last executing test programs: 18m5.962972267s ago: executing program 32 (id=791): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) 17m8.468001485s ago: executing program 33 (id=1217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, 0x0, 0x44801}, 0x840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) 16m53.518356855s ago: executing program 34 (id=1341): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) sendmsg$netlink(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000004c0)={0x10, 0x2b, 0x300, 0x70bd2a, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}], 0x20, 0x20000000}, 0x0) 16m51.797447688s ago: executing program 35 (id=1349): syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f10040000010102000109022000010100803209040000020000000007058102000200070502020002"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x777) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb-serial/devices/ttyUSB0/vcc_mode\x00', 0x1, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000200)='3\x00', 0xffffff28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 16m48.788117704s ago: executing program 36 (id=1361): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x7}]}, &(0x7f0000000140)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, 0x0, 0x40000) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read(r2, &(0x7f0000000200), 0x1000) 16m12.977967102s ago: executing program 37 (id=1399): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1}, 0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x3}, 0x8) connect$inet(r1, &(0x7f0000000020)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) 16m6.742154251s ago: executing program 38 (id=1477): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000a80)=[{&(0x7f0000000500)='\r>', 0xfffffd7e}, {0x0}], 0x2, 0x1, 0x0) 16m4.351127842s ago: executing program 6 (id=1485): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000300)='\x00', 0x1, 0x0, 0x0, 0x0) accept$inet(r0, 0x0, 0x0) 16m3.295168649s ago: executing program 39 (id=1486): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) 16m3.279759218s ago: executing program 6 (id=1488): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x800000, 0x0) r1 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4073, &(0x7f0000000400)="$eJzszzFKA1EQBuA/iWsWWQiCVoIYLOxk7az2FuklZ7CyUHFvYikewHt4B0s9QiTKBtfYBoJ8XzHM7M/sey9st4+uKVefBkle5s/7SU6maev6O9z5Cke97foixV45TJXkev3ns6eN3h0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANg24x/9sJfcJWlfb866uVyW3WWZH6W9bXJZJeXhJHkYpWiOBzlIpud/nDFK3pIMkrwnmU029xwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D+56k3j33HVNffrq4+naZtilS4Wn+zOMQEAIAwDwYwYxCQmg4V2vzPw346zJ7lv+woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcyAAAAAML8rfNoPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcFAAD//xGEFjw=") r2 = syz_open_procfs(r1, &(0x7f0000000040)='comm\x00') write$binfmt_format(r2, 0x0, 0x0) 16m1.970427732s ago: executing program 6 (id=1489): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x109) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x3, 0x9, 0x0, 0x0, 0x0, {0x2, 0xfffffffffffffffd, 0x7, 0x2, 0x4, 0x0, 0x0, 0x100, 0x0, 0x6000, 0xd3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m1.841074475s ago: executing program 6 (id=1490): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 16m1.593609081s ago: executing program 6 (id=1491): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x0, 0x3fc, &(0x7f0000000280)="$eJzs3M9OG0ccwPFZYiilUlQpagKEw6RpJXqIs7sUI5TTdj02k6x3VzPrCE5VVCBCBVKVVCpcWi5pK7UPkWvfoJc+UaP2Dah211DANq7CH6Po+5HQjD2/nfnNypqRjWYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQTlh3Xc8RkY7by7K/sG6SVq+GT7eL4rC/j08UZ4wrhJP/ifFxMVm+NXnrv+aPyk7ulK/uiPG8GBd7H9z+8NGtysjh9WckfCV2dvde/FHm+L/iK/8cFC49sSvSVLG2iW4FTSW1TeRireY+XGpY2dCRsis2Uy0ZGhVkiZGz4WfSW1yck6q6krTjZj2I1OGbCw98163Jx9VUBcYm8cPHVRsu6SjScbOIyZvzmIX8g/hEZzJTQUvK9Y3NtblBSeZB3hntjhA/FkH+oJ581/c9z/e92vzi/ILrVnzXlyfecE8RXZcM/0OL4brI5Rs4l4PO/g8AAAAAAN5dTvEbe/79f7T4Hd4RDR0pd9hpAQAAAACAC1T85/9OXozmtUnh8P0fAAAAAIB3zc/Hz9i93+uMnU3fc/78Wxgz6uyny584W0EeHmyJSnHdjdM9Zo1p52ank6KoVTqvQjXjTJVBU4fRbzrF+qCzfk5XAp2RTydQnrA7+KFHAuJXMV0GTa+W5ephSznKRENHqhom0SNPBMHNkUwtZ99tb3wviun/ErduOmJ9Y3Ot+tWLzdUil/28l/2tzgGKrnMU/W+GeHl07rH3jMc6XRTjTpTjusfnP1K2j3SPOSX6jPlK3C1j7k6U5cTJ+Y/n8/eq/WbfycI758xfiZkyZmb2fl7cn+2RhT8oC/94Fv3vxfmymOudxV9HWcydMwsAGJb1AbuQ073xv8Uqd3G7+9kr+r0y5t50sbBWpnus6O6gfcU95+72e9czEPrtsfm4v8Wt6pgQR7vq6/yC133HtZHv5Lfwxsutb8Ttnd29Bxtbz56vPV/b9v25mvu56877YrSYRqdg7wEA9KDMG2ci+8kxRqdfemOLXpAtKWmS8Ik0ut5UUseZMuFSEDeVTE2SJWES5ZWnuq6stO00TUwmG4mRaWL1cvHkF9l59ItVrSDOdGjTSAVWyTCJsyDMZF3bUKbtLyJtl5QpLrapCnVDh0Gmk1japG1CVZXSKnUsUNdVnOmGzquxTI1uBWZFPk2idkvJurKh0WmW5NMyR2PpuJGYVtFtddg3GwCAa2Jnd+/rZ5uba99eYmXYcwQAACexSwMAAAAAAAAAAAAAAAAAAAAAcP1dxfm/i604QohrkAYVKhddGXvbD/bBJeQz7JUJwGX7NwAA//++Aql5") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 15m59.390466617s ago: executing program 6 (id=1492): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x40040c0, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) listen(r0, 0x101) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000480), 0x0) 15m58.719559404s ago: executing program 40 (id=1492): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x40040c0, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) listen(r0, 0x101) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000480), 0x0) 15m31.396954787s ago: executing program 9 (id=1533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x2, 0x28, 0x64, 0x0, 0xbb, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010102}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xfff, 0x0, 0x2e}}}}}}}, 0x3e) 15m30.652937966s ago: executing program 9 (id=1536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, 0x0) unshare(0x600) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x626}) 15m30.005560762s ago: executing program 9 (id=1541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 15m29.633047602s ago: executing program 9 (id=1542): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 15m29.128962115s ago: executing program 9 (id=1545): r0 = io_uring_setup(0x136a, &(0x7f0000000400)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) close_range(r0, 0xffffffffffffffff, 0x0) 15m28.172746959s ago: executing program 9 (id=1552): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d", 0xb1}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb", 0x3e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae", 0x4f}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15m27.268181642s ago: executing program 41 (id=1552): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d", 0xb1}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb", 0x3e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae", 0x4f}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14m39.25830593s ago: executing program 3 (id=1765): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000940)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000000c0)={0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0xa, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0xffffffffffffffff, 0xd, 0x0, 0xd4e2, 0x6], 0x0, 0x302240}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14m38.713252093s ago: executing program 3 (id=1768): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000040)="dd4b8d18989cc1453239", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x3, 0x3, 0x1, 0x0, 0x10}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x1e}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaacc3, 0x8, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m38.07597942s ago: executing program 3 (id=1773): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x4, 0xb, 0x0, 0x8b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x4, 0x7c, 0x4}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x9, 0x1}, &(0x7f0000000040)=0x8) 14m37.67693859s ago: executing program 3 (id=1775): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005bd000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000000c0)="66b9a80900000f3266b9800000c00f326635008000000f300f30ba2100b80300ef66b8f19700000f23d80f21f86635400000100f23f80f2304b8c30a8ee8660f15290f0666b8004800000f23d00f21f86635300000060f23f8", 0x59}], 0x1, 0x18, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x2, 0xfffffffff9110f4c, 0xd, 0xfffc, 0xf, 0x6, 0x0, 0x0, 0x40}}, 0x50) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x73f1, 0x40, 0x3, 0xc0}) 14m37.297072079s ago: executing program 3 (id=1778): syz_mount_image$fuse(0x0, 0x0, 0x2882026, 0x0, 0x1, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 14m37.030385576s ago: executing program 3 (id=1779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) dup(r0) socket(0xa, 0x3, 0xff) r1 = inotify_init() r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) close_range(r1, 0xffffffffffffffff, 0x0) 14m21.615536647s ago: executing program 42 (id=1779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) dup(r0) socket(0xa, 0x3, 0xff) r1 = inotify_init() r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) close_range(r1, 0xffffffffffffffff, 0x0) 13m24.286526909s ago: executing program 0 (id=2130): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) close(0x3) accept$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)='g', 0x1}], 0x1}}], 0x1, 0x0) 13m23.589000358s ago: executing program 0 (id=2133): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000400)=[{0x30, 0x60, 0x5, 0xfffff02c}, {0x6, 0x13, 0x8, 0x6}]}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x9, 0x1}, 0x0) 13m22.784958829s ago: executing program 0 (id=2137): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file1\x00'}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r2, &(0x7f0000000100)={0x20070a, 0x2d, 0x9, 0xa, 0x2000009, 0x2c}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, &(0x7f0000000040), 0x0, 0x8) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x40000000, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(r2, &(0x7f0000000240)='./file2\x00', 0x8000) flock(r3, 0xf) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, &(0x7f0000000280), 0x0, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, 0x0, 0x40000) mount$overlay(0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x65) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 13m19.162030916s ago: executing program 0 (id=2152): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, r0, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r3, 0x1, 0x4d, 0x0, 0x0) 13m17.423983193s ago: executing program 0 (id=2162): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='pagemap\x00') readv(r1, &(0x7f0000000780)=[{&(0x7f0000000200)=""/160, 0xa0}, {0x0}], 0x2) 13m16.965280335s ago: executing program 43 (id=2162): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='pagemap\x00') readv(r1, &(0x7f0000000780)=[{&(0x7f0000000200)=""/160, 0xa0}, {0x0}], 0x2) 5m5.857097719s ago: executing program 2 (id=4842): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000240)=""/91, 0x5b, 0x7) pread64(r2, &(0x7f00000002c0)=""/245, 0xf5, 0x80387) listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) 5m5.680643273s ago: executing program 2 (id=4844): syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581032000000000090582"], 0x0) 5m2.765489271s ago: executing program 2 (id=4855): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10, 0x0}, 0x80) 5m2.407172111s ago: executing program 2 (id=4857): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x210805, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x584, &(0x7f0000000700)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5m1.824788146s ago: executing program 2 (id=4859): syz_clone3(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m0.848778673s ago: executing program 2 (id=4864): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000800)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x1, 0x32b, &(0x7f0000000840)="$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") syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) close(0x3) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000d00)='./mnt\x00', 0x1ff) getresgid(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 4m59.996298266s ago: executing program 44 (id=4864): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000800)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x1, 0x32b, &(0x7f0000000840)="$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") syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) close(0x3) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000d00)='./mnt\x00', 0x1ff) getresgid(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 3m4.643465815s ago: executing program 7 (id=5376): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001080)='./cgroup/syz1\x00', 0x200002, 0x0) 3m4.124881039s ago: executing program 7 (id=5377): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r0}, 0xc) 3m3.744738499s ago: executing program 7 (id=5380): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x401070cd, 0x3) 3m3.502355685s ago: executing program 7 (id=5381): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file0\x00', 0x3018000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRES32=0x0], 0xa, 0x2eb, &(0x7f00000004c0)="$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") r0 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 3m1.117019349s ago: executing program 7 (id=5384): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe4) close(0x3) 3m0.085857677s ago: executing program 7 (id=5386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r1, 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) epoll_create1(0x0) 2m59.214268391s ago: executing program 45 (id=5386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r1, 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) epoll_create1(0x0) 1m55.423448788s ago: executing program 1 (id=5547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000002c0)="48b800780000000000000f23d00f21f8351000000d0f23f82e410f01c4660f3a0e0780450f35b9800000c00f3235008000000f30b9f2030000b800780000ba000000000f30430f0d110f3266b806008ee03e64263e420f0092dead0000", 0x5d}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = open(0x0, 0x241, 0x1ff) write(r4, 0x0, 0x0) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00', 0x20) r5 = open(0x0, 0x20000, 0x1ff) write(r4, &(0x7f0000000c80)="ab84b4f6000d22ba69506630cf6373c55cf5899a70da4b17a0a46bbc0d96bbf58fdb917b972ce57d8cc7b500000000497f3979d8b9aa503cad971278d75d86c275cadda450d8323946b0c5360010", 0x4e) close(r5) write(0xffffffffffffffff, &(0x7f0000000600)='720', 0x3) close(0xffffffffffffffff) r6 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r6, &(0x7f00000006c0)='1843', 0x4) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 1m52.598817685s ago: executing program 1 (id=5548): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 1m52.02264406s ago: executing program 1 (id=5550): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4a7) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m49.439421989s ago: executing program 1 (id=5553): socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r0, 0xa01, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) socket(0x6, 0x2, 0xffffd) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x100000001}, {0xfffffff9, 0xfffa, 0x0, 0x4, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0xb, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f00000002c0)) 1m47.751068634s ago: executing program 4 (id=5559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) 1m47.685661256s ago: executing program 1 (id=5560): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000040000000001000000080001000000000004000480080002000100000024000880140007800800050000000c"], 0x4c}}, 0x0) 1m43.023649241s ago: executing program 1 (id=5563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getpid() ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff61", @ANYRES32], 0x3c}}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000b80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) 1m42.876205945s ago: executing program 4 (id=5564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getpid() ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff61", @ANYRES32], 0x3c}}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000b80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) 1m41.581698459s ago: executing program 8 (id=5571): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x0, 0xffffffff, 0xfffffffc}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a00010029bd700000000000022020000000008a"], 0x2c}}, 0x10) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x6, 0x4, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB='\f\x00\x00\x00# \x00\x00', @ANYRES32=r5, @ANYBLOB="e245ab3d360df13716deb92abc302ad3bee0f72535de1edd5b", @ANYRES32=0x0, @ANYRES64], 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r8, 0x0, 0x20) write(r6, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000d00", 0x29) r9 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4f", 0x45}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x2}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1}, 0x0) 1m41.237001209s ago: executing program 4 (id=5572): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x206c}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) syz_genetlink_get_family_id$ethtool(0x0, r0) 1m40.017667872s ago: executing program 4 (id=5575): socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES64=r0]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x5, r4, 0x1, 0x4, 0x6, @random="97b0e521f37a"}, 0x14) 1m39.787123278s ago: executing program 8 (id=5576): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x2e0, 0xa, 0x148, 0x2e0, 0x60, 0x3dc, 0x2a8, 0x2a8, 0x3dc, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e0, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xfc, 0x2e, "7e3603d171eb8c2e69c4dcb937b7e35a0a7b4b38f41f7f1612a350164bbc"}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0x94, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x7, 0x716b, 0x7f, 0x2, 'snmp\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4cc) 1m39.500959395s ago: executing program 8 (id=5577): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r1, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8807c2fb7fe0406e52", 0x1c}], 0x1}, 0x4005) 1m39.364405429s ago: executing program 4 (id=5578): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) 1m37.984247216s ago: executing program 4 (id=5580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getpid() ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff61", @ANYRES32], 0x3c}}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000b80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) 1m37.85297265s ago: executing program 8 (id=5581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000002c0)="48b800780000000000000f23d00f21f8351000000d0f23f82e410f01c4660f3a0e0780450f35b9800000c00f3235008000000f30b9f2030000b800780000ba000000000f30430f0d110f3266b806008ee03e64263e420f0092dead0000", 0x5d}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = open(0x0, 0x241, 0x1ff) write(r4, 0x0, 0x0) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00', 0x20) r5 = open(0x0, 0x20000, 0x1ff) write(r4, &(0x7f0000000c80)="ab84b4f6000d22ba69506630cf6373c55cf5899a70da4b17a0a46bbc0d96bbf58fdb917b972ce57d8cc7b500000000497f3979d8b9aa503cad971278d75d86c275cadda450d8323946b0c5360010", 0x4e) close(r5) write(0xffffffffffffffff, &(0x7f0000000600)='720', 0x3) close(0xffffffffffffffff) r6 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) close(r6) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 1m30.571849214s ago: executing program 8 (id=5583): prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0xfffffffb], [{0x0, 0x1, 0x0, 0x1}, {0xb, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x3}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x3, 0x82}, {0x1010000, 0x6}, {0xec41, 0xffffffff}, {0x3, 0x8}], 0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m26.521139623s ago: executing program 46 (id=5563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getpid() ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff61", @ANYRES32], 0x3c}}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000b80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) 1m26.001093137s ago: executing program 8 (id=5586): socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES64=r0]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x5, r4, 0x1, 0x4, 0x6, @random="97b0e521f37a"}, 0x14) 1m22.13628578s ago: executing program 47 (id=5580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getpid() ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff61", @ANYRES32], 0x3c}}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000b80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) 1m9.688559814s ago: executing program 48 (id=5586): socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES64=r0]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x5, r4, 0x1, 0x4, 0x6, @random="97b0e521f37a"}, 0x14) 1m1.217019071s ago: executing program 5 (id=5592): r0 = socket$kcm(0x21, 0x2, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xeff, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80500, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCATTCHAN(r2, 0x40047454, 0x0) setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0xa00}], 0x400000000000172, 0x4001c00) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) 54.486885561s ago: executing program 5 (id=5593): prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0xfffffffb], [{0x0, 0x1, 0x0, 0x1}, {0xb, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x3}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x3, 0x82}, {0x1010000, 0x6}, {0xec41, 0xffffffff}, {0x3, 0x8}], 0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 48.629831058s ago: executing program 5 (id=5594): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r2, 0x2007ffb) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 34.873295936s ago: executing program 5 (id=5595): sendto(0xffffffffffffffff, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) 27.193016942s ago: executing program 5 (id=5596): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000200)={r2, 0x2, 0x7, 0x1, &(0x7f00000002c0)=[{0x9, 0xff30, 0x3, 0x7}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c58, 0x80, 0x20002, 0x16c}, &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, 0x0, r6, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x840, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet_icmp_raw(0x2, 0x3, 0x1) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) close(r7) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x43, 0x8}, 0xc) 17.405618224s ago: executing program 5 (id=5597): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x64, 0x4, 0x31c, 0x100000c, 0x0, 0x1b4, 0xb8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0x9c, 0xfc, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x5}}}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x6, 0x4, 0x0, 0x5, 0x1]}}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x378) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) 0s ago: executing program 49 (id=5597): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x64, 0x4, 0x31c, 0x100000c, 0x0, 0x1b4, 0xb8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0x9c, 0xfc, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x5}}}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x6, 0x4, 0x0, 0x5, 0x1]}}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x378) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) kernel console output (not intermixed with test programs): disabled state [ 918.321889][T21995] bridge_slave_1: entered allmulticast mode [ 918.354622][T21995] bridge_slave_1: entered promiscuous mode [ 918.486866][T22076] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4584'. [ 918.496859][ T5780] Bluetooth: hci3: command tx timeout [ 918.830418][T21995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.892657][T21995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.188885][T22090] team0: Mode changed to "loadbalance" [ 919.451317][T21995] team0: Port device team_slave_0 added [ 919.595639][T21995] team0: Port device team_slave_1 added [ 920.026273][T21995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.078719][T21995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.208753][T21995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.267531][T22117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 920.287580][T21995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.326711][T21995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.450008][T21995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.520153][ T31] hsr_slave_0: left promiscuous mode [ 920.552798][ T31] hsr_slave_1: left promiscuous mode [ 920.568838][ T5780] Bluetooth: hci3: command tx timeout [ 921.660810][T22146] loop2: detected capacity change from 0 to 512 [ 921.830447][T22146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 921.925473][T22146] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.965107][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 921.965119][ T28] audit: type=1326 audit(1785873381.028:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22151 comm="syz.4.4606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a0c19e019 code=0x0 [ 922.071816][T22146] EXT4-fs error (device loop2): ext4_xattr_block_find:1881: inode #15: comm syz.2.4605: corrupted xattr block 33: invalid ea_ino [ 922.291934][T19751] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.622331][T22157] loop2: detected capacity change from 0 to 512 [ 922.649469][ T5780] Bluetooth: hci3: command tx timeout [ 922.873085][T22160] loop2: detected capacity change from 0 to 512 [ 923.141344][T22160] EXT4-fs (loop2): Test dummy encryption mode enabled [ 923.164966][T22160] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 923.194252][T22160] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 923.242669][T22160] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.4608: bad orphan inode 131083 [ 923.280476][T22160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 923.394011][T22160] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 923.514269][T19751] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.668360][T22167] loop2: detected capacity change from 0 to 512 [ 923.746641][T22167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.807287][T22167] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 923.978089][T19751] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.365419][ T31] bond0 (unregistering): Released all slaves [ 925.627560][T22130] bridge_slave_0: left allmulticast mode [ 925.715191][T22130] bridge_slave_0: left promiscuous mode [ 925.743352][T22130] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.803586][T22130] bridge_slave_1: left allmulticast mode [ 925.837186][T22130] bridge_slave_1: left promiscuous mode [ 925.893918][T22130] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.943752][T22186] loop2: detected capacity change from 0 to 256 [ 925.976710][T22130] bond0: (slave bond_slave_0): Releasing backup interface [ 926.028332][T22186] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 926.074956][T22130] bond0: (slave bond_slave_1): Releasing backup interface [ 926.226099][T22130] team0: Port device team_slave_0 removed [ 926.234304][T22188] loop2: detected capacity change from 0 to 16 [ 926.277183][T22188] erofs: (device loop2): mounted with root inode @ nid 36. [ 926.327606][T22188] erofs: (device loop2): z_erofs_read_folio: read error -95 @ 43 of nid 36 [ 926.369751][T22130] team0: Port device team_slave_1 removed [ 926.375968][T22130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.535840][T22130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.544216][T22130] veth3: left allmulticast mode [ 926.555539][T22130] veth3: left promiscuous mode [ 926.561050][T22130] bridge1: port 1(veth3) entered disabled state [ 926.576301][T22130] veth5: left allmulticast mode [ 926.585849][T22130] veth5: left promiscuous mode [ 926.600158][T22130] bridge1: port 2(veth5) entered disabled state [ 926.624857][T22133] team0: Mode changed to "loadbalance" [ 926.794948][ T5815] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 926.874926][T21995] hsr_slave_0: entered promiscuous mode [ 926.906673][T21995] hsr_slave_1: entered promiscuous mode [ 927.029819][ T5815] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 927.078797][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.102502][ T5815] usb 3-1: config 0 has no interface number 0 [ 927.125541][ T5815] usb 3-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 927.185755][ T5815] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 927.241350][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.278851][ T5815] usb 3-1: Product: syz [ 927.283071][ T5815] usb 3-1: Manufacturer: syz [ 927.364367][ T5815] usb 3-1: SerialNumber: syz [ 927.395639][ T5815] usb 3-1: config 0 descriptor?? [ 927.463061][ T5815] asix: probe of 3-1:0.251 failed with error -22 [ 927.841762][ T5815] usb 3-1: USB disconnect, device number 15 [ 928.498161][T21995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 928.556352][T21995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 928.608256][T21995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 928.685690][T21995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 929.152352][T21995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.254025][T21995] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.344052][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.351304][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.400025][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.407331][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.882254][ T28] audit: type=1107 audit(1785873389.938:548): pid=22241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 931.937631][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.127007][T21995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.329780][T21995] veth0_vlan: entered promiscuous mode [ 933.417102][T21995] veth1_vlan: entered promiscuous mode [ 933.564732][T21995] veth0_macvtap: entered promiscuous mode [ 933.624652][T21995] veth1_macvtap: entered promiscuous mode [ 933.697498][T21995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.820879][T21995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.888563][T21995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.932276][T21995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.018791][T21995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.098739][T21995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.148230][T21995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.187343][T22294] loop2: detected capacity change from 0 to 2048 [ 934.251045][T21995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.307188][T21995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.377875][T21995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.449626][T22294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 934.466788][T21995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.520185][T21995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.605761][T21995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.660751][T21995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.736483][T21995] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.788687][T21995] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.834047][T21995] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.873990][T21995] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.949380][T19751] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.355884][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.436584][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.451955][T22309] loop2: detected capacity change from 0 to 1024 [ 935.597979][T11129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.660809][T11129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.486322][T22323] loop5: detected capacity change from 0 to 256 [ 936.516163][T22323] exfat: Unknown parameter 'ÿÿÕpDÀy­±47– znÁˆeä¬{ªSáVш&AÝdE`öt3’J鶱—´Æ¾{Xs¿ËJÑÊé^шá;k¼Ù»~ƒëžþƒÕ7W}`¯vÎe…' [ 936.621786][T22323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4643'. [ 936.681629][T22323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.989571][T22323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.659733][ T5815] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 938.851429][ T5815] usb 6-1: unable to get BOS descriptor or descriptor too short [ 938.873118][ T5815] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 