last executing test programs: 18m55.384769659s ago: executing program 1 (id=509): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7070000080000008500000069"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000680)='./file1\x00', &(0x7f00000006c0)='devpts\x00', 0x200468, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r8, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}}}, 0x10, 0x0}, 0x10) 18m53.102176376s ago: executing program 1 (id=518): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r0, 0x0, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f0000000a00)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\x00\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6i\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x5) fallocate(r1, 0x0, 0x400000000000000, 0x7) 18m52.796582189s ago: executing program 1 (id=519): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x2000018, &(0x7f0000000500)=ANY=[], 0xfe, 0x1c7, &(0x7f0000001100)="$eJzs3bFu00AYB/DPKSQpQ9UZMViwMFXAExShIiEiIYEywAQSTC0LLIGpI6/AW6JO3Q4lZxMcB4kAjgn8fks++e873/ksZ8rl5Y23p5+GsTAeFzE4juO4LOIwBnHzIB8/j5b99iEAYFdcphRfUtb3WACA7fD9DwD/n2fPXzy+P5mcPC3LccTFeVEdn03z58NHk5M75cLhstXFbDbdi/rcuzmfNvOrca1qfy/nZTMfxu1bOZ9nD55MVvJRvO5y4gAAAAAAAAAAAAAAAAAAAAAA0KOj8pvW/j6L/OhHea6+2x9oZf+ez3H9ytamAQAAAAAAAAAAAAAAAAAAADvt/bguPnw8fXV29ubdjhcppTSfzyatRtU9+J2rH/wFc28VEWuieuk36bBu091Q094f7LCcF0VE9LwEv/hEDZurM6hufndDLdY8Est3xKjztxAAAAAAAAAAAAAAAAAAABCNn/33PRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6M/y//83LNIod/ATJ6+77v6W5wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC/7WsAAAD//wc2Fgs=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000d40), 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffdeffffe]}, 0x0, 0x8) r4 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) rt_sigtimedwait(&(0x7f0000000180)={[0x6]}, 0x0, 0x0, 0x8) tkill(r4, 0x29) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000040000000200", @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 18m51.128799682s ago: executing program 1 (id=525): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r0, &(0x7f0000000540)='net/ip_tables_targets\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x56, 0x2, 0x0, 0x0, 0x0, 0x4a9e47b3, 0xffffff3e, 0x0, 0x2}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000640)={0x8, 0x8, {r0}, {r5}, 0x3, 0xe}) 18m49.588513753s ago: executing program 1 (id=532): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8890) bpf$BPF_MAP_GET_FD_BY_ID(0x22, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = memfd_create(&(0x7f0000000180)='netdevsim0\x00', 0x2) sync_file_range(r4, 0x9, 0xffffffff, 0x4) 18m44.508279562s ago: executing program 1 (id=541): r0 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffda) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) sigaltstack(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) 18m28.467164864s ago: executing program 32 (id=541): r0 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffda) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) sigaltstack(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) 16m12.788630989s ago: executing program 4 (id=851): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@i_version}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x4e35cf64009edd98, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee163", 0x55, 0x840, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 16m8.878021879s ago: executing program 4 (id=856): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000080)="aedad7e23539be89830c", 0xa}, {&(0x7f00000000c0)="c6bc30b1b3e72b5a7a4796f6", 0xc}, {&(0x7f0000000280)="51cf186ed20c416ee1cf5e4fd82cb80d2d048c2eaeac1ca123", 0x19}], 0x3, &(0x7f0000004bc0)=ANY=[], 0x3198}}], 0x1, 0x4008000) 16m8.595167791s ago: executing program 4 (id=859): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) syz_socket_connect_nvme_tcp() r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r4) 15m57.854401423s ago: executing program 4 (id=878): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) mkdirat(0xffffffffffffff9c, 0x0, 0xa0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="180000005200090100000000000000001c00000004000080a66433e95e511de9649bf4eea1fb935c5d1ef6a56a71740a6e4247ea492fc0b8a3763364f4efc110d3cdba1cb18373f426dc45b40b00000000008011002176b166fafcf3a646eb6344ae4cbecbeed93776c884e25d21b60a4a956a24eb1e1dec49d0e91e0b24936385b79f0c2e0ff0d51ff7090e082f940d3af4d3142c34529f8c6a16585ba96a17f29af46f47135fcb6ac6f182ffdeabb56185"], 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x4000) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0) 15m51.7332351s ago: executing program 4 (id=894): r0 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 15m50.636642469s ago: executing program 4 (id=895): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_open_dev$video(0x0, 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) 15m35.448886775s ago: executing program 33 (id=895): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_open_dev$video(0x0, 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) 1m19.766911376s ago: executing program 0 (id=3097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}}, 