][T23264] bridge0: port 2(bridge_slave_1) entered disabled state [ 2481.756118][T23264] bridge_slave_1: entered allmulticast mode [ 2481.759364][T23264] bridge_slave_1: entered promiscuous mode [ 2481.812758][T18959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2481.941070][T23256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2482.125908][T18959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.285492][T23264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2482.387845][T23256] team0: Port device team_slave_0 added [ 2482.402986][T23272] chnl_net:caif_netlink_parms(): no params data found [ 2482.515866][T23264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2482.540599][T23256] team0: Port device team_slave_1 added [ 2482.822054][T18104] Bluetooth: hci8: command tx timeout [ 2482.880808][T18104] Bluetooth: hci11: command tx timeout [ 2483.126465][T23264] team0: Port device team_slave_0 added [ 2483.135451][T18104] Bluetooth: hci12: command tx timeout [ 2483.136470][T23256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2483.136545][T23256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2483.136697][T23256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2483.152410][T23264] team0: Port device team_slave_1 added [ 2483.167172][T23256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2483.167250][T23256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2483.167397][T23256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2483.280575][T18104] Bluetooth: hci10: command tx timeout [ 2483.515030][T18959] bridge_slave_1: left allmulticast mode [ 2483.515134][T18959] bridge_slave_1: left promiscuous mode [ 2483.515997][T18959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2483.536973][T18959] bridge_slave_0: left allmulticast mode [ 2483.537077][T18959] bridge_slave_0: left promiscuous mode [ 2483.537939][T18959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2484.114864][T18959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2484.161070][T18959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2484.185009][T18959] bond0 (unregistering): Released all slaves [ 2484.321211][T23264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2484.321292][T23264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2484.321443][T23264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2484.512740][T23264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2484.512820][T23264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2484.513003][T23264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2484.797123][T23256] hsr_slave_0: entered promiscuous mode [ 2484.825278][T23256] hsr_slave_1: entered promiscuous mode [ 2484.843862][T23256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2484.843951][T23256] Cannot create hsr debugfs directory [ 2484.905000][T23275] bridge0: port 1(bridge_slave_0) entered blocking state [ 2484.905489][T23275] bridge0: port 1(bridge_slave_0) entered disabled state [ 2484.906172][T23275] bridge_slave_0: entered allmulticast mode [ 2484.909435][T23275] bridge_slave_0: entered promiscuous mode [ 2484.975134][T18104] Bluetooth: hci11: command tx timeout [ 2485.202625][T18104] Bluetooth: hci12: command tx timeout [ 2485.214537][T23272] bridge0: port 1(bridge_slave_0) entered blocking state [ 2485.215013][T23272] bridge0: port 1(bridge_slave_0) entered disabled state [ 2485.215643][T23272] bridge_slave_0: entered allmulticast mode [ 2485.218688][T23272] bridge_slave_0: entered promiscuous mode [ 2485.226497][T23275] bridge0: port 2(bridge_slave_1) entered blocking state [ 2485.226978][T23275] bridge0: port 2(bridge_slave_1) entered disabled state [ 2485.227579][T23275] bridge_slave_1: entered allmulticast mode [ 2485.231803][T23275] bridge_slave_1: entered promiscuous mode [ 2485.390275][T23263] bridge0: port 1(bridge_slave_0) entered blocking state [ 2485.390778][T23263] bridge0: port 1(bridge_slave_0) entered disabled state [ 2485.391570][T23263] bridge_slave_0: entered allmulticast mode [ 2485.394841][T23263] bridge_slave_0: entered promiscuous mode [ 2485.419252][T23263] bridge0: port 2(bridge_slave_1) entered blocking state [ 2485.419741][T23263] bridge0: port 2(bridge_slave_1) entered disabled state [ 2485.420351][T23263] bridge_slave_1: entered allmulticast mode [ 2485.423495][T23263] bridge_slave_1: entered promiscuous mode [ 2485.597847][T23272] bridge0: port 2(bridge_slave_1) entered blocking state [ 2485.598337][T23272] bridge0: port 2(bridge_slave_1) entered disabled state [ 2485.602865][T23272] bridge_slave_1: entered allmulticast