938.900100][ T5815] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 938.916452][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.934031][ T5815] usb 6-1: Product: syz [ 938.941870][ T5815] usb 6-1: Manufacturer: syz [ 938.956509][ T5815] usb 6-1: SerialNumber: syz [ 939.183974][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 939.203048][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 939.236919][ T5815] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 939.254986][ T5815] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 939.326058][ T5815] usb 6-1: USB disconnect, device number 4 [ 939.426946][T22307] udevd[22307]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.671271][T22356] team0: Unable to change to the same mode the team is in [ 940.034117][T22361] warning: `syz.1.4657' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 940.720632][T22373] bridge_slave_0: left allmulticast mode [ 940.746808][T22373] bridge_slave_0: left promiscuous mode [ 940.759280][T22373] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.803936][T22373] bridge_slave_1: left allmulticast mode [ 940.810754][T22373] bridge_slave_1: left promiscuous mode [ 940.825119][T22373] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.869423][T22373] bond0: (slave bond_slave_0): Releasing backup interface [ 940.917805][T22373] bond0: (slave bond_slave_1): Releasing backup interface [ 941.021023][T22373] team0: Failed to send options change via netlink (err -105) [ 941.049523][T22373] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 941.071933][T22373] team0: Port device team_slave_0 removed [ 941.117169][T22373] team0: Failed to send options change via netlink (err -105) [ 941.164250][T22373] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 941.205748][T22373] team0: Port device team_slave_1 removed [ 941.228061][T22373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.267368][T22373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.409388][T22376] team0: Failed to send options change via netlink (err -105) [ 941.447377][T22376] team0: Mode changed to "loadbalance" [ 942.048239][T22397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4673'. [ 942.561479][T22409] loop5: detected capacity change from 0 to 512 [ 942.607922][T22411] team0: Unable to change to the same mode the team is in [ 942.666720][T22409] EXT4-fs error (device loop5): __ext4_iget:5079: inode #11: block 1: comm syz.5.4678: invalid block [ 942.741125][T22409] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.4678: couldn't read orphan inode 11 (err -117) [ 942.849771][T22409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 942.939300][T22417] loop2: detected capacity change from 0 to 512 [ 943.113259][T22417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.188542][T22417] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.388328][T21995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.772159][T19751] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.082516][T22437] team0: Unable to change to the same mode the team is in [ 944.580842][T22448] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 944.654170][T22450] loop5: detected capacity change from 0 to 512 [ 944.747696][T22450] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 944.873859][T22450] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.4694: invalid indirect mapped block 256 (level 2) [ 944.995376][T22450] EXT4-fs (loop5): 2 truncates cleaned up [ 945.024576][T22450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 945.181899][T22450] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.4694: bg 0: block 5: invalid block bitmap [ 945.256364][T22464] team0: Unable to change to the same mode the team is in [ 945.296468][T22450] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 945.359104][T22462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4697'. [ 945.385717][T22450] EXT4-fs (loop5): This should not happen!! Data will be lost [ 945.385717][T22450] [ 945.437396][T22450] EXT4-fs (loop5): Total free blocks count 0 [ 945.494322][T22450] EXT4-fs (loop5): Free/Dirty block details [ 945.517705][T22450] EXT4-fs (loop5): free_blocks=0 [ 945.535033][T22450] EXT4-fs (loop5): dirty_blocks=64 [ 945.558610][T22450] EXT4-fs (loop5): Block reservation details [ 945.582505][T22450] EXT4-fs (loop5): i_reserved_data_blocks=64 [ 945.725322][T21995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.739445][ T5815] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 945.955159][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.982220][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.031321][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 946.085667][ T5815] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 946.105166][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.153113][ T5815] usb 3-1: config 0 descriptor?? [ 946.631344][ T5815] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 946.747785][ T5815] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 946.981050][T22491] loop2: detected capacity change from 0 to 128 [ 947.130848][T22491] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 947.177972][T22496] loop5: detected capacity change from 0 to 164 [ 947.279203][T22491] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 947.378760][T22496] rock: directory entry would overflow storage [ 947.439677][T22496] rock: sig=0x4543, size=28, remaining=18 [ 948.008854][ T9] usb 3-1: USB disconnect, device number 16 [ 948.511006][T22509] loop5: detected capacity change from 0 to 512 [ 949.358525][T22513] netlink: 277 bytes leftover after parsing attributes in process `syz.4.4718'. [ 950.334811][T22509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 950.529837][T22509] ext4 filesystem being mounted at /syzcgroup/unified/syz5/syz1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 950.556275][T19751] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 950.913624][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4719'. [ 953.483973][T22568] loop2: detected capacity change from 0 to 1024 [ 953.524306][T22568] hfsplus: invalid catalog btree flag [ 953.561223][T22568] hfsplus: failed to load catalog file [ 954.445393][T22587] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 954.497779][T22587] syzkaller0: entered promiscuous mode [ 954.511402][T22587] syzkaller0: entered allmulticast mode [ 955.570507][T22597] loop2: detected capacity change from 0 to 512 [ 955.639484][T22597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.685825][T22597] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.894660][T19751] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.064314][T22672] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4780'. [ 964.873953][T22667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4778'. [ 965.621674][T22702] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 967.160086][T22739] loop2: detected capacity change from 0 to 256 [ 969.640831][T22762] fuse: Unknown parameter 'use00000000000000000000' [ 969.896363][T22767] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4816'. [ 970.626485][T22784] loop2: detected capacity change from 0 to 1024 [ 970.699377][T22784] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 970.794138][T22786] fuse: Unknown parameter 'use00000000000000000000' [ 971.500448][T22798] loop2: detected capacity change from 0 to 1024 [ 971.622197][T22798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.836711][T19751] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.019077][T22813] fuse: Unknown parameter 'use00000000000000000000' [ 973.126251][T22840] fuse: Unknown parameter 'user_i00000000000000000000' [ 973.208906][ T8] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 973.422393][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.468504][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 973.508084][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 973.562452][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 974.758958][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 974.784314][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 974.799439][T10373] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 974.819796][ T8] usb 3-1: SerialNumber: syz [ 974.866857][ T8] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 974.895934][ T8] usb-storage 3-1:1.0: USB Mass Storage device detected [ 974.933514][ T8] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 975.050207][T10373] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 975.110016][T10373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.157236][T10373] usb 6-1: config 0 descriptor?? [ 975.162955][ T9] usb 3-1: USB disconnect, device number 17 [ 975.196131][T10373] cp210x 6-1:0.0: cp210x converter detected [ 975.624368][T10373] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 975.670209][T10373] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 975.714792][T10373] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 975.762758][T10373] usb 6-1: cp210x converter now attached to ttyUSB0 [ 975.819058][T10373] usb 6-1: USB disconnect, device number 5 [ 975.868987][T10373] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 975.877331][T10373] cp210x 6-1:0.0: device disconnected [ 976.079930][T22861] fuse: Unknown parameter 'user_i00000000000000000000' [ 976.212885][T22863] loop2: detected capacity change from 0 to 1024 [ 976.269403][T22863] EXT4-fs: Ignoring removed bh option [ 976.357619][T22863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 976.710354][T19751] EXT4-fs error (device loop2): ext4_read_inline_dir:1591: inode #12: block 7: comm syz-executor: path /252/file2/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 976.829771][T19751] EXT4-fs error (device loop2): ext4_read_inline_dir:1591: inode #12: block 7: comm syz-executor: path /252/file2/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 977.139980][T22158] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.989507][T19754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 980.001241][T19754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 980.017057][T19754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 980.026282][T19754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 980.039528][T19754] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 980.047189][T19754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 982.089018][ T5780] Bluetooth: hci0: command tx timeout [ 982.473230][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4882'. [ 982.577447][T22944] team0: Unable to change to the same mode the team is in [ 984.971985][ T5780] Bluetooth: hci0: command tx timeout [ 985.568733][T11129] hsr_slave_0: left promiscuous mode [ 985.708542][T11129] hsr_slave_1: left promiscuous mode [ 987.358934][ T5780] Bluetooth: hci0: command tx timeout [ 989.952293][ T5780] Bluetooth: hci0: command tx timeout [ 991.985131][T11129] bond0 (unregistering): Released all slaves [ 992.163180][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4900'. [ 992.223176][T23006] team0: Unable to change to the same mode the team is in [ 992.293795][T22904] chnl_net:caif_netlink_parms(): no params data found [ 992.840566][T22904] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.847717][T22904] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.904000][T22904] bridge_slave_0: entered allmulticast mode [ 992.967375][T22904] bridge_slave_0: entered promiscuous mode [ 992.999301][T23035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4906'. [ 993.041538][T22904] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.105953][T22904] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.160040][T22904] bridge_slave_1: entered allmulticast mode [ 993.167177][T22904] bridge_slave_1: entered promiscuous mode [ 993.388870][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.480878][T22904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.561080][T22904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.811086][T23047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4911'. [ 993.875700][T23049] team0: Unable to change to the same mode the team is in [ 994.031975][T22904] team0: Port device team_slave_0 added [ 994.097141][T22904] team0: Port device team_slave_1 added [ 994.227631][T22904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.261439][T22904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.393902][T22904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.457637][T22904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.492840][T22904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.617191][T22904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.915753][T22904] hsr_slave_0: entered promiscuous mode [ 994.947034][T22904] hsr_slave_1: entered promiscuous mode [ 994.985451][T22904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 995.027787][T22904] Cannot create hsr debugfs directory [ 995.324763][T23082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4921'. [ 995.367882][T23083] team0: Unable to change to the same mode the team is in [ 995.978883][T23096] fuse: Unknown parameter 'fd0x0000000000000004' [ 996.624676][T23109] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 1000.318165][T22904] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1000.404827][T22904] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1000.548925][T22904] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1000.631493][T22904] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1001.059638][T22904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.143145][T22904] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.209505][T23168] team0: Unable to change to the same mode the team is in [ 1001.378253][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.385511][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.451946][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.459164][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.600969][T22904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.697525][T23201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4957'. [ 1003.785143][T23201] team0: Unable to change to the same mode the team is in [ 1005.741579][T23217] netlink: 'syz.5.4960': attribute type 16 has an invalid length. [ 1005.749580][T23217] netlink: 'syz.5.4960': attribute type 17 has an invalid length. [ 1005.785888][T23217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1006.726919][T22904] veth0_vlan: entered promiscuous mode [ 1006.942352][T23239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4967'. [ 1007.009540][T23244] team0: Unable to change to the same mode the team is in [ 1007.041563][T22904] veth1_vlan: entered promiscuous mode [ 1007.247502][T22904] veth0_macvtap: entered promiscuous mode [ 1007.313837][T22904] veth1_macvtap: entered promiscuous mode [ 1007.541064][T22904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.625221][T22904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.686210][T22904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.747504][T22904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.803731][T22904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.866563][T22904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.906902][T22904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.056219][T22904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.118780][T22904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.163760][T22904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.176474][T22904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.203466][T22904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.216015][T22904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.278025][T22904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.542854][T22904] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.591692][T22904] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.628482][T22904] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.666190][T22904] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.984024][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1009.057403][T23274] team0: Unable to change to the same mode the team is in [ 1009.862033][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.918488][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.065368][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.123272][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.990778][T23309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4987'. [ 