0x0) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) fanotify_init(0x200, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) 1m18.486137276s ago: executing program 0 (id=3099): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, &(0x7f0000000040)={0x60, 0xa, 0x6, "dfb7b6eab4b2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m16.507835861s ago: executing program 0 (id=3102): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, &(0x7f0000000b00), 0x0, 0x2) 1m13.740492032s ago: executing program 0 (id=3106): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000440), 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa1, 0x0, &(0x7f00000000c0)=0xfffffffffffffeff) 1m13.674130233s ago: executing program 0 (id=3107): r0 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 1m12.443197843s ago: executing program 0 (id=3119): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd26}, 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) unshare(0x6a040000) 56.292006506s ago: executing program 34 (id=3119): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd26}, 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) unshare(0x6a040000) 19.46664653s ago: executing program 6 (id=3217): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x482, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x258, &(0x7f0000001140)="$eJzs3E9rI3UYB/DHtm7/LLvpQQQF8Yde9DJs6wuQILsgFpS6EfUgzNqpho5JyYRKRNy9efV1LB71JLi+gV68effWi+BlD2KkabpN1oIgG6c2nw8k84RfvuQZZhKeCSRH73/z2d5ule3m/VhYSbEQcS8eRqwfV2NPjbcLo/pKTLoXr179/ZcX3v3gw7eaW1s3t1O61bz92mZK6fqLP37+5bcv/dS/+t53139YjsP1j45+2/z18NnD547+vP1pu0rtKnW6/ZSnO91uP79TFmmnXe1lKb1TFnlVpHanKnpT67tld39/kPLOzrW1/V5RVSnvDNJeMUj9bur3Bin/JG93UpZl6dpa8E9a97e382bdXTAzS8d3vV4zX4yI1b8tt+7X0RQAUK+LPf8fTy3m/9kx/8+D4/l/bfz+nWb+BwAAAAAAAAAAAACA/4OHw2FjOBw2Trent+WIWImI08d198lsOP7zbeKHeysR5dcHrYPWyfZkvbkb7SijiBvRiD9G58PYSX3rza2bN9LIejwo747zdw9ai9P5jWjE+vn5jZN8igffL57ln461yfxmNOKZ8/Obj/KTr38lXnl5Ip9FI37+OLpRxs7ovD7Lf7WR0htvbz2WXx09DwAAAC6DLD1y7vV7lk2vL49z/+L7gceur5fi+aX69hsAAADmSTX4Yi8vy6KnuITF6xFxAdpQTBYrT/qgrMYsWq37kwkAAHjSzob+ujsBAAAAAAAAAAAAAAAAAACA+fVf/OFZ3fsIAAAAAAAAAAAAAAAAAAAAAAAAF8VfAQAA//+gfid7") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000680)=""/249, 0xf9}, {&(0x7f0000000780)=""/182, 0xb6}, {&(0x7f0000000840)=""/162, 0xa2}, {&(0x7f0000000a00)=""/190, 0xbe}, {&(0x7f0000000ac0)=""/175, 0xaf}, {&(0x7f0000000400)}, {&(0x7f0000000940)=""/9, 0x9}], 0x7}, 0x9}, {{&(0x7f0000000c00)=@x25={0x9, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/188, 0xbc}], 0x2}, 0x4}], 0x2, 0x20, &(0x7f0000000e00)={0x77359400}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) sync_file_range(r6, 0x0, 0x0, 0x0) 17.945579611s ago: executing program 6 (id=3220): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x8c7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x321, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, 0x0) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000080)={r8, 0x5}, 0xc) 11.428321511s ago: executing program 5 (id=3230): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) 9.827705344s ago: executing program 5 (id=3235): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="b09aad19b75e0438", 0x8}, {&(0x7f0000000340)="95fcf2b7fcb6c29e1587e58743feaabbfc43244a9cc4b94fc758bd0cd492f55582c22358865ecb432e1c85e2a49a42895f95edae43cbe5372e2b1983d613ef27e117a0cc5b62ceeefe92e65be88181f5da71539ed302b0c25b0bace798c33ad6", 0x60}, {&(0x7f00000001c0)="d861c57a0c9f917641502a7160d174d9a8a3758a4b59c7ea104abad451bb8450cd0a35a851be060791485dc20b", 0x2d}], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa1, 0x0, &(0x7f00000000c0)=0xfffffffffffffeff) 9.397453147s ago: executing program 5 (id=3240): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 8.621340343s ago: executing program 2 (id=3241): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x482, &(0x7f0000000800)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d300000000000000008303030303030303030303034303030303030303030302c73686f72746e616d653d65722c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6d697865642c696f630100727365743d757466f69e75731725e72216799ebd57484a7e1948a8aa65667265652c757466383d312c6e66733d6e6f7374616c655f726f2c73686f72682e616d653d6d697865642c757466383d306d653d77696e6e742c007aea3388304ddedb3208ceb9b2c23924743277bd2c0d0019d44efede967f3df81cce421f7aafa8aa7c706311ab7a0ce39abf7858b6ba6ef5206da03692650000000000000001d0559b166f8c433d34c03a60999dea3bab649a260b216354ecc726cd1f6519546e8ef6ae17a0da1b9313ef4b5633c5f1bf756a7816d304d61c4d15539bae9f6e8dc91d178c85744c5cc226ca0568f9f6da8997bc10100b836488e47d0b7e6ccffaf123b1000000d6d876f2e37dde582f497ab6d4d11f7211b4aaf087f529ffc0000ee312a30cc69ae25ac6a986a76824020b12971980e00a27786eef1c2537fdcb1de9c4bed7175c6704f0c39d14da07a8edf97525a0c8138686d6e2b8d90102027245729e944719894ebe079bf1ab2b7002c54c5c714bff93d9475ff23f653874321e4ecc1ebd2baa44aea86a1617e53fcc5683e5c7b14e5158239aebf96ef3b73359414993575bf4e880ac24d7fee38c5a22f6fae6a22a2185cd5a25b7bc11062d649340f8220bfa18cae94fd73afbb38b2fc20a263e091c5eb14ce630628aaf65b7ccab9b4d3b2c220153cd28c86e6c8e58903c66698fd27f4f22a9fd1dd67d70de664e3b985f20ada8c0f531865a9093fe6d3cd52c721dcfe391a812583c4e745b824429ce98f2a7928d22c9b5302719058f593fddbbb60ca7"], 0x1, 0x258, &(0x7f0000001140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000680)=""/249, 