mode [ 2485.606577][T23272] bridge_slave_1: entered promiscuous mode [ 2485.872663][T23264] hsr_slave_0: entered promiscuous mode [ 2485.901672][T23264] hsr_slave_1: entered promiscuous mode [ 2485.904809][T23264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2485.904893][T23264] Cannot create hsr debugfs directory [ 2486.121944][T23275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2486.135954][T23263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2486.237483][T18959] hsr_slave_0: left promiscuous mode [ 2486.266707][T18959] hsr_slave_1: left promiscuous mode [ 2486.318667][T18959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2486.319271][T18959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2486.339141][T18959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2486.339382][T18959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2486.377901][T18959] veth1_macvtap: left promiscuous mode [ 2486.378044][T18959] veth0_macvtap: left promiscuous mode [ 2486.378335][T18959] veth1_vlan: left promiscuous mode [ 2486.378552][T18959] veth0_vlan: left promiscuous mode [ 2487.164605][T18959] team0 (unregistering): Port device team_slave_1 removed [ 2487.367557][T18959] team0 (unregistering): Port device team_slave_0 removed [ 2487.902551][T23272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2487.912114][T23275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2487.948422][T23263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2488.321919][T23272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2488.601694][T23275] team0: Port device team_slave_0 added [ 2488.612467][T23275] team0: Port device team_slave_1 added [ 2488.620617][T23263] team0: Port device team_slave_0 added [ 2488.705242][T23272] team0: Port device team_slave_0 added [ 2488.716064][T23272] team0: Port device team_slave_1 added [ 2488.970607][T23263] team0: Port device team_slave_1 added [ 2489.044472][T23272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2489.044553][T23272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2489.044701][T23272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2489.050453][T23272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2489.050530][T23272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2489.050678][T23272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2489.575648][T23272] hsr_slave_0: entered promiscuous mode [ 2489.626257][T23272] hsr_slave_1: entered promiscuous mode [ 2489.921876][T23263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2489.929180][T23263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2489.955534][T23263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2489.972259][T23275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2489.987848][T23275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2490.019482][T23275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2490.041681][T23263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2490.048991][T23263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2490.080780][T23263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2490.556172][T23275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2490.563564][T23275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2490.597513][T23275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2490.653937][T18959] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2491.033149][T18959] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2491.178617][T23263] hsr_slave_0: entered promiscuous mode [ 2491.230836][T23263] hsr_slave_1: entered promiscuous mode [ 2491.246950][T23263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2491.255965][T23263] Cannot create hsr debugfs directory [ 2491.394082][T18959] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2491.606084][T18959] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2491.800073][T23275] hsr_slave_0: entered promiscuous mode [ 2491.812614][T23275] hsr_slave_1: entered promiscuous mode [ 2491.833012][T23275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2491.844768][T23275] Cannot create hsr debugfs directory [ 