1011.048160][T23309] team0: Unable to change to the same mode the team is in [ 1011.248747][ T9] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1011.476655][ T9] usb 8-1: not running at top speed; connect to a high speed hub [ 1011.516907][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.571500][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1011.649268][ T9] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1011.705042][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.743631][ T9] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 1011.811643][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 1011.858447][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 1011.907807][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 1011.967922][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 1012.022420][ T9] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1012.068201][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 1012.130630][ T9] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 1012.184636][ T9] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1012.529994][T23334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4956'. [ 1012.641855][ T5815] usb 8-1: USB disconnect, device number 2 [ 1012.677278][ T5815] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1012.759066][ T5815] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1012.834973][ T5815] keyspan 8-1:1.0: device disconnected [ 1013.247657][T23351] loop7: detected capacity change from 0 to 1024 [ 1013.286830][T23353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4998'. [ 1013.452150][T23353] team0: Unable to change to the same mode the team is in [ 1015.142127][ T5815] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1015.459312][T23381] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1015.493624][ T5815] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1015.557338][ T5815] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1015.590772][ T5815] usb 8-1: can't read configurations, error -71 [ 1016.316386][T23397] loop7: detected capacity change from 0 to 1024 [ 1016.789914][T23403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5013'. [ 1016.967583][T23403] team0: Unable to change to the same mode the team is in [ 1018.787730][T23445] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5026'. [ 1018.896338][T23445] team0: Unable to change to the same mode the team is in [ 1019.250117][T23458] loop7: detected capacity change from 0 to 256 [ 1019.289923][T23459] unsupported nlmsg_type 40 [ 1019.357050][T23458] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1019.449648][T23458] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1019.611243][T23458] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 1019.701498][T23458] exFAT-fs (loop7): failed to load alloc-bitmap [ 1019.742320][T23458] exFAT-fs (loop7): failed to recognize exfat type [ 1022.178477][T23488] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5038'. [ 1022.225059][T23488] team0: Unable to change to the same mode the team is in [ 1022.664998][T23501] loop7: detected capacity change from 0 to 1024 [ 1022.729550][T23501] hfsplus: invalid uid specified [ 1022.734530][T23501] hfsplus: unable to parse mount options [ 1023.170881][T23513] loop7: detected capacity change from 0 to 128 [ 1023.177963][T23513] EXT4-fs: Ignoring removed orlov option [ 1023.337036][T23513] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1023.449755][T23513] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.725630][T23526] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5052'. [ 1023.789018][T23528] 9pnet_fd: Insufficient options for proto=fd [ 1023.811237][T23526] team0: Unable to change to the same mode the team is in [ 1023.903370][T22904] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1024.195249][T23539] loop7: detected capacity change from 0 to 512 [ 1024.320262][T23539] EXT4-fs (loop7): 1 truncate cleaned up [ 1024.326854][T23539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.749578][T22904] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.130758][T23556] syz_tun: entered allmulticast mode [ 1025.223574][T23554] syz_tun: left allmulticast mode [ 1025.328865][T23560] input: syz1 as /devices/virtual/input/input6 [ 1025.807533][T23572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5068'. [ 1027.845649][T23614] loop7: detected capacity change from 0 to 8 [ 1027.979153][T23616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5082'. [ 1030.508765][T10373] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1030.819280][T10373] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1030.871051][T10373] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1030.918430][T10373] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1030.965244][T10373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.003712][T10373] cdc_acm: probe of 6-1:1.0 failed with error -12 [ 1031.157835][T23655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5096'. [ 1031.220675][T10373] usb 6-1: USB disconnect, device number 6 [ 1032.006667][T23674] loop7: detected capacity change from 0 to 256 [ 1032.244937][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.317908][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.096166][T23717] loop7: detected capacity change from 0 to 8 [ 1035.167765][T23744] loop7: detected capacity change from 0 to 1024 [ 1035.291375][T23744] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.614752][T22904] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.904901][T23780] fuse: Bad value for 'fd' [ 1036.936916][T23780] loop7: detected capacity change from 0 to 8 [ 1037.012290][T23015] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1037.330814][T23788] loop7: detected capacity change from 0 to 128 [ 1037.439489][T23788] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1037.571410][T23788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1037.918415][T10373] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1038.130995][T10373] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1038.206972][T10373] usb 6-1: New USB device found, idVendor=0499, idProduct=1027, bcdDevice= 0.40 [ 1038.257491][T10373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.308377][T10373] usb 6-1: Product: syz [ 1038.332963][T10373] usb 6-1: Manufacturer: syz [ 1038.363365][T10373] usb 6-1: SerialNumber: syz [ 1038.653742][T10373] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1039.113493][T10373] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 1039.204636][T10373] usb 6-1: USB disconnect, device number 7 [ 1039.377021][T23813] udevd[23813]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1039.530078][T23823] fuse: Bad value for 'fd' [ 1039.704277][T23819] loop7: detected capacity change from 0 to 8192 [ 1039.790771][T23819] loop7: p4 [ 1039.794224][T23819] loop7: p4 size 262144 extends beyond EOD, truncated [ 1040.368404][T23813] I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1040.672875][T23813] udevd[23813]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1040.792356][T23845] loop7: detected capacity change from 0 to 8 [ 1040.943103][T23845] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1041.063783][T23845] SQUASHFS error: Failed to read block 0x202: -5 [ 1041.209758][T23845] SQUASHFS error: Unable to read metadata cache entry [200] [ 1042.937012][T23880] loop7: detected capacity change from 0 to 2048 [ 1043.069260][T23880] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1043.830135][T10373] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1044.079903][T10373] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.132950][T10373] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.193234][T10373] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1044.288504][T10373] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.339175][T10373] usb 8-1: config 0 descriptor?? [ 1045.198542][T10373] hid-led: probe of 0003:27B8:01ED.0002 failed with error -32 [ 1047.384866][T10373] usb 8-1: USB disconnect, device number 5 [ 1048.316140][T23953] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 1048.358521][T23953] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 1049.155009][T23972] loop7: detected capacity change from 0 to 512 [ 1049.229667][T23972] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1049.433261][T23972] EXT4-fs (loop7): 1 orphan inode deleted [ 1049.468770][T23972] EXT4-fs (loop7): 1 truncate cleaned up [ 1049.519970][T23972] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1049.936193][T22904] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.672598][T24006] loop7: detected capacity change from 0 to 128 [ 1051.954210][T24031] loop7: detected capacity change from 0 to 1024 [ 1052.190771][T24036] netlink: 'syz.5.5208': attribute type 3 has an invalid length. [ 1052.544046][T11129] hfsplus: bad catalog file entry [ 1053.479997][T24067] loop7: detected capacity change from 0 to 8 [ 1053.593593][T24067] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1053.648514][T24067] SQUASHFS error: Failed to read block 0x202: -5 [ 1053.734526][T24067] SQUASHFS error: Unable to read metadata cache entry [200] [ 1054.819591][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.514955][T24109] loop7: detected capacity change from 0 to 512 [ 1055.585718][T24109] EXT4-fs: Ignoring removed nobh option [ 1056.020163][T24120] loop7: detected capacity change from 0 to 16 [ 1056.073360][T24120] erofs: (device loop7): mounted with root inode @ nid 36. [ 1056.173255][T24120] erofs: (device loop7): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 1056.284124][T24120] syz.7.5235: attempt to access beyond end of device [ 1056.284124][T24120] loop7: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1056.513225][T24120] erofs: (device loop7): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 1056.601022][T24120] syz.7.5235: attempt to access beyond end of device [ 1056.601022][T24120] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1056.767546][T24120] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 1057.039336][ T28] audit: type=1800 audit(1785873516.098:549): pid=24120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5235" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 1057.975066][T24150] fuse: Bad value for 'fd' [ 1058.199280][T24157] loop7: detected capacity change from 0 to 256 [ 1058.533528][T24157] exFAT-fs (loop7): failed to load upcase table (idx : 0x000100a3, chksum : 0x3e058258, utbl_chksum : 0xe619d30d) [ 1058.851998][T24157] exFAT-fs (loop7): hint_cluster is invalid (4278190089), rewind to the first cluster [ 1058.944713][T24157] exFAT-fs (loop7): error, failed to bmap (inode : ffff8880514187e0 iblock : 8, err : -5) [ 1059.025939][T24157] exFAT-fs (loop7): Filesystem has been set read-only [ 1059.104486][T24157] exFAT-fs (loop7): error, invalid access to FAT (entry 0xff000008) [ 1059.168951][T24157] syz.7.5243: attempt to access beyond end of device [ 1059.168951][T24157] loop7: rw=2049, sector=34225520825, nr_sectors = 1 limit=256 [ 1059.273777][T24157] Buffer I/O error on dev loop7, logical block 34225520825, lost async page write [ 1059.335997][T24157] syz.7.5243: attempt to access beyond end of device [ 1059.335997][T24157] loop7: rw=2049, sector=34225520826, nr_sectors = 1 limit=256 [ 1059.443039][T24157] Buffer I/O error on dev loop7, logical block 34225520826, lost async page write [ 1059.523189][T24157] syz.7.5243: attempt to access beyond end of device [ 1059.523189][T24157] loop7: rw=2049, sector=34225520827, nr_sectors = 1 limit=256 [ 1059.648555][T24157] Buffer I/O error on dev loop7, logical block 34225520827, lost async page write [ 1059.731155][T24157] syz.7.5243: attempt to access beyond end of device [ 1059.731155][T24157] loop7: rw=2049, sector=34225520828, nr_sectors = 1 limit=256 [ 1059.813128][T24157] Buffer I/O error on dev loop7, logical block 34225520828, lost async page write [ 1059.878825][T24157] syz.7.5243: attempt to access beyond end of device [ 1059.878825][T24157] loop7: rw=2049, sector=34225520829, nr_sectors = 1 limit=256 [ 1059.984434][T24157] Buffer I/O error on dev loop7, logical block 34225520829, lost async page write [ 1060.046563][T24157] syz.7.5243: attempt to access beyond end of device [ 1060.046563][T24157] loop7: rw=2049, sector=34225520830, nr_sectors = 1 limit=256 [ 1060.117347][T24157] Buffer I/O error on dev loop7, logical block 34225520830, lost async page write [ 1061.669049][T24157] syz.7.5243: attempt to access beyond end of device [ 1061.669049][T24157] loop7: rw=2049, sector=34225520831, nr_sectors = 1 limit=256 [ 1061.795267][T24157] Buffer I/O error on dev loop7, logical block 34225520831, lost async page write [ 1062.069631][T19754] Bluetooth: hci3: command 0x0406 tx timeout [ 1062.268378][ T5816] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1062.428563][T24197] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5252'. [ 1062.509070][ T5816] usb 6-1: Using ep0 maxpacket: 16 [ 1062.534920][ T5816] usb 6-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 1062.566570][T24201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5255'. [ 1062.588269][ T5816] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1062.617666][T24201] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5255'. [ 1062.663266][ T5816] usb 6-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 1062.699385][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.769374][ T5816] usb 6-1: Product: syz [ 1062.773666][ T5816] usb 6-1: Manufacturer: syz [ 1062.838514][ T5816] usb 6-1: SerialNumber: syz [ 1062.956545][T24205] loop7: detected capacity change from 0 to 8 [ 1063.065530][T24205] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1063.106025][ T5816] usb 6-1: unit 219 not found! [ 1063.165743][ T5816] usb 6-1: unit 223 not found! [ 1063.179691][T24205] SQUASHFS error: Failed to read block 0x202: -5 [ 1063.270145][T24205] SQUASHFS error: Unable to read metadata cache entry [200] [ 1063.280296][ T5816] usb 6-1: USB disconnect, device number 8 [ 1063.375909][T23813] udevd[23813]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1064.670438][T24238] loop7: detected capacity change from 0 to 8 [ 1064.784587][T24238] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1064.937858][T24238] SQUASHFS error: Failed to read block 0x202: -5 [ 1065.050537][T24238] SQUASHFS error: Unable to read metadata cache entry [200] [ 1066.250396][T24263] netlink: 'syz.1.5276': attribute type 4 has an invalid length. [ 1066.979296][T19754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1066.993415][T19754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1067.017539][T19754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1067.026015][T19754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1067.034138][T19754] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1067.048440][T19754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1067.683108][T24287] loop7: detected capacity change from 0 to 512 [ 1067.897694][T24287] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1067.983008][T24287] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1068.033667][T24287] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.5283: Failed to acquire dquot type 1 [ 1068.131933][T24287] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1068.182773][T24287] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1068.241092][T24287] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.5283: Failed to acquire dquot type 1 [ 1068.322024][T24287] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.5283: bg 0: block 248: padding at end of block bitmap is not set [ 1068.381484][T24287] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1068.440834][T24287] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1068.496531][T24287] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1068.514975][T24273] chnl_net:caif_netlink_parms(): no params data found [ 1068.573343][T24287] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.5283: Failed to acquire dquot type 1 [ 1068.650366][T24287] EXT4-fs (loop7): 1 orphan inode deleted [ 