0xf9}, {&(0x7f0000000780)=""/182, 0xb6}, {&(0x7f0000000840)=""/162, 0xa2}, {&(0x7f0000000a00)=""/190, 0xbe}, {&(0x7f0000000ac0)=""/175, 0xaf}, {&(0x7f0000000400)}, {&(0x7f0000000940)=""/9, 0x9}], 0x7}, 0x9}, {{&(0x7f0000000c00)=@x25={0x9, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/188, 0xbc}], 0x2}, 0x4}], 0x2, 0x20, &(0x7f0000000e00)={0x77359400}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) sync_file_range(r5, 0x0, 0x0, 0x0) 8.620711913s ago: executing program 6 (id=3242): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, 0x0, 0x0, 0x3c, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.539512834s ago: executing program 5 (id=3245): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f000000a740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0xf}}], 0x1, 0x0) 8.270230186s ago: executing program 3 (id=3246): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) 7.324795653s ago: executing program 6 (id=3247): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 6.628988708s ago: executing program 5 (id=3248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x8, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 6.628702738s ago: executing program 3 (id=3249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 6.46091198s ago: executing program 7 (id=3250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="b09aad19b75e0438", 0x8}, {&(0x7f0000000340)="95fcf2b7fcb6c29e1587e58743feaabbfc43244a9cc4b94fc758bd0cd492f55582c22358865ecb432e1c85e2a49a42895f95edae43cbe5372e2b1983d613ef27e117a0cc5b62ceeefe92e65be88181f5da71539ed302b0c25b0bace798c33ad6", 0x60}, {&(0x7f00000001c0)="d861c57a0c9f917641502a7160d174d9a8a3758a4b59c7ea104abad451bb8450cd0a35a851be060791485dc20b", 0x2d}], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa1, 0x0, &(0x7f00000000c0)=0xfffffffffffffeff) 6.172294222s ago: executing program 2 (id=3251): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ip6_tables_targets\x00') r1 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) connect$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) 5.241838s ago: executing program 6 (id=3252): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000100)='v7\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x400}, 0x80000000, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 5.18864421s ago: executing program 5 (id=3253): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x8c7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x321, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, 0x0) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000080)={r8, 0x5}, 0xc) 4.770086153s ago: executing program 3 (id=3254): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 3.300805994s ago: executing program 7 (id=3255): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000180)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 2.988802966s ago: executing program 6 (id=3256): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "bc06bbf4"}]}}, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 2.947741727s ago: executing program 2 (id=3257): syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4, 0xa}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 2.834494958s ago: executing program 7 (id=3258): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) 2.804789568s ago: executing program 3 (id=3259): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f000000a740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0xf}}], 0x1, 0x0) 2.692429199s ago: executing program 2 (id=3260): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x8, 0x0, 0x81, 0x2}, 0x0, 0x7, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xffeffffe}}, 0x1, 0x0}}) 2.45479332s ago: executing program 3 (id=3261): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x482, &(0x7f0000000800)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d300000000000000008303030303030303030303034303030303030303030302c73686f72746e616d653d65722c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6d697865642c696f630100727365743d757466f69e75731725e72216799ebd57484a7e1948a8aa65667265652c757466383d312c6e66733d6e6f7374616c655f726f2c73686f72682e616d653d6d697865642c757466383d306d653d77696e6e742c007aea3388304ddedb3208ceb9b2c23924743277bd2c0d0019d44efede967f3df81cce421f7aafa8aa7c706311ab7a0ce39abf7858b6ba6ef5206da03692650000000000000001d0559b166f8c433d34c03a60999dea3bab649a260b216354ecc726cd1f6519546e8ef6ae17a0da1b9313ef4b5633c5f1bf756a7816d304d61c4d15539bae9f6e8dc91d178c85744c5cc226ca0568f9f6da8997bc10100b836488e47d0b7e6ccffaf123b1000000d6d876f2e37dde582f497ab6d4d11f7211b4aaf087f529ffc0000ee312a30cc69ae25ac6a986a76824020b12971980e00a27786eef1c2537fdcb1de9c4bed7175c6704f0c39d14da07a8edf97525a0c8138686d6e2b8d90102027245729e944719894ebe079bf1ab2b7002c54c5c714bff93d9475ff23f653874321e4ecc1ebd2baa44aea86a1617e53fcc5683e5c7b14e5158239aebf96ef3b73359414993575bf4e880ac24d7fee38c5a22f6fae6a22a2185cd5a25b7bc11062d649340f8220bfa18cae94fd73afbb38b2fc20a263e091c5eb14ce630628aaf65b7ccab9b4d3b2c220153cd28c86e6c8e58903c66698fd27f4f22a9fd1dd67d70de664e3b985f20ada8c0f531865a9093fe6d3cd52c721dcfe391a812583c4e745b824429ce98f2a7928d22c9b5302719058f593fddbbb60ca7"], 0x1, 0x258, &(0x7f0000001140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000680)=""/249, 