2491.933226][T23264] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.161851][T23264] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.272855][T23264] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.331389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2492.393838][T23264] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.550210][T18959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.666160][T18959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.831862][T23256] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2492.886954][T23256] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2492.923027][T18959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2493.031367][T18959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2493.065543][T23256] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2493.179312][T23256] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2493.372690][T23264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2493.400554][T23264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2493.467103][T23264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2493.535495][T23264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2493.573261][T18959] bridge_slave_1: left allmulticast mode [ 2493.581244][T18959] bridge_slave_1: left promiscuous mode [ 2493.589386][T18959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2493.620789][T18959] bridge_slave_0: left allmulticast mode [ 2493.626695][T18959] bridge_slave_0: left promiscuous mode [ 2493.634711][T18959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2493.692903][T18959] bridge_slave_1: left allmulticast mode [ 2493.698814][T18959] bridge_slave_1: left promiscuous mode [ 2493.705647][T18959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2493.723173][T18959] bridge_slave_0: left allmulticast mode [ 2493.730472][T18959] bridge_slave_0: left promiscuous mode [ 2493.736977][T18959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2494.606903][T18959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2494.628204][T18959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2494.650493][T18959] bond0 (unregistering): Released all slaves [ 2494.675357][T18959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2494.718011][T18959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2494.739111][T18959] bond0 (unregistering): Released all slaves [ 2494.966954][T18959] IPVS: stopping master sync thread 22879 ... [ 2495.348319][T23263] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.493431][T23263] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.564550][T18959] hsr_slave_0: left promiscuous mode [ 2495.577417][T18959] hsr_slave_1: left promiscuous mode [ 2495.587999][T18959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2495.596035][T18959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2495.618537][T18959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2495.627606][T18959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2495.657138][T18959] hsr_slave_0: left promiscuous mode [ 2495.666031][T18959] hsr_slave_1: left promiscuous mode [ 2495.674123][T18959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2495.684560][T18959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2495.695501][T18959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2495.703327][T18959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2495.740655][T18959] veth1_macvtap: left promiscuous mode [ 2495.746359][T18959] veth0_macvtap: left promiscuous mode [ 2495.752667][T18959] veth1_vlan: left promiscuous mode [ 2495.758226][T18959] veth0_vlan: left promiscuous mode [ 2495.766062][T18959] veth1_macvtap: left promiscuous mode [ 2495.771957][T18959] veth0_macvtap: left promiscuous mode [ 2495.777837][T18959] veth1_vlan: left promiscuous mode [ 2495.783550][T18959] veth0_vlan: left promiscuous mode [ 2496.722752][T18959] team0 (unregistering): Port device team_slave_1 removed [ 2496.760504][T18959] team0 (unregistering): Port device team_slave_0 removed [ 2497.378411][T18959] team0 (unregistering): Port device team_slave_1 removed [ 2497.433417][T18959] team0 (unregistering): Port device team_slave_0 removed [ 2497.894345][T23263] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2498.100380][T23263] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2498.213220][T23264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2498.254874][T23256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2498.465281][T23264] 8021q: adding VLAN 0 to HW filter on device team0 [ 2498.482541][T23263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2498.563946][T23256] 8021q: adding VLAN 0 to HW filter on device team0 [ 2498.587118][T23263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2498.648912][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 2498.656550][ T7018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2498.693331][T23263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2498.756090][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 