1068.657161][T24287] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.809102][T24287] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.140691][T19754] Bluetooth: hci1: command tx timeout [ 1069.194168][T24287] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1069.394713][T24287] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 1069.462290][T24273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.523307][T24273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.549745][T24287] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1069.589525][T24273] bridge_slave_0: entered allmulticast mode [ 1069.596576][T24273] bridge_slave_0: entered promiscuous mode [ 1069.679957][T24273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.687125][T24273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.776246][T22904] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.792897][T24273] bridge_slave_1: entered allmulticast mode [ 1069.849387][T24273] bridge_slave_1: entered promiscuous mode [ 1070.064177][T24273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.182121][T24273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.395908][T24273] team0: Port device team_slave_0 added [ 1070.436435][T24273] team0: Port device team_slave_1 added [ 1070.580823][T24273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.617140][T24273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.745254][T24273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.808099][T24273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.848658][T24273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.992909][T24273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.218285][T19754] Bluetooth: hci1: command tx timeout [ 1071.759003][T24273] hsr_slave_0: entered promiscuous mode [ 1071.868653][T24273] hsr_slave_1: entered promiscuous mode [ 1071.962399][T24357] loop7: detected capacity change from 0 to 1024 [ 1072.008580][T24273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.072498][T24357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.088632][T24273] Cannot create hsr debugfs directory [ 1072.199802][T24357] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.335948][T24357] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.5299: bg 0: block 112: padding at end of block bitmap is not set [ 1072.502570][T24357] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1072.581793][T24357] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1072.581793][T24357] [ 1072.631775][T24357] EXT4-fs (loop7): Total free blocks count 0 [ 1072.670611][T24357] EXT4-fs (loop7): Free/Dirty block details [ 1072.690754][T24357] EXT4-fs (loop7): free_blocks=0 [ 1072.738405][T24357] EXT4-fs (loop7): dirty_blocks=80 [ 1072.758710][T24357] EXT4-fs (loop7): Block reservation details [ 1072.843172][T24357] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 1073.018162][T22904] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1073.301791][T19754] Bluetooth: hci1: command tx timeout [ 1073.324316][T24375] loop7: detected capacity change from 0 to 512 [ 1073.482707][T24375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.569665][T24375] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.847694][T22904] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.211874][T24273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1074.339786][T24273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1074.388979][T24273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1074.441336][T24273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1074.490823][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1074.706489][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1074.738605][ T9] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1074.801801][ T9] usb 8-1: config 179 has no interface number 0 [ 1074.830233][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1074.874847][T24396] netlink: 'syz.5.5305': attribute type 4 has an invalid length. [ 1074.902158][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1074.959524][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1075.036691][T24273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.043633][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1075.115921][ T9] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1075.161448][T24273] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.219443][ T9] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1075.271785][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.279005][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.308831][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.351773][T24385] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1075.376771][T19754] Bluetooth: hci1: command tx timeout [ 1075.422812][T24183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.430062][T24183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.396320][T24385] loop7: detected capacity change from 0 to 1024 [ 1077.184981][T24273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.631040][ T5815] usb 8-1: USB disconnect, device number 6 [ 1077.636932][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1077.636969][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1077.759832][ T5835] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1078.000016][ T5835] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1078.034626][ T5835] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.068429][ T5835] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1078.135889][ T5835] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1078.183612][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.225826][ T5835] usb 6-1: Product: syz [ 1078.261732][ T5835] usb 6-1: Manufacturer: syz [ 1078.309576][ T5835] usb 6-1: SerialNumber: syz [ 1078.415862][T24273] veth0_vlan: entered promiscuous mode [ 1078.529513][T24273] veth1_vlan: entered promiscuous mode [ 1078.586659][ T5835] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1078.677640][T24273] veth0_macvtap: entered promiscuous mode [ 1078.699612][ T5835] usb 6-1: USB disconnect, device number 9 [ 1078.729101][ T5815] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1078.758770][T24273] veth1_macvtap: entered promiscuous mode [ 1078.830484][T23813] udevd[23813]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1078.902995][T24273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.944855][T24273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.955228][ T5815] usb 8-1: Using ep0 maxpacket: 32 [ 1078.990886][ T5815] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1079.019487][T24273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.047622][ T5815] usb 8-1: string descriptor 0 read error: -22 [ 1079.066603][ T5815] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1079.089112][T24273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.111619][ T5815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.130416][T24273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.175649][ T5815] usb 8-1: unit 2 not found! [ 1079.186144][T24273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.210913][ T5815] usb 8-1: unit 0 not found! [ 1079.231082][T24273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.257453][T24273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.330373][T24273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.407164][T24273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.454265][ T5815] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 1079.504312][T24273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.517255][ T5815] usb 8-1: unit 2 not found! [ 1079.558389][ T5815] usb 8-1: unit 0 not found! [ 1079.573627][T24273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.610338][ T5815] snd-usb-audio: probe of 8-1:1.1 failed with error -22 [ 1079.663540][T24273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.681147][ T5815] usb 8-1: unit 2 not found! [ 1079.728304][T24273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1079.752301][ T5815] usb 8-1: unit 0 not found! [ 1079.812871][T24273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.905383][T24273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.011336][T24273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.061595][ T5815] snd-usb-audio: probe of 8-1:1.2 failed with error -22 [ 1080.110478][T24273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.205069][ T5815] usb 8-1: USB disconnect, device number 7 [ 1080.213980][T24273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.305951][T24273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.368292][T24273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.418283][T24273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.909359][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.971877][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.137703][T24474] loop7: detected capacity change from 0 to 256 [ 1081.193666][T24474] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1081.276787][T24474] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1081.328095][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.398643][T24474] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1081.415048][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.498928][T24474] exFAT-fs (loop7): failed to load alloc-bitmap [ 1081.548389][T24474] exFAT-fs (loop7): failed to recognize exfat type [ 1082.288430][T24493] input: syz0 as /devices/virtual/input/input7 [ 1082.343735][T24495] loop4: detected capacity change from 0 to 512 [ 1082.387391][T24487] loop7: detected capacity change from 0 to 8192 [ 1082.425149][T24495] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1082.525565][T24495] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.5326: inode has both inline data and extents flags [ 1082.546356][T24487] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1082.604731][T24495] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.5326: couldn't read orphan inode 15 (err -117) [ 1082.651640][T24487] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 1082.705742][T24487] FAT-fs (loop7): Filesystem has been set read-only [ 1082.714600][T24495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.046006][T24273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.359650][T24509] loop7: detected capacity change from 0 to 16 [ 1083.451248][T24509] erofs: (device loop7): mounted with root inode @ nid 36. [ 1083.982534][T24523] loop4: detected capacity change from 0 to 512 [ 1084.065078][T24523] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1084.153354][T24523] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1084.283309][T24523] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1084.453648][T24523] EXT4-fs (loop4): 1 truncate cleaned up [ 1084.492792][T24523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.579044][T24532] fuse: Bad value for 'group_id' [ 1084.626219][T24532] loop7: detected capacity change from 0 to 8 [ 1084.790648][T24273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.820935][T24457] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1086.661429][T24574] loop4: detected capacity change from 0 to 8 [ 1087.177820][T24583] loop4: detected capacity change from 0 to 1024 [ 1087.925763][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1087.941985][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1087.968391][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1087.985886][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1087.998831][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1088.006080][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1088.610669][T24603] loop4: detected capacity change from 0 to 8 [ 1088.714608][T24604] loop7: detected capacity change from 0 to 8 [ 1088.930764][T24457] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1089.083075][T24589] chnl_net:caif_netlink_parms(): no params data found [ 1089.230069][T24613] input: syz0 as /devices/virtual/input/input8 [ 1089.741964][T24625] loop7: detected capacity change from 0 to 2048 [ 1089.792280][T24589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.850603][T24589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.857883][T24589] bridge_slave_0: entered allmulticast mode [ 1089.905375][T24625] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1089.944608][T24589] bridge_slave_0: entered promiscuous mode [ 1089.962765][T24625] UDF-fs: Scanning with blocksize 512 failed [ 1090.033886][T24589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.061954][T24625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1090.088996][ T5780] Bluetooth: hci2: command tx timeout [ 1090.110309][T24589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.161782][T24589] bridge_slave_1: entered allmulticast mode [ 1090.180824][T24636] loop4: detected capacity change from 0 to 128 [ 1090.219978][T24589] bridge_slave_1: entered promiscuous mode [ 1090.232294][ T28] audit: type=1800 audit(1785873549.289:550): pid=24625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5363" name="proc" dev="loop7" ino=830 res=0 errno=0 [ 1090.313192][T24636] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1090.414450][T24636] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.481313][T24589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.579461][T24589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.846027][T24589] team0: Port device team_slave_0 added [ 1090.936864][T24273] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1090.971753][T24589] team0: Port device team_slave_1 added [ 1091.571945][T24651] loop4: detected capacity change from 0 to 4096 [ 1091.654505][T24651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.721559][T24589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.775474][T24589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.906669][ T5780] Bluetooth: hci2: command tx timeout [ 1092.995588][ T28] audit: type=1800 audit(1785873551.979:551): pid=24660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5369" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1093.064011][T24658] loop7: detected capacity change from 0 to 2048 [ 1093.093417][T24273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.108463][T24589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.223610][T24658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1093.249484][T24589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.256474][T24589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.560379][T24589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.949242][T24670] loop4: detected capacity change from 0 to 128 [ 1094.048431][T24670] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1094.872225][T24589] hsr_slave_0: entered promiscuous mode [ 1094.919972][T24589] hsr_slave_1: entered promiscuous mode [ 1094.948915][T24589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.975178][ T5780] Bluetooth: hci2: command tx timeout [ 1094.992070][T24589] Cannot create hsr debugfs directory [ 1095.058400][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1095.084823][T24691] loop7: detected capacity change from 0 to 128 [ 1095.441847][ T9] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1096.911528][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.979646][ T9] usb 5-1: Product: syz [ 1097.082076][ T5780] Bluetooth: hci2: command tx timeout [ 1097.138349][ T9] usb 5-1: Manufacturer: syz [ 1097.158464][ T9] usb 5-1: SerialNumber: syz [ 1097.195081][ T9] pl2303 5-1:1.0: required interrupt-in endpoint missing [ 1098.241896][ T9] usb 5-1: USB disconnect, device number 6 [ 1099.361888][T24717] loop4: detected capacity change from 0 to 256 [ 1099.437520][T24717] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1099.537344][T24717] exFAT-fs (loop4): failed to load alloc-bitmap [ 1099.578028][T24717] exFAT-fs (loop4): failed to recognize exfat type [ 1100.042409][T24726] loop4: detected capacity change from 0 to 128 [ 1100.116797][T24726] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1100.879566][T24736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1100.894030][T24736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1100.902735][T24736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1100.919486][T24736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1100.927687][T24736] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1100.935123][T24736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1101.199000][T24743] kernel