0xf9}, {&(0x7f0000000780)=""/182, 0xb6}, {&(0x7f0000000840)=""/162, 0xa2}, {&(0x7f0000000a00)=""/190, 0xbe}, {&(0x7f0000000ac0)=""/175, 0xaf}, {&(0x7f0000000400)}, {&(0x7f0000000940)=""/9, 0x9}], 0x7}, 0x9}, {{&(0x7f0000000c00)=@x25={0x9, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/188, 0xbc}], 0x2}, 0x4}], 0x2, 0x20, &(0x7f0000000e00)={0x77359400}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) sync_file_range(r5, 0x0, 0x0, 0x0) 1.596473477s ago: executing program 7 (id=3262): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 1.504695908s ago: executing program 2 (id=3263): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, 0x0, 0x0, 0x3c, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.339969169s ago: executing program 7 (id=3264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 248.158408ms ago: executing program 2 (id=3265): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x7, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x5, 0x7, 0x3ff, 0x10110, r4, 0x80000000, '\x00', 0x0, r0, 0x5, 0x0, 0x4, 0x0, @void, @value, @value=r0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x12806580, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000003c0)="ade4eaff148bba02d1793ab4b87ffff98ea755b9d710a9b4149ac816bbc73e8fed982e076d0f83f43711e13578e25330db22907b75e6c0fcebaa2312e8f006cbe878dc2ebec18540dab3ad5eeb3f2e79b915d87764e380278c5a34b5f7117d79c13ee38e56b9711428de7823010f6282487b970f9842ee2b26651bcbcdd1114910ef5fd18f62f9") r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0xc0000484) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f0000006340)="664e454f25b4b219e9c1b5903559d95ef81c25f3fc6f0fbdc8a669d62883b3d1beef50fa1b4cf8f4ac3f0df0aab5e8cb86a5d85029d5b26000db0ee9efa9e4690166ddc3268331b5ce79a0b079e5232775fd13d5403b3f6d072c4afdee2bcb77a4809d20f3bc7d143d20f30ac058a56861915a600f07caf06a33cbfb1d1dafa4e438b60491c43293de9418e8ab85c7b4d9355c6dd8966576d4c7556a62ddaeb30e0c343384c8b7c03e7e78e14f0f099ffe2c498ea8061239efec448f2ffb6de21a71d1687941519efae5274284150931038d76640507d08686f5b4c818f00508fd8258719b23176324e0c4daa3f742f2a26bbbe882b97c9cef7a10419d97c4bc97a4da32af0015253d32593a7690e43c46cdde3392974f9064752d2b77e776fd56ee7e11b1d3801d3bb6467ab2ac36d111f13b9d4ca48f6c67c38fccc7228511421a30447488d7c7f6a10388ac6824b89a13927a8309db46f57faa44a5dfde572d682a701c9fe9dd9db3983055fd0e2abe6993a4bb9c0c8ec27ace9186223d9d204c7f39e63ccc71fa9d07c1079a62ff57a7523d1bd6ab71fd2c796af49d945c2a87821ea345dfb95654e16874ba4ad0f2e6a7dc264723ee1bc82862f26219ee7ab09e00ca7764fb814e9fc88901b641d943bbd907c87ad99eabf2d2be262411936d1a492a614931fec75cce698f6947dcfa853ac2b8feb901f6b07dc3cd6f7b700a02f5a77ff447e4ae6e21b12ec154215091151e92d4ce3031f47ad785d6570530a45575826a46925272045c3b4a100e406cd3daa0a8af37190c979221a1ae1dd93e2771b5f83800be467c1c4a28c521f43d2f012fbf6f22f1a3f3bfcfc78b07e062b72e3522c508ab0fe09e7f3ed673535c27e02c5db2840689c0b409cecc1a0e63aff1b490b8cecf6a78466feec443f99ca90e999dcc4c0987f66aec046365356a79c14c8c7aeb9dddf25018c50a593e5cc259e2b3e6e5a052d0944032ee5090069b98a45b610e0fd3e9ba98ca7a80d411ae089467ce2e4c4abde639a69b798f474d9e395c586eb7939e5886dafd46efdbf3df8fd81ef85331beac17427753102e0a0279793d3879d7ff8dcd6c6da7b999aafcbab9e433293e9d1c1f11dbc6f2b90a567030ceb35774798fe1b7d9e47b95a95c4609f03b461b8bf46143479366b107f7f103cd90fbf4b08ed414431ad8c2c0e0ee51e7b31100e313e006bf69fb26ec301655fda27c2c1a84a40b0e59e514f44e7ec6863b35d786c7157c95c5f2640dfb60499868ca813c6ceadae0bd55abb0548020f77c5d9c329acc8131de733d1132e660936e5091335e8fa49f76f7b0ed839d9382f996e282d22f6ff27284ae796243c0509a7dd1a7cda26bf058e434c237a4321edcdda0590cf835ebc7000ef7ead405626c350e51574938fe42cccd632449ab5a85e822883cece20584c80d7f38be492e72dabca679f6e8355efbec55522567940661dbca61a6bbe61e46b9632161b53b32d3f2c79fd360ea1e82ccc0d2d14ace7aa629339fb4f34a47ffc4bf0ba67707b89715841b5da9204218a073bff6ab04c34079b87dfe50844e1cce6a40d53536962133b212d5342710fa11457e04e5852f96f604a05afb103ffe3b8977b8c459d9ae3a33c112258bd531c63eada31081b17461145d0d98f8bafb7c1d664cb921b6c2dab87cc392a2251ca23e40f155828512445103261bab7fd9aede23a5629c2d097681021005e345ceac8ea5bff54457243e85b09b6e85ffbc942676c75d00ee4756e7c9fbbc78e463a91c9187a0526bf32c783d5bac9e33ac468eb0b0c496f862db73a101f63c43e18b6761eca52fcec4aa50e6ace538c5649685f9ad8776a3d94a96632c213bbb2ff4c1f7892fe3887c90d901456eda7a66cf6afa2e2ab8860e4481b97ab1393a23f2a44fe3c46f5be956c19c5dd5fc307023a2ed3933e37e9b3f0685ea6cf73ee7c6ca24f9b96960d4bf50d124b1fb19ca0568b5afd398dda31086e65734e08cd4a797cf80a9009ff5392f95055ab8f18738bd30b171a07ca625f0e97251b2d17cbc5d0bb8346c32b6a6ee988283fb9d4b09d25596eff8feb22cc8f50e35749194cdfd5dea2c9ed2058f3e967fa5cbd6aadca7efef585e0ed860aa6f8b7c2bdaaa6de8a697bed95d8a79f1b34a2c9beb2175db03f11b0fa2fc278b08e2fa2395e49ac92b4432bd2cdbe5ada211f469c0f25bedaa213d40ad9f6c77f2519c3e1dfa27cd2a2bcc63534333578e9818e83cc926df96fdeb9c1996cee8223944b0a648caf3b4a588b0a1a897816e9c7f360247a22b63981137491790cfb8849333f81dc675c854cd3a445965a1ac40d18a3ef84ae82bd934ec3d539c5e23320ed07de68bd73a007e4e3f06d7af3ad9a27bdf5193b33e46876197b579558d3e269cd192faf8b4dbb535e1f55ea2ef39f79fcf9fe6fc3241eecb8d6568b8c3cda994f6af9087d73b1b1e8ff5b6cc23f11f7472cd1d45b62143054c0c385150bc0a7bfc9ce9894b00700ad270edbeb80884362757c8d3355fb8749c3842