2498.763856][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2498.790231][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 2498.797871][ T7018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2498.819351][T23263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2498.889762][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 2498.897506][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2498.913965][T12561] bridge_slave_1: left allmulticast mode [ 2498.922343][T12561] bridge_slave_1: left promiscuous mode [ 2498.930145][T12561] bridge0: port 2(bridge_slave_1) entered disabled state [ 2498.983033][T12561] bridge_slave_0: left allmulticast mode [ 2498.995989][T12561] bridge_slave_0: left promiscuous mode [ 2499.002817][T12561] bridge0: port 1(bridge_slave_0) entered disabled state [ 2499.022591][T12561] bridge_slave_1: left allmulticast mode [ 2499.028474][T12561] bridge_slave_1: left promiscuous mode [ 2499.035227][T12561] bridge0: port 2(bridge_slave_1) entered disabled state [ 2499.054398][T12561] bridge_slave_0: left allmulticast mode [ 2499.060723][T12561] bridge_slave_0: left promiscuous mode [ 2499.067218][T12561] bridge0: port 1(bridge_slave_0) entered disabled state [ 2499.099183][ T3537] ------------[ cut here ]------------ [ 2499.100353][T12561] ===================================================== [ 2499.104755][ T3537] Voluntary context switch within RCU read-side critical section! [ 2499.105287][ T3537] WARNING: CPU: 1 PID: 3537 at kernel/rcu/tree_plugin.h:331 rcu_note_context_switch+0x8e7/0x1e90 [ 2499.111989][T12561] BUG: KMSAN: uninit-value in netpoll_poll_disable+0x9b/0xa0 [ 2499.119549][ T3537] Modules linked in: [ 2499.119630][ T3537] CPU: 1 UID: 0 PID: 3537 Comm: kworker/u8:25 Not tainted 6.12.0-rc2-syzkaller #0 [ 2499.119785][ T3537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2499.130392][T12561] netpoll_poll_disable+0x9b/0xa0 [ 2499.137724][ T3537] Workqueue: bond0 bond_mii_monitor [ 2499.141737][T12561] __dev_close_many+0x136/0x560 [ 2499.150820][ T3537] [ 2499.150871][ T3537] RIP: 0010:rcu_note_context_switch+0x8e7/0x1e90 [ 2499.151065][ T3537] Code: c6 00 00 c6 05 1c 5e 68 10 01 90 48 8b 85 60 ff ff ff 48 c7 80 80 0c 00 00 00 00 00 00 48 c7 c7 24 52 08 91 e8 8a 7e cc ff 90 <0f> 0b 90 90 e9 e1 f7 ff ff 8b 3a e8 b9 06 c0 00 85 db 0f 85 6c f8 [ 2499.161744][T12561] dev_close_many+0x458/0x920 [ 2499.166181][ T3537] RSP: 0018:ffff888114627410 EFLAGS: 00010093 [ 2499.171654][T12561] unregister_netdevice_many_notify+0x9c0/0x38d0 [ 2499.176362][ T3537] [ 2499.178691][T12561] unregister_netdevice_many+0x22/0x30 [ 2499.185066][ T3537] RAX: ffffffff815a6cf9 RBX: 0000000000000001 RCX: ffff8881138d4180 [ 2499.185178][ T3537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2499.185271][ T3537] RBP: ffff888114627510 R08: ffffffff815a6cef R09: 0000000000000000 [ 2499.210486][T12561] cleanup_net+0xedf/0x1c00 [ 2499.215759][ T3537] R10: ffff888237de6a4c R11: 0000000000000004 R12: ffff88813fd00000 [ 2499.224889][T12561] process_scheduled_works+0xae0/0x1c40 [ 2499.230026][ T3537] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 2499.230124][ T3537] FS: 0000000000000000(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 2499.230263][ T3537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2499.238275][T12561] worker_thread+0xea7/0x14f0 [ 2499.246298][ T3537] CR2: 00007fbc1aea2440 CR3: 0000000011672000 CR4: 00000000003526f0 [ 2499.246405][ T3537] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2499.254574][T12561] kthread+0x3e2/0x540 [ 2499.258975][ T3537] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 2499.259077][ T3537] Call Trace: [ 2499.259128][ T3537] [ 2499.267108][T12561] ret_from_fork+0x6d/0x90 [ 2499.272701][ T3537] ? show_trace_log_lvl+0x268/0x3d0 [ 2499.272872][ T3537] ? __schedule+0x15c/0x69c0 [ 2499.281843][T12561] ret_from_fork_asm+0x1a/0x30 [ 2499.289834][ T3537] ? show_regs+0xb4/0xe0 [ 2499.301945][T12561] [ 2499.309314][ T3537] ? __warn+0x2c7/0x780 [ 2499.309467][ T3537] ? rcu_note_context_switch+0x8e7/0x1e90 [ 2499.309643][ T3537] ? report_bug+0x929/0xbd0 [ 2499.309803][ T3537] ? rcu_note_context_switch+0x8e7/0x1e90 [ 2499.309978][ T3537] ? handle_bug+0x6a/0x90 [ 2499.310143][ T3537] ? exc_invalid_op+0x1f/0x50 [ 2499.310316][ T3537] ? asm_exc_invalid_op+0x1f/0x30 [ 2499.310512][ T3537] ? __warn_printk+0x43f/0x470 [ 2499.310666][ T3537] ? __warn_printk+0x449/0x470 [ 2499.310828][ T3537] ? rcu_note_context_switch+0x8e7/0x1e90 [ 2499.318961][T12561] Local variable buffer created at: [ 2499.322971][ T3537] ? kmsan_get_metadata+0x13e/0x1c0 [ 2499.331075][T12561] proc_fork_connector+0x3a/0x480 [ 2499.334277][ T3537] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 2499.337211][T12561] copy_process+0x59ce/0x5c20 [ 2499.341668][ T3537] ? kmsan_get_metadata+0x13e/0x1c0 [ 2499.341823][ T3537] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2499.347030][T12561] [ 2499.347059][T12561] CPU: 0 UID: 0 PID: 12561 Comm: kworker/u8:1 Not tainted 6.12.0-rc2-syzkaller #0 [ 2499.351667][ T3537] __schedule+0x15c/0x69c0 [ 2499.356523][T12561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2499.356598][T12561] Workqueue: netns cleanup_net [ 2499.360819][ T3537] ? kmsan_get_metadata+0x13e/0x1c0 [ 2499.360962][ T3537] ? kmsan_get_metadata+0x13e/0x1c0 [ 2499.363300][T12561] [ 2499.363327][T12561] ===================================================== [ 2499.363363][T12561] Disabling lock debugging due to kernel taint [ 2499.367496][ T3537] ? kmsan_get_metadata+0x13e/0x1c0 [ 2499.373465][T12561] Kernel panic - not syncing: kmsan.panic set ... [ 2499.373529][T12561] CPU: 0 UID: 0 PID: 12561 Comm: kworker/u8:1 Tainted: G B 6.12.0-rc2-syzkaller #0 [ 2499.373659][T12561] Tainted: [B]=BAD_PAGE [ 2499.373706][T12561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2499.373774][T12561] Workqueue: netns cleanup_net [ 2499.373912][T12561] Call Trace: [ 2499.373947][T12561] [ 2499.373983][T12561] dump_stack_lvl+0x216/0x2d0 [ 2499.374104][T12561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2499.374213][T12561] dump_stack+0x1e/0x30 [ 2499.374320][T12561] panic+0x4e2/0xcf0 [ 2499.374433][T12561] ? kmsan_get_metadata+0x101/0x1c0 [ 2499.374547][T12561] kmsan_report+0x2c7/0x2d0 [ 2499.374695][T12561] ? kmsan_get_metadata+0x13e/0x1c0 [ 2499.374791][T12561] ? __msan_warning+0x95/0x120 [ 2499.374925][T12561] ? netpoll_poll_disable+0x9b/0xa0 [ 2499.375058][T12561] ? __dev_close_many+0x136/0x560 [ 2499.375184][T12561] ? dev_close_many+0x458/0x920 [ 2499.375304][T12561] ? unregister_netdevice_many_notify+0x9c0/0x38d0 [ 2499.375428][T12561] ? unregister_netdevice_many+0x22/0x30 [ 2499.375539][T12561] ? cleanup_net+0xedf/0x1c00 [ 2499.375673][T12561] ? process_scheduled_works+0xae0/0x1c40 [ 2499.375801][T12561] ? worker_thread+0xea7/0x14f0 [ 2499.375931][T12561] ? kthread+0x3e2/0x540 [ 2499.376062][T12561] ? ret_from_fork+0x6d/0x90 [ 2499.376164][T12561] ? ret_from_fork_asm+0x1a/0x30 [ 2499.376290][T12561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2499.376397][T12561] ? kmsan_get_metadata+0x13e/0x1c0 [ 2499.376492][T12561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2499.376603][T12561] ? ip6_route_dev_notify+0xd1/0xef0 [ 2499.376720][T12561] ? kmsan_get_metadata+0x13e/0x1c0 [ 2499.376820][T12561] ? __pfx_ip6_route_dev_notify+0x10/0x10 [ 2499.376940][T12561] ? __pfx_ip6_route_dev_notify+0x10/0x10 [ 2499.377055][T12561] ? raw_notifier_call_chain+0x3e5/0x440 [ 2499.377192][T12561] ? kmsan_get_metadata+0x13e/0x1c0 [ 2499.377287][T12561] ? kmsan_get_metadata+0x13e/0x1c0 [ 2499.377384][T12561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2499.377490][T12561] __msan_warning+0x95/0x120 [ 2499.377622][T12561] netpoll_poll_disable+0x9b/0xa0 [ 2499.377756][T12561] __dev_close_many+0x136/0x560 [ 2499.728572][T12561] dev_close_many+0x458/0x920 [ 2499.733448][T12561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2499.739420][T12561] ? kmsan_get_metadata+0x13e/0x1c0 [ 2499.744780][T12561] unregister_netdevice_many_notify+0x9c0/0x38d0 [ 2499.751293][T12561] ? kmsan_get_metadata+0x13e/0x1c0 [ 2499.756671][T12561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2499.762641][T12561] ? kmsan_get_metadata+0x13e/0x1c0 [ 2499.767994][T12561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2499.773973][T12561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2499.779949][T12561] unregister_netdevice_many+0x22/0x30 [ 2499.785579][T12561] cleanup_net+0xedf/0x1c00 [ 2499.790299][T12561] ? __pfx_cleanup_net+0x10/0x10 [ 2499.795433][T12561] process_scheduled_works+0xae0/0x1c40 [ 2499.801202][T12561] worker_thread+0xea7/0x14f0 [ 2499.806074][T12561] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2499.812069][T12561] kthread+0x3e2/0x540 [ 2499.816334][T12561] ? __pfx_worker_thread+0x10/0x10 [ 2499.821638][T12561] ? __pfx_kthread+0x10/0x10 [ 2499.826428][T12561] ret_from_fork+0x6d/0x90 [ 2499.831003][T12561] ? __pfx_kthread+0x10/0x10 [ 2499.835792][T12561] ret_from_fork_asm+0x1a/0x30 [ 2499.840865][T12561] [ 2499.844331][T12561] Kernel Offset: disabled [ 2499.848741][T12561] Rebooting in 86400 seconds..