profiling enabled (shift: 9) [ 1101.276826][T24740] netlink: 'syz.4.5394': attribute type 4 has an invalid length. [ 1101.432953][T24741] netlink: 'syz.4.5394': attribute type 4 has an invalid length. [ 1102.315335][T24589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1102.447679][T24589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1102.477411][T24756] loop4: detected capacity change from 0 to 1764 [ 1102.499702][T24589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1102.644125][ T12] hsr_slave_0: left promiscuous mode [ 1102.692200][ T12] hsr_slave_1: left promiscuous mode [ 1102.872997][T24759] syz.4.5399 uses obsolete (PF_INET,SOCK_PACKET) [ 1102.970440][T24736] Bluetooth: hci0: command tx timeout [ 1103.628478][ T5814] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1103.816269][ T5814] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.848067][ T5814] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1103.890501][ T5814] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1103.905916][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1103.934998][ T5814] usb 6-1: SerialNumber: syz [ 1103.957045][ T5814] cdc_ether 6-1:1.0: skipping garbage [ 1103.987934][ T5814] usb 6-1: bad CDC descriptors [ 1104.264044][ T9] usb 6-1: USB disconnect, device number 10 [ 1105.052011][T24736] Bluetooth: hci0: command tx timeout [ 1105.757276][ T12] bond0 (unregistering): Released all slaves [ 1105.901363][T24589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1106.667611][T24781] loop4: detected capacity change from 0 to 1024 [ 1106.816643][T24781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1106.873611][T24589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.078483][T24731] chnl_net:caif_netlink_parms(): no params data found [ 1107.138439][T24736] Bluetooth: hci0: command tx timeout [ 1107.196019][T24589] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.395631][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.402834][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.526191][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.533406][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.663173][T24796] loop4: detected capacity change from 0 to 2048 [ 1107.789872][T24796] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1108.094965][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.292026][T24731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.326269][T24731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.334745][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1108.375314][T24731] bridge_slave_0: entered allmulticast mode [ 1108.402806][T24731] bridge_slave_0: entered promiscuous mode [ 1108.550013][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.601718][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1108.676947][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1108.739809][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1108.807563][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1108.830072][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.855985][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.916134][ T9] usb 6-1: Product: syz [ 1108.933360][ T9] usb 6-1: Manufacturer: syz [ 1108.964197][T24731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.983056][ T9] usb 6-1: SerialNumber: syz [ 1108.999941][T24731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.007213][T24731] bridge_slave_1: entered allmulticast mode [ 1109.028631][T24805] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1109.057975][T24731] bridge_slave_1: entered promiscuous mode [ 1109.150627][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.210021][T24736] Bluetooth: hci0: command tx timeout [ 1109.300983][T24731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.328607][T24805] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1109.411805][T24731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.645426][T24731] team0: Port device team_slave_0 added [ 1109.723382][T24731] team0: Port device team_slave_1 added [ 1109.788420][ T5814] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1109.879630][T24731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.917215][T24731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.962324][T24731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.984185][T24805] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1110.039304][T24731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.046866][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.069684][T24731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.109115][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.127564][ T5814] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1110.148953][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.157463][T24731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.180785][ T5814] usb 5-1: config 0 descriptor?? [ 1110.218418][ T9] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1110.253512][ T9] cdc_ncm 6-1:1.0: dwNtbInMaxSize=43 is too small. Using 2048 [ 1110.302504][ T9] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 1110.340519][T24589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.452558][T24731] hsr_slave_0: entered promiscuous mode [ 1110.495738][T24731] hsr_slave_1: entered promiscuous mode [ 1110.511666][T24731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1110.525933][T24731] Cannot create hsr debugfs directory [ 1110.586867][ T9] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1110.621010][ T5814] hid-led 0003:27B8:01ED.0003: item fetching failed at offset 2/5 [ 1110.683570][ T5814] hid-led: probe of 0003:27B8:01ED.0003 failed with error -22 [ 1110.700264][ T9] usb 6-1: USB disconnect, device number 11 [ 1110.726542][ T9] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 1110.895517][T10373] usb 5-1: USB disconnect, device number 7 [ 1111.881788][T24837] Bluetooth: MGMT ver 1.22 [ 1113.499364][T24589] veth0_vlan: entered promiscuous mode [ 1113.803162][T24844] fuse: Unknown parameter 'group_id00000000000000000000' [ 1115.272953][T24866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5423'. [ 1115.333273][T24589] veth1_vlan: entered promiscuous mode [ 1115.564663][T24871] loop4: detected capacity change from 0 to 1024 [ 1116.256467][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.419421][T24880] netlink: 1572 bytes leftover after parsing attributes in process `syz.4.5429'. [ 1116.725636][T24589] veth0_macvtap: entered promiscuous mode [ 1116.801769][T24589] veth1_macvtap: entered promiscuous mode [ 1116.857985][ T12] hsr_slave_0: left promiscuous mode [ 1116.887636][ T12] hsr_slave_1: left promiscuous mode [ 1116.920808][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.966871][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.004113][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.034911][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.063910][ T12] bridge_slave_1: left allmulticast mode [ 1117.081672][ T12] bridge_slave_1: left promiscuous mode [ 1117.098782][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.126501][ T12] bridge_slave_0: left allmulticast mode [ 1117.168408][ T12] bridge_slave_0: left promiscuous mode [ 1117.186029][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.467184][ T12] veth1_macvtap: left promiscuous mode [ 1117.519679][ T12] veth0_macvtap: left promiscuous mode [ 1117.570773][ T12] veth1_vlan: left promiscuous mode [ 1117.594596][ T12] veth0_vlan: left promiscuous mode [ 1119.597049][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1119.714293][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1119.817251][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.927258][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.675531][ T12] bond0 (unregistering): Released all slaves [ 1121.032409][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.090283][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.173845][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.227912][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.276631][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.345539][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.408305][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1121.455724][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.502999][T24589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1121.579640][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.628257][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.685117][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.718541][ T5835] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1121.740471][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.787459][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.816951][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.845933][T24589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.873571][T24589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.933442][ T5835] usb 6-1: Using ep0 maxpacket: 32 [ 1121.949223][T24589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1121.974333][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.031289][ T5835] usb 6-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1122.054907][T24589] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.077720][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.097713][T24589] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.129235][ T5835] usb 6-1: config 0 descriptor?? [ 1122.147149][T24589] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.162569][ T5835] usbtouchscreen: probe of 6-1:0.0 failed with error -12 [ 1122.182984][T24589] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.240925][T24731] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1122.319843][T24731] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1122.346796][ T5835] usb 6-1: USB disconnect, device number 12 [ 1122.450593][T24731] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1122.577945][T24731] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1122.814397][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1122.945221][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.998254][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.065005][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.121790][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1123.181922][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.200813][ T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1123.240723][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.261410][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1123.273527][T24731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.305532][ T8] usb 5-1: SerialNumber: syz [ 1123.437166][T24731] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.532125][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.539480][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.594514][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.601756][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.637967][ T8] usb 5-1: 0:2 : does not exist [ 1123.742853][ T8] usb 5-1: USB disconnect, device number 8 [ 1123.793046][T24941] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 1123.848951][T24941] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1125.083991][T24731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.520174][T24981] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5448'. [ 1126.347782][T25000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.355522][T25000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.511969][T25002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.519229][T25002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.526771][T25002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.534015][T25002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.699001][T25002] bridge0: entered promiscuous mode [ 1126.814851][T25002] bridge0: entered allmulticast mode [ 1126.997136][T24731] veth0_vlan: entered promiscuous mode [ 1127.115176][T24731] veth1_vlan: entered promiscuous mode [ 1127.146106][T25002] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5453'. [ 1129.564575][T24731] veth0_macvtap: entered promiscuous mode [ 1129.650934][T24731] veth1_macvtap: entered promiscuous mode [ 1129.929034][T24731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.967191][T24731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.001202][T24731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.077844][T24731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.146581][T24731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.221174][T24731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.274503][T24731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.336708][T24731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.402417][T24731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.464979][T24731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.532534][T24731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.660568][T25042] binder_alloc: 25038: binder_alloc_buf, no vma [ 1130.682994][T24731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.768302][T24731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.795483][T25040] tmpfs: Unknown parameter 'grpquotaL' [ 1130.846363][T24731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.929457][T24731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.993306][T24731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1131.048341][T24731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.095295][T24731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1131.184256][T24731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.259359][T24731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1131.317586][T24731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.381142][T24731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1131.492103][T24731] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.568396][T24731] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.627826][T24731] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.681132][T24731] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.161733][T25056] netlink: 'syz.1.5462': attribute type 10 has an invalid length. [ 1134.242111][T25056] team0: Port device dummy0 added [ 1134.356791][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.429430][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.729185][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.737056][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.219581][T25089] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5469'. [ 1139.014967][T25114] overlay: Unknown parameter '/' [ 1142.328338][T25190] program syz.8.5479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1143.007282][T25190] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1145.003290][T25196] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5481'. [ 1145.088590][T25196] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5481'. [ 1145.473483][T25198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5482'. [ 1145.607771][T25204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 1145.955198][T25216] loop4: detected capacity change from 0 to 128 [ 1146.050621][T25216] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5486'. [ 1148.827243][T25233] syzkaller0: entered promiscuous mode [ 1148.864111][T25233] syzkaller0: entered allmulticast mode [ 1148.955158][ T28] audit: type=1800 audit(1785873608.009:552): pid=25228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5489" name="file0" dev="overlay" ino=63 res=0 errno=0 [ 1149.805006][T25254] loop8: detected capacity change from 0 to 128 [ 1149.813823][T25255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5494'. [ 1149.919976][T25254] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5496'. [ 1150.640357][T25276] bridge0: entered promiscuous mode [ 1150.700056][T25276] bridge0: entered allmulticast mode [ 1150.982190][T25270] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5499'. [ 1151.620138][T25292] syzkaller0: entered promiscuous mode [ 1151.776030][T25292] syzkaller0: entered allmulticast mode [ 1154.662894][T25343] syzkaller0: entered promiscuous mode [ 