f5b446ec52b78e60b6cd5974a121e64e2ab1248e7afc44c2bd6e8ee160c7a35ce8bda8f539386d8100ada0669464eb241d1261d69bfab1209e95872cbaaaa92bfc534b11fc4ce6e6b767364f568f460f0c43ced8785decd67ba4783b81137c1b388265d8c3188dae031809c7e0fbf467777b9ebd59988ea2bf2350cb70138fefc9cecd7c8cb932ba42725bbdbc69cd2c9da4920c89374d50850665b9045c84889129ec12dc9fd2f5e29702b6e34bed7716b3633b560df535e831e8bf33d021fbe38c5b303586966a0af6ecaa4fa04db53adc74c9c35efb184637aad3f8c19f7b9c2457d1ab481a65edc55f21e3fb863ccd57aa74fb02355a193bbca0edb0f760d63009bb55b2e4b5d38b69cceb2b4226db7737428a9ec060b64cbc5173534dae4439e798200eca4220a79b2cb36556e1f3676373cbe4141471f006fe746dc59694a88e8db146689ac63653618944239adf467fe6fc1ec1c2e9a98246f153b7d117ee3ef26e5cf7b602c0d636685cf929bd4976cf99b6737b592555497480686b5ac818dcda53c05ccdeaefb31eb446e77e61e6b6b956e01150405df7d75337b64fd7e843b3d20141052a8f155aacf305f72da922152341fe597aa93900fadcbd2f9b46973374d36afe3cfe22048d36c3a8245ee56e2dd17f96e32bd8e7a23cabd96ceb4546a9e9d35246b5f813ff994fb575c6d3b1fcdbcea3344dc1b99874dbc90b7d47468efd2e0ef5f0f182e20e9a500f27a88af498e0e7147a35595094fae9a921cb38392f4837f167dae068091ad235585b0bed2c0ff841eba179c09da831af71de7068cd9d5f716010d1e55a834e9d2dc5b4080e3bcf26eec8fdc287184f2533d29e8a7f778f421d2467d8a1e2833b7db8eeb31eb52490a136fd0bb8e1e7653eb00706377429f98be9ae60a5857ebc9fb4d78c735ff15416a95ec8df423ac972e3029f3c9878878fb4871d6244fa1eaf60a0a0a87de57d661029d6c82b885d066d3ba3d2451663428935f4625339cd589f30c217928e4e076f35947dff9176a1ea9fa1e814f1f1a1e841b5cfda506c79757c93fa6edab700b95598882a79a188a27284f2be65a6eb300da70f8b8e2d47d4553bc3e55ff7b424c2a3def227ab405d2f215ea3d7d4bfc9d5a606ced75e72e5293451757fe2c5609c80e3a63f290703a4265319d55863ce9cfffd6a00dc246de1a6c2e6d91c124dc1c94631b45758827798bde2c739f2d9f43fe862908667bd705eeb36c34c949177b587e61b6ad49dc7b9f53e5dc0bd559b54edab484ad909951b1aa9642ff8005773f6392e0d4951fb3f263a9545b5a0ee8163be89bab06f02c4612641fbcd81073eee793338101ebc9856ab3ebbb4ce6c22008675ff2c9f24ae1e2c6b6bacb70a9d60bd1c51aa32f3f01ee47d7d0126247c7bfb61782c5a407fb338544ee9783b796b1eb238af2c477ed5ff9869cd5a66499d805723c49dc6b3824b380fe0eb2be9653f26d5c47a4828a6c1225e19b8b2f86686178591af8b00a0f48702aca66c1252e03ac2a4b88f1308a4bc35dbd96036cf991c05fdb9007ff5f64e22191d6611dbc7767d236afbded4d1dcc90d9430d0639640dc00e3761079a5f6416e4c2a8839d20bb2519ff79fa723272b2774f981d0591c73c5e08bf3c8ed804861361638fd1e5aba29497262b97a1ac540c9e6b2f745d75bd2fe590a7af561830eb262759ab2e4bc8c4efa813bf1685f1f3459a92072b5b0f1ffd1db4d7b3bdff1b2da2504e7ebb3b033a65b234826f6555b17af23de79bb0681bf6750103894275fef04bfb5c5d35b2ff97d172cbfe40270959dbd653c629950ccf0fbba7dfe7af7302f7526dd5e90ff4099f998ae7b9915e08d3c9e0c7e75f43c5fbb350f2ace4f4c2ff8f7fcb8703150731591e628ebee5c3beca24cb338204c8982e25cbcee3171e860483ba5a86f3df23e5b9c395327c4769c6af4bd5278a6bec433c890eed0370ec28b42813a2f05d5b45179b50b43f3315610317e977bd449152605ed8bc4f5dd280f8323776907de0d9d46e416fd3614a3fdfb7f270aef344992962c1201932ce3ac9c30dd4a9717ec422e545d02f14bd82b384b7afdace5b8ff3dfdf097eae0903cdc894eb8b8c61aaa3bf8358d07c7d04d32c5bd454ec10587781ef7acce0ee851ecc30d01c0e5a2e555ee3515e152c3497075435ef35ba359278c660aaf8417f09e4d8056e8229b397631cde71a31b5ea250afeb4ae5fc564045b32a3b3404b59efb6b169e55a4439b21151f3cbc82b596f2913b0b004ac6adfd0a02667c85a9edbfce07f9e21881a4c2a17557a0e69b86bff436e23bf3e766a7c247e1029b5c23fb8379ba14d80e692e249a1c89d94da10d330c530a5ca3b54265c7856461191d3d536278fdceed25be1c6ecfac476451580dd77e9fcd55cc060017c0e11db1a7a1eea22e8c306255ca4c043d1f7c223889d13545a10bde3849da0878a2b1de4dd8aea729d5408e02a6572ea18ba3aacb0a26ad9ab81b49bf29c2f4cc504e62b075b0e2fa7083b1f4cb8e8dd5ec653bfacbec1660b3bda036963a1988b7b04a705fcc33ddf2f4c0bb847c1bfb4d0f6cca08f4c5131369dd71967e4a80c1e18a19dd53da410d1a8eb5a5ab74a52d71fc414f53770d0356b7cceda7140f78a7df02dcb580d2dc8306b4ee24136c4242d9600754cac6f9adc0519c7214885ef344716fcff84071c58edf20392050c4dc7c141b5ac74fa5d828f10613196d0c1959193800481394536b1643f14b8b342e95e450bf683b011bf4a8e4a1238d45a0db1eabdef1a69275771951487c6f2ab7bcfd7cd9791e1acf7cfb64b74f751948204a5c2cc182a0e62379890e194b9e13c4f627506bfbcb27b0ecdb62967c741cabdd0270c71b8b91ffa7f089965606901e1ab2e65fe64f19ad24b5fba7b094172f0ef8a08587ef77d0957c76692e364a63df280fa7022982f8909a9deaca0440cd256ef4705184ce0d9d04ff4eb70dd6b4a665b1a8c661559200a520685583a280b8722f7f856721bc06b03f05292bbd4ee6570294c68d02157f8b4edf0bbdb15cce481cb35cf0bd45237e7ae3b793ad95a5114b1ade4cd805d4824a6464557a6b778f31e91cf3e9735a16154fd5efb1a05baa731b585e5b0168105667b810de1c55b258b94a5392c0c74a5a08c473e1379b12d2b13daa89ec2eeba9398efa76dbb870f6839de61938ab100ec3c95e66f93d8d588fdbef44ab65df50837dacb720f24999c969caa84d6ef94a2232b3e86df3dad9ff66d8d15e05a8085a8763c837c0095504ec26a17f6760ca38c72cc65fa8d03de63693cda01a7f84ef0be014884c8ddf397c42b7859ef7b93f766daf0bd75c0c9f386cce7d375ff9cbaef570972a5748bc295a235a6d9f330654cabfad5ca49880233317584240c9b7bce9763d9ea28ad097bb4dcda9fba74a2c1b1a8b65b30d2fc6b6ce2eeba1c90ba5991db772f8fb9c17f8cb9dbb7ff6ff81d651cbbadb064eec73abb651012a24c88dcec47d012b45f7db650fef9c23b2aa0aea4e23aa8d2fb2f813f46d396ed257b7b852975b0b2332f339591c681bf9fe5b769af713484639661f1a4ebe396bcfd2a780214dc57c142f4a5aef572aebb7ac429b81b1a1d4da75bf4132101cc777e39f0709c2dc8091ec5ffaaf4e2477853f20b5b49982632fbb93acd41ea03f421f5d10bbd591c0872cb737391888d07d2fa50abfacf9daf493f39461018e25b393197c1e4813181aca6c766dc0f64fd24f038b4a10b73efb32f748005946f3aa7be9bea5fd3a107fab03acd4b8a9e7fdf75d5555ae499d0a1aa3ee5837e6615e6ce84fea5a236ea484c46b23eae070098c5db41d24a1c1fd7d8adc42ebe85c7334671a4dda4a8ba61e2fa2668006435075cca51b8fa5f1c309f0e49b3e6b3f706b67b896405dda10604d3772e81d1675f54d6d73e265e9600b090deb56cc805f78c6fe2a38fc653a22d9792063fe0f5b8182f32a94592dda6f20b27b45ced2fc95c8985dda6afc286d36869b9c28d13b592b2a19ec840a2b1bc88ee65877a3720c1ae936bb1d105938f43eccd2d2798db9088a9e14557dafcbd81d1699abf68d2440a754596653959ce1628dab23c0e99bf10d56e84779f0fc28622e762b8db39a76c3949f25a355aca26ea8ca820e2060db929ee3d370a43d4b2e1c69a7b5d8128fa9e334d7b5dfc1a042d611776cdefd78bf9be6e96bdb72f20bbb2da69f757a13881b65d0cb1c20c7f86b75e24d2732e1b3bed66a6dbebd7661f32047c33cd6a36b57a6603dbd10d7aad03288874a8ae6cd6ba3602490ee9f28d93be3c2bf83bcc0566f7e8de22ba8b47dd2565e56b14471d92087e8d8d5d92a7a4a88c69d2a45f00455ea51093f7f104e9f0878ede6e3fc32dafa1df43c51a3bffa7e7098f3bbb285250fc70d5464d4e6f252760ee8a711fc7ef14686685332fcf64ea25c353939c8638079acfa26c774317553a2cfcfd269062e30d954ee1372aa72abb478a30ad02368d95650e6d7b042eda0bce4403b5d26f2456ef949868d4909d42d7d71876830a45aad5b748446a53a24d58d1d4f46ed0fcc59d356014464372affe8798707bf0f043637e96fdcb17d78de79055d98d294dbfe1368d851b2698cc900e197a0f8f6ea18c26a4b2a9d1845ba8a3c0909a1337a58510f3fd2b6a3d6f422dad1279f0214a96549c303c9abfd4f0d47c9f4f8317c0b7d07eb90663ec992bdcb925c13bc2df6f8884fba709dd94c59cf518faa47bd5b0a240a5ea9de78e4459f7a3c90b51a8e3173c48bdd00e475e6512fa4fb0e6fc20662403bb372a1fec5e6c14af8e42b696fe17396fb059a33df2863de21816ad8ddaca20d331471f96b682dacc40246ae1fdb79afab7bbdf4dfa2bce7642d93f52edfcd2027f65fbcc7cd86e67a374b8e532816596fc2979d35f81f9bcdae542675788b2de2abb75926347198ad4095693b35e3bc782510c6e0f5c07f4f290ff05eaa17d5f83f2103554ca9fcbe75ea78a08211a2d3c099fd9493707b7469ab1753f086a4d252f0584a241f3de157033bf8a3d5415a2372d46ce276c810fadd87ab6104e0ba6911776285632fc5b34d9cc365735182a355fc74718a78c6817aeb6d6a7b700233cabfffb52707efe7f4ce32a4f44cd72118f3db12fb1d9cb545f91d6a4d006fafc06822a6b78f1388f09b6abae0229201d9633347bff1c2d1bd01429a5bce2fb192b479df2cb9b8728aaa47edeb4105abf258ed679af8a6e1f6730fb39b641e1c04a1b09227e1e72b2af85a03c6cf72adf54853e9ca05d7b0cdb3d186250ca8121eccc67fc0732c374b4e5d3cecbc93464e7728f89d77b6ee19fa475eb88e2f13e98969ebc5f3e8288f50e7265a5ac3a8ec055390a9c0eef3e4d3c2271f6aacb7ee077f2c0ba12fdf16f68be8472bdef7287d75996b0c4dbdb0d69209f8397875136b5df3ea25c7152115711b3db65e33479a8cb01e35c4a1b16105abb725cb1f6c66ee0c12836fa09a4d55b895189847fe54ebf8cec83b5a4055cd6287bae0ae154bdeac3a8a2fb16eab32d07e16bc5cfecdbffc9bbfb09f846d93565b46615ba4972ed5a3d3bdf0d8b5998254dc6c08fdfc83db5ed70165dd84ce523c851f7e8047f857943badb16037f6c43f6874f291eb02d03712f056ed216aaa4f7a42249ccb2f1524b2ea031a2d95552d10124245edf52a4de204971018eaff4a2fc1154fb9ef46a5617a0d8c29c5b0fe5409dd18b92c26d32a118c1dae30a45682511355b3c2da7714083a72380bd8807f2d4445240f8ec7d94f74058c7f170639c796505eb1e722184ce316ec0c85b6706e894c04512e73295ec7057fcf88f135f57f36acd726acdcbbaf2a61f3274e9ae6551d010a5e8796ed0ab7fe3ddc5d676b889048890b36b02f3e864909a2a3d1de5382822e45644b850d391a1c37b1287fcdd45153131c61730e3c57c306a7ddf9c7581908b94e6a5528ec461014f2571036b8fda1aad33ebef6340039c29f13b628726b5ae37530e0f3aa7d9243d4af08356ab491ca6f5a9be0e257ec4accd18c1b87d012ef16f79497145cc7f1234cc1a4f6bfbd11e3f6648f3167f6c6304fdbc36e2d117a3f5c5370808bdd61251c701e8ec95b5408ca554c7477b1f773d920466ba99d9cd05ec4c5fe53ce20e528913c011b93c001e4109ab262c95bc3a970161d79574f6ee8f656dd5e3ac503e5845812a5f027126b51de27eca619e3b4dee1849a3d80f79bc09082ec890281fb42d46c8c2d160fa775f40143e684f83c6e940615d1e407847dd0152842f1dc1c56f1ced086186b3b60a612ba2559fe0f5bc76851117158d103247f41f37a2c72fd562e36252b3cae0aff6631fea52d9a9f1e8b94f670630e890f5bf172b17d8fc1db744107957da4e25f9eed4e005a810bf7031ab12d7a1fea104e85be37913e3d20b2b6a5b6b2c4f86d4cadef1ccd8f45cf918a9b0bf8e56c42140fba335b5fce6c0b6684b5b5ed0db3a877501cc9aa1f01f991a98266f911427def11f171b5fdbd119acec24fca61eef383b8eb40f76ad719f645d1b2067b20a3ad62037b94becfcffcb00cb0d8e68270a31f39191dc2ad114edcc35133e76f8c5890fc9c34d834955774b494ffd642d88ec51981af3f97f86c1ae4ef5f2b8b80705aecbecfd2bef2b7fd040c446784cc21adf9624aa592f61fff0941ba026625e233169fe38e92644f77ce4e04802d866269321512d80a572894bcb229b8c2eda40e5c1c99133f5704902d30924d1f48559416835be3446da2967be102a22b69bb250f38da5ed058663dcd8eed2e1678118c56158af58549bb6fe42117fdd4a36cb2e163ddb5febd43356e4ab7eb90524dc25957017840c7665a09e6a6d0b8313abb24cbd1ef89c68b5c08dd02da039a5a29eed2fdd1858d2479e5b9d451763bbb74dc3812ac6196d71829d81695bc88aa63a25347682cece176ef591459771e5e044455892c41766ca2d58da6706be73e5014d5bc8b33ee32e4551369c5c4a6a6bfaa3212eb40b38c2c1cd90fe9edee49dc2e963ed5e0285a075becf29b34e306e6b1eef692c848e637016493983a52cbfc16db6ed5133c91c07f5a0ea5031a1f64eb2d67e73486844ea454382dca06d43906988b3d194538f897b1ae6262378b577032da4da214e3bb01b741a8c4d59f15131e8491b72169d786ae92119d586b8bb8d902d113bb6ed69c922c076416a211e07c02ec4193b3c3a87cc3b73791c50f4fd918dcfc91cefbd7aed8f67f958f3b15b5c7d8f29477b8d628c72328894891bb1d002e843c32eb3caab241ae241ac8426b8de24dfc21e3111f3468b9bc42edcef221b3638371972cdc56d7f1ee6e7acdee649b25e32fff09deaee8fe4af93fc1cac3799ccebd05241f7548c9585f8200a1