1154.694352][T25343] syzkaller0: entered allmulticast mode [ 1155.891142][T25374] loop4: detected capacity change from 0 to 128 [ 1155.969967][T25374] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1156.060867][T25374] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.396287][T24273] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1156.833567][T25384] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5529'. [ 1158.042152][T25418] loop4: detected capacity change from 0 to 128 [ 1158.116642][T25418] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1158.204941][T25418] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1158.413484][T24273] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1158.990573][T25434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5541'. [ 1161.628249][ T28] audit: type=1800 audit(1785873620.659:553): pid=25443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5544" name="file0" dev="overlay" ino=141 res=0 errno=0 [ 1162.035569][T25453] loop8: detected capacity change from 0 to 1024 [ 1162.073050][T25433] syz.4.5542: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1162.180347][T25433] CPU: 0 PID: 25433 Comm: syz.4.5542 Not tainted syzkaller #0 [ 1162.187896][T25433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1162.197977][T25433] Call Trace: [ 1162.201334][T25433] [ 1162.204318][T25433] dump_stack_lvl+0x18c/0x250 [ 1162.209096][T25433] ? show_regs_print_info+0x20/0x20 [ 1162.214341][T25433] ? load_image+0x420/0x420 [ 1162.218881][T25433] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1162.225316][T25433] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1162.231833][T25433] warn_alloc+0x246/0x340 [ 1162.236195][T25433] ? zone_watermark_ok_safe+0x230/0x230 [ 1162.241784][T25433] ? _raw_spin_unlock+0x28/0x40 [ 1162.246733][T25433] ? __kasan_kmalloc+0x8f/0xa0 [ 1162.251546][T25433] __vmalloc_node_range+0x661/0x1320 [ 1162.256872][T25433] ? __asan_memset+0x22/0x40 [ 1162.261606][T25433] ? free_vm_area+0x50/0x50 [ 1162.266167][T25433] ? kvmalloc_node+0x70/0x180 [ 1162.270886][T25433] ? rcu_is_watching+0x15/0xb0 [ 1162.275666][T25433] ? kvmalloc_node+0x70/0x180 [ 1162.280389][T25433] ? trace_kmalloc+0x1f/0xa0 [ 1162.285015][T25433] kvmalloc_node+0x13f/0x180 [ 1162.289635][T25433] ? hash_ip_create+0x771/0x14a0 [ 1162.294664][T25433] hash_ip_create+0x771/0x14a0 [ 1162.299454][T25433] ? __lock_acquire+0x7d80/0x7d80 [ 1162.304491][T25433] ? bitmap_port_cancel_gc+0xa0/0xa0 [ 1162.309795][T25433] ? __nla_parse+0x40/0x50 [ 1162.314259][T25433] ? bitmap_port_cancel_gc+0xa0/0xa0 [ 1162.319560][T25433] ip_set_create+0xad1/0x1960 [ 1162.324255][T25433] ? ip_set_create+0x4fe/0x1960 [ 1162.329121][T25433] ? ip_set_protocol+0x5b0/0x5b0 [ 1162.334089][T25433] nfnetlink_rcv_msg+0xcaf/0x1290 [ 1162.339174][T25433] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1162.345457][T25433] ? nfnetlink_rcv_msg+0x228/0x1290 [ 1162.350708][T25433] ? nfnetlink_unbind+0x160/0x160 [ 1162.355770][T25433] ? __dev_queue_xmit+0x198c/0x3630 [ 1162.361067][T25433] ? __netlink_deliver_tap+0x579/0x7f0 [ 1162.366603][T25433] ? netlink_deliver_tap+0x19c/0x1b0 [ 1162.371919][T25433] ? netlink_unicast+0x77b/0x930 [ 1162.376941][T25433] ? netlink_sendmsg+0x8d0/0xbf0 [ 1162.381895][T25433] ? ____sys_sendmsg+0x61b/0x980 [ 1162.386883][T25433] ? ___sys_sendmsg+0x2a6/0x360 [ 1162.391767][T25433] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 1162.396803][T25433] ? do_syscall_64+0x55/0xb0 [ 1162.401420][T25433] netlink_rcv_skb+0x235/0x4c0 [ 1162.406222][T25433] ? nfnetlink_unbind+0x160/0x160 [ 1162.411275][T25433] ? netlink_ack+0x1160/0x1160 [ 1162.416082][T25433] ? apparmor_capable+0x137/0x1a0 [ 1162.421177][T25433] ? bpf_lsm_capable+0x9/0x10 [ 1162.425915][T25433] ? security_capable+0x89/0xb0 [ 1162.430795][T25433] nfnetlink_rcv+0x2c9/0x2490 [ 1162.435495][T25433] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1162.440917][T25433] ? lockdep_hardirqs_on+0x98/0x150 [ 1162.446135][T25433] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1162.451522][T25433] ? _local_bh_enable+0xa0/0xa0 [ 1162.456396][T25433] ? __dev_queue_xmit+0x275/0x3630 [ 1162.461525][T25433] ? __dev_queue_xmit+0x1bc2/0x3630 [ 1162.466754][T25433] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1162.472383][T25433] ? __dev_queue_xmit+0x275/0x3630 [ 1162.477521][T25433] ? ref_tracker_free+0x686/0x830 [ 1162.482562][T25433] ? refcount_inc+0x70/0x70 [ 1162.487073][T25433] ? __asan_memcpy+0x40/0x70 [ 1162.491699][T25433] ? __skb_clone+0x5c/0x6c0 [ 1162.496253][T25433] ? __skb_clone+0x446/0x6c0 [ 1162.500865][T25433] ? netlink_deliver_tap+0x2e/0x1b0 [ 1162.506086][T25433] ? __lock_acquire+0x7d80/0x7d80 [ 1162.511127][T25433] ? netlink_deliver_tap+0x2e/0x1b0 [ 1162.516342][T25433] netlink_unicast+0x7b1/0x930 [ 1162.521133][T25433] netlink_sendmsg+0x8d0/0xbf0 [ 1162.525931][T25433] ? netlink_getsockopt+0x590/0x590 [ 1162.531160][T25433] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1162.536744][T25433] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1162.542044][T25433] ? security_socket_sendmsg+0x80/0xa0 [ 1162.547511][T25433] ? netlink_getsockopt+0x590/0x590 [ 1162.552737][T25433] ____sys_sendmsg+0x61b/0x980 [ 1162.557519][T25433] ? __asan_memset+0x22/0x40 [ 1162.562122][T25433] ? __sys_sendmsg_sock+0x30/0x30 [ 1162.567157][T25433] ? __import_iovec+0x5f2/0x850 [ 1162.572051][T25433] ? import_iovec+0x73/0xa0 [ 1162.576574][T25433] ___sys_sendmsg+0x2a6/0x360 [ 1162.581272][T25433] ? __sys_sendmsg+0x2b0/0x2b0 [ 1162.586081][T25433] __se_sys_sendmsg+0x1d0/0x2c0 [ 1162.590971][T25433] ? __x64_sys_sendmsg+0x80/0x80 [ 1162.595931][T25433] ? lockdep_hardirqs_on+0x98/0x150 [ 1162.601151][T25433] do_syscall_64+0x55/0xb0 [ 1162.605712][T25433] ? clear_bhb_loop+0x40/0x90 [ 1162.610487][T25433] ? clear_bhb_loop+0x40/0x90 [ 1162.615194][T25433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1162.621116][T25433] RIP: 0033:0x7f0114b9e019 [ 1162.625597][T25433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.645272][T25433] RSP: 002b:00007f0115b41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1162.653784][T25433] RAX: ffffffffffffffda RBX: 00007f0114e25fa0 RCX: 00007f0114b9e019 [ 1162.661797][T25433] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1162.669783][T25433] RBP: 00007f0114c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1162.677793][T25433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.685779][T25433] R13: 00007f0114e26038 R14: 00007f0114e25fa0 R15: 00007ffc548dc248 [ 1162.693952][T25433] [ 1162.697140][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.535856][T25433] Mem-Info: [ 1165.557818][T25433] active_anon:9033 inactive_anon:62 isolated_anon:0 [ 1165.557818][T25433] active_file:15228 inactive_file:43413 isolated_file:0 [ 1165.557818][T25433] unevictable:12953 dirty:74 writeback:10 [ 1165.557818][T25433] slab_reclaimable:11567 slab_unreclaimable:110004 [ 1165.557818][T25433] mapped:31205 shmem:1473 pagetables:1076 [ 1165.557818][T25433] sec_pagetables:0 bounce:0 [ 1165.557818][T25433] kernel_misc_reclaimable:0 [ 1165.557818][T25433] free:1283028 free_pcp:14462 free_cma:0 [ 1165.948460][T25433] Node 0 active_anon:47468kB inactive_anon:248kB active_file:60912kB inactive_file:173452kB unevictable:50276kB isolated(anon):0kB isolated(file):0kB mapped:120660kB dirty:400kB writeback:40kB shmem:15796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12592kB pagetables:4200kB sec_pagetables:0kB all_unreclaimable? no [ 1166.098404][T25433] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1166.258693][T25433] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1166.423027][T25433] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1167.726978][T25433] Node 0 DMA32 free:1219544kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35840kB inactive_anon:248kB active_file:60912kB inactive_file:172632kB unevictable:50276kB writepending:436kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:41964kB local_pcp:41964kB free_cma:0kB [ 1168.505727][T25479] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5549'. [ 1168.539848][T25479] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5549'. [ 1168.549308][T25479] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5549'. [ 1168.559313][T25479] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5549'. [ 1168.608432][T25433] lowmem_reserve[]: 0 0 0 0 0 [ 1168.613337][T25433] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1168.768278][T25433] lowmem_reserve[]: 0 0 0 0 0 [ 1168.773049][T25433] Node 1 Normal free:3897964kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16092kB local_pcp:16092kB free_cma:0kB [ 1169.003815][T25433] lowmem_reserve[]: 0 0 0 0 0 [ 1169.058603][T25433] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1169.100931][T25433] Node 0 DMA32: 2721*4kB (UME) 1849*8kB (UME) 2000*16kB (UME) 887*32kB (UME) 314*64kB (UME) 176*128kB (UME) 72*256kB (UM) 27*512kB (UME) 17*1024kB (UME) 11*2048kB (UM) 259*4096kB (UM) = 1261740kB [ 1169.213113][T25433] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1169.283102][T25433] Node 1 Normal: 189*4kB (UME) 55*8kB (UME) 52*16kB (UME) 198*32kB (UME) 59*64kB (UE) 10*128kB (UME) 2*256kB (UE) 4*512kB (UME) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3897964kB [ 1169.392231][T25433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1169.432760][T25433] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1169.482769][T25433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1169.551662][T25433] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1169.605784][T25433] 72302 total pagecache pages [ 1169.640001][T25433] 8 pages in swap cache [ 1169.661803][T25433] Free swap = 124576kB [ 1169.681965][T25433] Total swap = 124996kB [ 1169.730052][T25433] 2097051 pages RAM [ 1169.755377][T25498] ftl_cs: FTL header not found. [ 1169.768772][T25433] 0 pages HighMem/MovableOnly [ 1169.773498][T25433] 416955 pages reserved [ 1169.777666][T25433] 0 pages cma reserved [ 1169.989012][T25498] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 1170.523623][T25513] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 1172.757354][T25526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.764855][T25526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.268812][T25529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.276095][T25529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1173.283704][T25529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.290941][T25529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.518767][T25536] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 1175.926787][T25544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5564'. [ 1176.165207][T25549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5563'. [ 1177.027773][T25576] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5571'. [ 1177.202072][T25560] warn_alloc: 1 callbacks suppressed [ 1177.202088][T25560] syz.1.5563: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1177.267139][T25581] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5571'. [ 1177.624583][T25560] CPU: 0 PID: 25560 Comm: syz.1.5563 Not tainted syzkaller #0 [ 1177.632104][T25560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1177.642174][T25560] Call Trace: [ 1177.645461][T25560] [ 1177.648404][T25560] dump_stack_lvl+0x18c/0x250 [ 1177.653119][T25560] ? show_regs_print_info+0x20/0x20 [ 1177.658341][T25560] ? load_image+0x420/0x420 [ 1177.662865][T25560] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1177.669295][T25560] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1177.675825][T25560] warn_alloc+0x246/0x340 [ 1177.680189][T25560] ? zone_watermark_ok_safe+0x230/0x230 [ 1177.685760][T25560] ? _raw_spin_unlock+0x28/0x40 [ 1177.690663][T25560] ? __kasan_kmalloc+0x8f/0xa0 [ 1177.695464][T25560] __vmalloc_node_range+0x661/0x1320 [ 1177.700810][T25560] ? __asan_memset+0x22/0x40 [ 1177.705451][T25560] ? free_vm_area+0x50/0x50 [ 1177.709979][T25560] ? kvmalloc_node+0x70/0x180 [ 1177.714672][T25560] ? rcu_is_watching+0x15/0xb0 [ 1177.719482][T25560] ? kvmalloc_node+0x70/0x180 [ 1177.724178][T25560] ? trace_kmalloc+0x1f/0xa0 [ 1177.728794][T25560] kvmalloc_node+0x13f/0x180 [ 1177.733411][T25560] ? hash_ip_create+0x771/0x14a0 [ 1177.738362][T25560] hash_ip_create+0x771/0x14a0 [ 1177.743163][T25560] ? __lock_acquire+0x7d80/0x7d80 [ 1177.748230][T25560] ? bitmap_port_cancel_gc+0xa0/0xa0 [ 1177.753549][T25560] ? __nla_parse+0x40/0x50 [ 1177.757980][T25560] ? bitmap_port_cancel_gc+0xa0/0xa0 [ 1177.763293][T25560] ip_set_create+0xad1/0x1960 [ 1177.767990][T25560] ? ip_set_create+0x4fe/0x1960 [ 1177.772875][T25560] ? ip_set_protocol+0x5b0/0x5b0 [ 1177.777851][T25560] nfnetlink_rcv_msg+0xcaf/0x1290 [ 1177.782887][T25560] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1177.788988][T25560] ? nfnetlink_rcv_msg+0x228/0x1290 [ 1177.794229][T25560] ? nfnetlink_unbind+0x160/0x160 [ 1177.799302][T25560] ? __dev_queue_xmit+0x198c/0x3630 [ 1177.804525][T25560] ? __netlink_deliver_tap+0x579/0x7f0 [ 1177.809994][T25560] ? netlink_deliver_tap+0x19c/0x1b0 [ 1177.815284][T25560] ? netlink_unicast+0x77b/0x930 [ 1177.820242][T25560] ? netlink_sendmsg+0x8d0/0xbf0 [ 1177.825194][T25560] ? ____sys_sendmsg+0x61b/0x980 [ 1177.830144][T25560] ? ___sys_sendmsg+0x2a6/0x360 [ 1177.835029][T25560] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 1177.840080][T25560] ? do_syscall_64+0x55/0xb0 [ 1177.844696][T25560] netlink_rcv_skb+0x235/0x4c0 [ 1177.849488][T25560] ? nfnetlink_unbind+0x160/0x160 [ 1177.854524][T25560] ? netlink_ack+0x1160/0x1160 [ 1177.859309][T25560] ? apparmor_capable+0x137/0x1a0 [ 1177.864341][T25560] ? bpf_lsm_capable+0x9/0x10 [ 1177.869033][T25560] ? security_capable+0x89/0xb0 [ 1177.873905][T25560] nfnetlink_rcv+0x2c9/0x2490 [ 1177.878618][T25560] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1177.884001][T25560] ? lockdep_hardirqs_on+0x98/0x150 [ 1177.889216][T25560] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1177.894599][T25560] ? _local_bh_enable+0xa0/0xa0 [ 1177.899465][T25560] ? __dev_queue_xmit+0x275/0x3630 [ 1177.904589][T25560] ? __dev_queue_xmit+0x1bc2/0x3630 [ 1177.909804][T25560] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1177.915369][T25560] ? __dev_queue_xmit+0x275/0x3630 [ 1177.920512][T25560] ? ref_tracker_free+0x686/0x830 [ 1177.925565][T25560] ? refcount_inc+0x70/0x70 [ 1177.930077][T25560] ? __asan_memcpy+0x40/0x70 [ 1177.934678][T25560] ? __skb_clone+0x5c/0x6c0 [ 1177.939210][T25560] ? __skb_clone+0x446/0x6c0 [ 1177.943818][T25560] ? netlink_deliver_tap+0x2e/0x1b0 [ 1177.949028][T25560] ? __lock_acquire+0x7d80/0x7d80 [ 1177.954074][T25560] ? netlink_deliver_tap+0x2e/0x1b0 [ 1177.959292][T25560] netlink_unicast+0x7b1/0x930 [ 1177.964084][T25560] netlink_sendmsg+0x8d0/0xbf0 [ 1177.968869][T25560] ? netlink_getsockopt+0x590/0x590 [ 1177.974081][T25560] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1177.979661][T25560] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1177.985013][T25560] ? security_socket_sendmsg+0x80/0xa0 [ 1177.990505][T25560] ? netlink_getsockopt+0x590/0x590 [ 1177.995723][T25560] ____sys_sendmsg+0x61b/0x980 [ 1178.000504][T25560] ? __asan_memset+0x22/0x40 [ 1178.005116][T25560] ? __sys_sendmsg_sock+0x30/0x30 [ 1178.010181][T25560] ? __import_iovec+0x5f2/0x850 [ 1178.015054][T25560] ? import_iovec+0x73/0xa0 [ 1178.019594][T25560] ___sys_sendmsg+0x2a6/0x360 [ 1178.024290][T25560] ? __sys_sendmsg+0x2b0/0x2b0 [ 1178.029236][T25560] __se_sys_sendmsg+0x1d0/0x2c0 [ 1178.034122][T25560] ? __x64_sys_sendmsg+0x80/0x80 [ 1178.039111][T25560] ? lockdep_hardirqs_on+0x98/0x150 [ 1178.044349][T25560] do_syscall_64+0x55/0xb0 [ 1178.048779][T25560] ? clear_bhb_loop+0x40/0x90 [ 1178.053479][T25560] ? clear_bhb_loop+0x40/0x90 [ 1178.058191][T25560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1178.064118][T25560] RIP: 0033:0x7f5a3f99e019 [ 1178.068557][T25560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.088193][T25560] RSP: 002b:00007f5a4090e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1178.096629][T25560] RAX: ffffffffffffffda RBX: 00007f5a3fc26180 RCX: 00007f5a3f99e019 [ 1178.104607][T25560] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1178.112609][T25560] RBP: 00007f5a3fa3500c R08: 0000000000000000 R09: 0000000000000000 [ 1178.120595][T25560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1178.128579][T25560] R13: 00007f5a3fc26218 R14: 00007f5a3fc26180 R15: 