acea0537095dde2354209d8b405d57c354fe95dce856c834d3851bd802400fcfa1a3a41715b998454c031492f3c8985ba3a37a6aa156657f30518d91df28e69a6d0fdf90a1792df38fb3ae3a61b0e7d66b3a3fd1423cf4dc19233e83d584b9cae87d43b203ecfcbbb9b7cea718b5a506ad270606a928159b3ecfa80fc1ada0cba10d384c401b98b65afef50824fe3e898f42435623e0f43ac9e2ff9d35db82abbc5d3a9f384aecda40f4602aca9e73f004982158d24547b346ed9b3a15aeb7360285684f9c270c44a886e51ae6fc3c20218caf9121902dc8fad4bb078e9c34c07a727ad9ed7b7dc3ad1f092ca99336afddee51b14f28cc1cb8b2834874d802cfac5906c14892cf0870fb8484dd3bca134e1e80dc5f2325f4b900b937fef2a0af2b71eb8743d7afdc8e4a9379dc469588ebe31a10b9fb373eb5a7ea52e3089e54d6e781ad5ef669cf4505082451896b0985adb35bbcce523ded6d91f816905726ac4b6289d8ae29f7774e16357a9763b06da0b629f915518053e40a9a933f9103dbb053a7c71882244041d9b764bcdb08a2d593cc8ae47fc0d41505c9412b96b9b6a8877c4ecb92929d2c1a8af4a61e6cf95e622e4a39f22e7305da0f3fedacf881cbc99b2058f3d9c4e445f6c5de87ca172630d72638b9384c0c9d973cd7683f1c73105354ca0cf17032667006ce754dad670439d5b51a56ba1cb49867bf590e88c082d96a1541933fd14bdbea3ff512ee208539ac754d714a2f2f9f4d2fa747f59c0aa2bf60426a5d62cd0c15bde4c2529f055d1e70a406a4803901e4aa350a1411d63a0fc3c9e617a3f2e392b4c361ce73b64eb28305ef080e6d57b6522b07f38ae4bcb99ae1a65e7af8e2456e53ac1542285ad0a0e2fd8c832628758a57055401c7dbd3815a9d8378870e633b8b34b7462af4fe2c97c285cde3b8e05b47380882764535b8e7ff84725f678a28f1f1f3e679d9b943a7abc5dbbff01fae70f6da3d10761b36e5abd641ace2b4d4e44a2f97c272b335e432996ce407a4669a28d75f7280f2beef14274114b2956b50f7715fc9443458f4d6d47fdf9c5b996a319ad7f63c74b28f6b5b2a477f26dbaf5da6ba19551ea1c89870db0b517aa176079856602150b8b9e6083f3a069b894fc8c4952d3c42ed394d4f087a4ba84a8e6f44cd78e2c89c344115bdbcd2a52b5a02f875c31562dbd08298aafc67cb95846fbac5350ed1718b86ea8c834a9370757926745733efef8faab717b2f7e4e61d8f1df0c97c22707d7148100d026f0b0342f87e2271c71ac010457dcb6a070180622c38f379fb67fbdcc78df245424b54dcd5bbee330387e6d56d166a6607d14fae4d66605277d33b2ef9ec013a87836edea79067199b6cb7499fe0ec401245e8c00a733f999b456a3474732458b47f6f4d0e6b1c0d75728fb3292d0a55ee2c15079008dc181fc6fb91f2ff0ac44269f653900d06406666d0f2612529775cd3d43119604539be128b9d8cb6d1c120026b8d2dd92d865a19f105e295c666de03b86c3bd4e881f64fdea97fa588711a1d882bc649074e97e2e2fe5dca461481fe29d2d37b4f3d3ab46f1053d476e697b", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x78, 0x0, 0x8, {0xb10, 0xc, 0x0, {0x5, 0x8, 0x9261, 0x4, 0x5, 0x2, 0x4, 0x8, 0xfffffffd, 0x1000, 0x2, 0x0, 0x0, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimes(&(0x7f0000000100)='./file0\x00', 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000500), 0xb53d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000540)={0xffffeffe, 0x1, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000000)={0x1f, 0x1, 0x4}) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f00000000c0)={{0x0, 0x9ff2, 0x8000000000000001, 0x17fc00, 0x3, 0x6, 0x6, 0x0, 0x9, 0x9382, 0x9, 0x10000, 0x6, 0x40, 0x7}}) ioctl$SNDCTL_SEQ_TESTMIDI(r8, 0x40045108, &(0x7f0000000080)=0xfffffffd) 49.524539ms ago: executing program 7 (id=3266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x737fb58b0b72ff4e) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='lp\x00', 0x3) 0s ago: executing program 3 (id=3267): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) kernel console output (not intermixed with test programs): d=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.6.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1175.010402][ T26] audit: type=1326 audit(1742026957.890:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.6.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1176.659980][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'. [ 1177.203937][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.213098][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.069032][T14971] Bluetooth: MGMT ver 1.22 [ 1178.178694][ T5312] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1178.536919][T14973] netlink: 'syz.0.2657': attribute type 11 has an invalid length. [ 1179.163251][ T5312] usb 4-1: Using ep0 maxpacket: 8 [ 1179.170217][ T5312] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1179.203069][ T5312] usb 4-1: config 0 has no interface number 0 [ 1179.213373][ T5312] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1179.232105][ T5312] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1179.257811][ T5312] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1179.281484][ T5312] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1179.323674][ T5312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.350616][ T5312] usb 4-1: config 0 descriptor?? [ 1179.362707][ T5312] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1179.565449][ T5312] usb 4-1: USB disconnect, device number 10 [ 1181.586251][T15008] program syz.6.2672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1181.599072][T15008] ptrace attach of "./syz-executor exec"[8255] was attempted by ""[15008] [ 1181.611545][T15008] random: crng reseeded on system resumption [ 1183.212038][T15000] wlan0 speed is unknown, defaulting to 1000 [ 1189.449021][T11661] Bluetooth: hci3: Dropping invalid advertising data [ 1189.456019][T11661] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1192.104686][T15083] wlan0 