00007fff50a32888 [ 1178.136581][T25560] [ 1178.227177][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.536989][T25560] Mem-Info: [ 1178.545599][T25560] active_anon:8689 inactive_anon:62 isolated_anon:0 [ 1178.545599][T25560] active_file:15228 inactive_file:43417 isolated_file:0 [ 1178.545599][T25560] unevictable:12953 dirty:149 writeback:0 [ 1178.545599][T25560] slab_reclaimable:11530 slab_unreclaimable:109515 [ 1178.545599][T25560] mapped:29535 shmem:1475 pagetables:983 [ 1178.545599][T25560] sec_pagetables:0 bounce:0 [ 1178.545599][T25560] kernel_misc_reclaimable:0 [ 1178.545599][T25560] free:1285279 free_pcp:12562 free_cma:0 [ 1178.658053][T25597] syzkaller0: entered promiscuous mode [ 1178.698585][T25597] syzkaller0: entered allmulticast mode [ 1178.794103][T25560] Node 0 active_anon:34756kB inactive_anon:248kB active_file:60912kB inactive_file:173468kB unevictable:50276kB isolated(anon):0kB isolated(file):0kB mapped:118192kB dirty:596kB writeback:0kB shmem:4364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12528kB pagetables:3984kB sec_pagetables:0kB all_unreclaimable? no [ 1178.972463][T25560] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1179.175328][T25560] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1182.504876][T25560] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1185.541699][T25560] Node 0 DMA32 free:1227600kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35224kB inactive_anon:248kB active_file:60912kB inactive_file:172656kB unevictable:50276kB writepending:528kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:30040kB local_pcp:30040kB free_cma:0kB [ 1185.789088][T25629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5580'. [ 1188.828583][T25560] lowmem_reserve[]: 0 0 0 0 0 [ 1189.638219][T25560] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1190.125708][T24736] Bluetooth: hci1: command 0x0406 tx timeout [ 1196.349186][T25649] syzkaller0: entered promiscuous mode [ 1196.354892][T25649] syzkaller0: entered allmulticast mode [ 1196.528285][ T5814] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1196.536561][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1197.750601][T25560] lowmem_reserve[]: 0 0 0 0 0 [ 1197.755587][T25560] Node 1 Normal free:3897964kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16092kB local_pcp:16092kB free_cma:0kB [ 1204.349241][T25560] lowmem_reserve[]: 0 0 0 0 0 [ 1204.354015][T25560] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1209.618593][T25670] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid [ 1210.540265][T24736] Bluetooth: hci2: command 0x0406 tx timeout [ 1210.698214][T25560] Node 0 DMA32: 1564*4kB (UME) 1542*8kB (ME) 1060*16kB (UME) 534*32kB (UME) 241*64kB (ME) 116*128kB (UME) 27*256kB (UM) 7*512kB (ME) 8*1024kB (UME) 5*2048kB (UM) 254*4096kB (M) = 1152224kB [ 1210.717219][T25560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1210.729049][T25560] Node 1 Normal: 189*4kB (UME) 55*8kB (UME) 52*16kB (UME) 198*32kB (UME) 59*64kB (UE) 10*128kB (UME) 2*256kB (UE) 4*512kB (UME) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3897964kB [ 1210.747348][T25560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1210.757158][T25560] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1210.948521][T25670] fuse: Bad value for 'user_id' [ 1211.839930][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1211.969718][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1212.679143][T25675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1213.835838][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1214.404216][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1214.523717][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1216.039066][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1216.077415][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1216.368908][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1216.898329][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1217.158858][ T5780] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1217.398914][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1217.678397][ T5780] Bluetooth: hci4: command tx timeout [ 1220.116534][T19754] Bluetooth: hci4: command tx timeout [ 1220.478260][T24736] Bluetooth: hci5: command tx timeout [ 1222.358450][T24736] Bluetooth: hci4: command tx timeout [ 1222.658471][T24736] Bluetooth: hci5: command tx timeout [ 1224.448261][T19754] Bluetooth: hci4: command tx timeout [ 1224.759383][T19754] Bluetooth: hci5: command tx timeout [ 1226.209205][T25705] binder: BINDER_SET_CONTEXT_MGR already set [ 1226.215835][T25705] binder: 25704:25705 ioctl 4018620d 200000004a80 returned -16 [ 1226.436801][T24736] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1226.463985][T24736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1226.659039][T24736] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1226.788537][T24736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1226.808621][T24736] Bluetooth: hci5: command tx timeout [ 1226.828275][T24736] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1226.841587][T24736] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1228.265049][T25672] chnl_net:caif_netlink_parms(): no params data found [ 1229.108225][T25560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1229.117841][T25560] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1229.127402][T25560] 72326 total pagecache pages [ 1229.618348][T24736] Bluetooth: hci6: command tx timeout [ 1231.938406][T24736] Bluetooth: hci6: command tx timeout [ 1234.048157][T24736] Bluetooth: hci6: command tx timeout [ 1236.088262][T24736] Bluetooth: hci6: command tx timeout [ 1236.926767][T25560] 8 pages in swap cache [ 1236.931332][T25560] Free swap = 124576kB [ 1236.935722][T25560] Total swap = 124996kB [ 1236.940140][T25560] 2097051 pages RAM [ 1236.944369][T25560] 0 pages HighMem/MovableOnly [ 1236.949378][T25560] 416955 pages reserved [ 1236.953852][T25560] 0 pages cma reserved [ 1236.975844][T25560] syz.1.5563: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1236.995842][T25560] CPU: 0 PID: 25560 Comm: syz.1.5563 Not tainted syzkaller #0 [ 1237.003332][T25560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1237.013748][T25560] Call Trace: [ 1237.017045][T25560] [ 1237.020001][T25560] dump_stack_lvl+0x18c/0x250 [ 1237.024699][T25560] ? show_regs_print_info+0x20/0x20 [ 1237.029911][T25560] ? load_image+0x420/0x420 [ 1237.034441][T25560] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1237.040870][T25560] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1237.047392][T25560] warn_alloc+0x246/0x340 [ 1237.051762][T25560] ? zone_watermark_ok_safe+0x230/0x230 [ 1237.057331][T25560] ? _raw_spin_unlock+0x28/0x40 [ 1237.062204][T25560] ? __kmem_cache_free+0xba/0x1f0 [ 1237.067341][T25560] __vmalloc_node_range+0x661/0x1320 [ 1237.072645][T25560] ? __asan_memset+0x22/0x40 [ 1237.077267][T25560] ? free_vm_area+0x50/0x50 [ 1237.081792][T25560] ? kvmalloc_node+0x70/0x180 [ 1237.086481][T25560] ? rcu_is_watching+0x15/0xb0 [ 1237.091423][T25560] ? kvmalloc_node+0x70/0x180 [ 1237.096112][T25560] ? trace_kmalloc+0x1f/0xa0 [ 1237.100749][T25560] kvmalloc_node+0x13f/0x180 [ 1237.105443][T25560] ? hash_ip_create+0x771/0x14a0 [ 1237.110826][T25560] hash_ip_create+0x771/0x14a0 [ 1237.115632][T25560] ? __lock_acquire+0x7d80/0x7d80 [ 1237.120677][T25560] ? bitmap_port_cancel_gc+0xa0/0xa0 [ 1237.125981][T25560] ? __nla_parse+0x40/0x50 [ 1237.130434][T25560] ? bitmap_port_cancel_gc+0xa0/0xa0 [ 1237.135737][T25560] ip_set_create+0xad1/0x1960 [ 1237.140433][T25560] ? ip_set_create+0x4fe/0x1960 [ 1237.145307][T25560] ? ip_set_protocol+0x5b0/0x5b0 [ 1237.150284][T25560] nfnetlink_rcv_msg+0xcaf/0x1290 [ 1237.155326][T25560] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1237.161406][T25560] ? nfnetlink_rcv_msg+0x228/0x1290 [ 1237.166626][T25560] ? nfnetlink_unbind+0x160/0x160 [ 1237.171681][T25560] ? __dev_queue_xmit+0x198c/0x3630 [ 1237.176913][T25560] ? __netlink_deliver_tap+0x579/0x7f0 [ 1237.182383][T25560] ? netlink_deliver_tap+0x19c/0x1b0 [ 1237.187692][T25560] ? netlink_unicast+0x77b/0x930 [ 1237.192683][T25560] ? netlink_sendmsg+0x8d0/0xbf0 [ 1237.197659][T25560] ? ____sys_sendmsg+0x61b/0x980 [ 1237.202644][T25560] ? ___sys_sendmsg+0x2a6/0x360 [ 1237.207510][T25560] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 1237.212719][T25560] ? do_syscall_64+0x55/0xb0 [ 1237.217427][T25560] netlink_rcv_skb+0x235/0x4c0 [ 1237.222236][T25560] ? nfnetlink_unbind+0x160/0x160 [ 1237.227269][T25560] ? netlink_ack+0x1160/0x1160 [ 1237.232057][T25560] ? apparmor_capable+0x137/0x1a0 [ 1237.237200][T25560] ? bpf_lsm_capable+0x9/0x10 [ 1237.241918][T25560] ? security_capable+0x89/0xb0 [ 1237.246799][T25560] nfnetlink_rcv+0x2c9/0x2490 [ 1237.251491][T25560] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1237.256902][T25560] ? lockdep_hardirqs_on+0x98/0x150 [ 1237.262133][T25560] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1237.267527][T25560] ? _local_bh_enable+0xa0/0xa0 [ 1237.272417][T25560] ? __dev_queue_xmit+0x275/0x3630 [ 1237.277578][T25560] ? __dev_queue_xmit+0x1bc2/0x3630 [ 1237.283170][T25560] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1237.288851][T25560] ? __dev_queue_xmit+0x275/0x3630 [ 1237.294001][T25560] ? ref_tracker_free+0x686/0x830 [ 1237.299043][T25560] ? refcount_inc+0x70/0x70 [ 1237.303555][T25560] ? __asan_memcpy+0x40/0x70 [ 1237.308176][T25560] ? __skb_clone+0x5c/0x6c0 [ 1237.312698][T25560] ? __skb_clone+0x446/0x6c0 [ 1237.317317][T25560] ? netlink_deliver_tap+0x2e/0x1b0 [ 1237.322531][T25560] ? __lock_acquire+0x7d80/0x7d80 [ 1237.327587][T25560] ? netlink_deliver_tap+0x2e/0x1b0 [ 1237.332797][T25560] netlink_unicast+0x7b1/0x930 [ 1237.337608][T25560] netlink_sendmsg+0x8d0/0xbf0 [ 1237.342391][T25560] ? netlink_getsockopt+0x590/0x590 [ 1237.347605][T25560] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1237.353164][T25560] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1237.358483][T25560] ? security_socket_sendmsg+0x80/0xa0 [ 1237.363977][T25560] ? netlink_getsockopt+0x590/0x590 [ 1237.369296][T25560] ____sys_sendmsg+0x61b/0x980 [ 1237.374086][T25560] ? __asan_memset+0x22/0x40 [ 1237.378700][T25560] ? __sys_sendmsg_sock+0x30/0x30 [ 1237.383755][T25560] ? __import_iovec+0x5f2/0x850 [ 1237.388642][T25560] ? import_iovec+0x73/0xa0 [ 1237.393180][T25560] ___sys_sendmsg+0x2a6/0x360 [ 1237.397877][T25560] ? __sys_sendmsg+0x2b0/0x2b0 [ 1237.402689][T25560] __se_sys_sendmsg+0x1d0/0x2c0 [ 1237.407678][T25560] ? __x64_sys_sendmsg+0x80/0x80 [ 1237.412669][T25560] ? lockdep_hardirqs_on+0x98/0x150 [ 1237.417893][T25560] do_syscall_64+0x55/0xb0 [ 1237.422329][T25560] ? clear_bhb_loop+0x40/0x90 [ 1237.427021][T25560] ? clear_bhb_loop+0x40/0x90 [ 1237.431716][T25560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1237.437623][T25560] RIP: 0033:0x7f5a3f99e019 [ 1237.442053][T25560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.461717][T25560] RSP: 002b:00007f5a4090e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1237.470175][T25560] RAX: ffffffffffffffda RBX: 00007f5a3fc26180 RCX: 00007f5a3f99e019 [ 1237.478154][T25560] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1237.486133][T25560] RBP: 00007f5a3fa3500c R08: 0000000000000000 R09: 0000000000000000 [ 1237.494113][T25560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1237.502109][T25560] R13: 00007f5a3fc26218 R14: 00007f5a3fc26180 R15: 00007fff50a32888 [ 1237.510103][T25560] [ 1241.390956][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.237855][T25161] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.690694][T25161] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.702251][T25161] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.930756][T19754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1267.918190][T19754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1268.500059][T19754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1270.940258][T25675] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1271.090005][T19754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1271.234129][T19754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1271.388929][T19754] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1271.396192][T19754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1271.499680][T19754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1272.226047][T25161] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.709011][T25675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1273.029937][T19754] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1275.353938][T24736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1275.428409][T24736] Bluetooth: hci0: command tx timeout [ 1277.452601][T19754] Bluetooth: hci0: command tx timeout [ 1280.935372][ T5780] Bluetooth: hci0: command tx timeout [ 1280.945951][ T5780] Bluetooth: hci4: command tx timeout [ 1283.198188][T24736] Bluetooth: hci4: command tx timeout [ 1283.203621][T24736] Bluetooth: hci0: command tx timeout [ 1286.268530][T24736] Bluetooth: hci4: command tx timeout [ 1286.510900][T19754] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1286.991875][T24736] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1288.098309][T24736] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1288.368346][T24736] Bluetooth: hci4: command tx timeout [ 1290.649576][T24736] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1292.068302][T19754] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1293.209566][T24736] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1294.158914][ T5780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1294.465575][T19754] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1296.112831][ T5780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1296.574069][ T5780] Bluetooth: hci5: command tx timeout [ 1296.583035][T25739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.213712][T25675] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1298.798463][ T5780] Bluetooth: hci5: command tx timeout [ 1298.804421][ T5780] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1299.184510][T25675] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1300.597772][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.993744][T24736] Bluetooth: hci5: command tx timeout [ 1303.446499][ T5780] Bluetooth: hci7: command tx timeout [ 1303.453817][ T5780] Bluetooth: hci5: command tx timeout [ 1306.374412][T24736] Bluetooth: hci7: command tx timeout [ 1308.901071][ T5780] Bluetooth: hci7: command tx timeout [ 1311.412094][ T5780] Bluetooth: hci7: command tx timeout [ 1330.018248][ T29] INFO: task syz.1.5563:25549 blocked for more than 144 seconds. [ 1330.026045][ T29] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1330.788140][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1330.796870][ T29] task:syz.1.5563 state:D stack:25096 pid:25549 ppid:24589 flags:0x00004004 [ 1332.189477][ T29] Call Trace: [ 1332.192817][ T29] [ 1332.195785][ T29] __schedule+0x15ae/0x4660 [ 1333.418185][ T29] ? asan.module_dtor+0x20/0x20 [ 1333.423110][ T29] ? __mutex_lock+0x66e/0xc80 [ 1333.427828][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1334.678270][T25560] Mem-Info: [ 1334.681460][T25560] active_anon:8420 inactive_anon:1 isolated_anon:0 [ 1334.681460][T25560] active_file:15172 inactive_file:43466 isolated_file:0 [ 1334.681460][T25560] unevictable:12953 dirty:28 writeback:0 [ 1334.681460][T25560] slab_reclaimable:11522 slab_unreclaimable:112935 [ 1334.681460][T25560] mapped:45612 shmem:1421 pagetables:807 [ 1334.681460][T25560] sec_pagetables:0 bounce:0 [ 1334.681460][T25560] kernel_misc_reclaimable:0 [ 1334.681460][T25560] free:1242727 free_pcp:8537 free_cma:0 [ 1335.398369][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1335.404602][ T29] schedule+0xbd/0x170 [ 1335.837024][ T29] schedule_preempt_disabled+0x13/0x20 [ 1336.622611][ T29] __mutex_lock+0x673/0xc80 [ 1336.627209][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1337.248291][ T29] ? nfnetlink_rcv_msg+0xa5c/0x1290 [ 1337.253762][ T29] ? mutex_lock_nested+0x20/0x20 [ 1338.279773][ T29] ? __nla_parse+0x40/0x50 [ 1338.284310][ T29] ? ip_set_dump+0x1f0/0x1f0 [ 1338.868183][ T29] nfnetlink_rcv_msg+0xa5c/0x1290 [ 1338.873277][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1339.969432][ T29] ? nfnetlink_rcv_msg+0x228/0x1290 [ 1339.974725][ T29] ? nfnetlink_unbind+0x160/0x160