speed is unknown, defaulting to 1000 [ 1192.413589][T11661] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1192.423706][T11661] CPU: 0 PID: 11661 Comm: kworker/u5:0 Not tainted 6.1.131-syzkaller #0 [ 1192.432077][T11661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1192.442166][T11661] Workqueue: hci4 hci_rx_work [ 1192.446897][T11661] Call Trace: [ 1192.450204][T11661] [ 1192.453164][T11661] dump_stack_lvl+0x1e3/0x2cb [ 1192.457882][T11661] ? nf_tcp_handle_invalid+0x647/0x647 [ 1192.463381][T11661] ? panic+0x764/0x764 [ 1192.467507][T11661] sysfs_create_dir_ns+0x2c6/0x390 [ 1192.472666][T11661] ? sysfs_warn_dup+0xa0/0xa0 [ 1192.477394][T11661] kobject_add_internal+0x6df/0xd10 [ 1192.482645][T11661] kobject_add+0x14e/0x210 [ 1192.487109][T11661] ? device_add+0x3c2/0xfd0 [ 1192.491660][T11661] ? kobject_init+0x1d0/0x1d0 [ 1192.496393][T11661] ? __raw_spin_lock_init+0x41/0x100 [ 1192.501721][T11661] ? get_device_parent+0x128/0x400 [ 1192.506880][T11661] device_add+0x476/0xfd0 [ 1192.511278][T11661] hci_conn_add_sysfs+0xe4/0x1f0 [ 1192.516270][T11661] le_conn_complete_evt+0xcfe/0x1350 [ 1192.521614][T11661] ? trace_contention_end+0x61/0x170 [ 1192.526949][T11661] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 1192.533243][T11661] ? __mutex_unlock_slowpath+0x218/0x750 [ 1192.538934][T11661] ? mutex_unlock+0x10/0x10 [ 1192.543482][T11661] ? skb_pull_data+0x10e/0x220 [ 1192.548292][T11661] hci_le_conn_complete_evt+0x188/0x410 [ 1192.553907][T11661] hci_event_packet+0xa40/0x1510 [ 1192.558894][T11661] ? hci_remote_host_features_evt+0x270/0x270 [ 1192.565009][T11661] ? bis_list+0x290/0x290 [ 1192.569384][T11661] ? do_raw_spin_unlock+0x137/0x8a0 [ 1192.574632][T11661] ? kcov_remote_start+0x4ae/0x7c0 [ 1192.579790][T11661] ? lockdep_hardirqs_on+0x10/0x130 [ 1192.585039][T11661] ? hci_send_to_monitor+0x99/0x4d0 [ 1192.590298][T11661] hci_rx_work+0x3a6/0xd10 [ 1192.594782][T11661] ? process_one_work+0x806/0x1260 [ 1192.599930][T11661] process_one_work+0x917/0x1260 [ 1192.604909][T11661] ? worker_detach_from_pool+0x260/0x260 [ 1192.610563][T11661] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1192.616120][T11661] ? kthread_data+0x4e/0xc0 [ 1192.620645][T11661] ? wq_worker_running+0x97/0x190 [ 1192.625681][T11661] worker_thread+0xa47/0x1200 [ 1192.630379][T11661] ? _raw_spin_unlock+0x40/0x40 [ 1192.635248][T11661] ? release_firmware_map_entry+0x18b/0x18b [ 1192.641165][T11661] ? _raw_spin_unlock+0x40/0x40 [ 1192.646037][T11661] kthread+0x28d/0x320 [ 1192.650125][T11661] ? worker_clr_flags+0x190/0x190 [ 1192.655180][T11661] ? kthread_blkcg+0xd0/0xd0 [ 1192.659797][T11661] ret_from_fork+0x1f/0x30 [ 1192.664257][T11661] [ 1192.667302][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.679743][T11661] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1192.693625][T11661] Bluetooth: hci4: failed to register connection device [ 1193.999926][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2715'. [ 1198.528061][T15197] loop2: detected capacity change from 0 to 1024 [ 1198.573827][T15197] EXT4-fs: Ignoring removed orlov option [ 1198.594663][T15197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1198.750733][T15197] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1199.023168][ T4250] Bluetooth: hci4: command 0x0406 tx timeout [ 1199.464355][ T26] audit: type=1326 audit(1742026983.540:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1200.104410][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 1200.205854][ T26] audit: type=1326 audit(1742026983.540:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1200.260947][ T26] audit: type=1326 audit(1742026983.540:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1200.283296][ C0] vkms_vblank_simulate: vblank timer overrun [ 1200.352695][T15218] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2733'. [ 1200.501041][T15184] wlan0 speed is unknown, defaulting to 1000 [ 1200.561621][ T26] audit: type=1326 audit(1742026983.540:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1200.584069][ C0] vkms_vblank_simulate: vblank timer overrun [ 1200.651017][ T26] audit: type=1326 audit(1742026983.540:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1200.673740][ T26] audit: type=1326 audit(1742026983.540:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1200.702239][ T26] audit: type=1326 audit(1742026983.550:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1200.725266][ T26] audit: type=1326 audit(1742026983.550:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1205.371257][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2749'. [ 1207.776161][T15281] wlan0 speed is unknown, defaulting to 1000 [ 1208.363282][ T4294] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1208.611730][ T4294] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD3, skipping [ 1208.746951][ T4294] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1208.871311][ T4294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.101172][ T4294] usb 6-1: config 0 descriptor?? [ 1209.344164][ T4294] ath6kl: Failed to submit usb control message: -71 [ 1209.442443][ T4294] ath6kl: unable to send the bmi data to the device: -71 [ 1209.648780][ T4294] ath6kl: Unable to send get target info: -71 [ 1209.812416][ T4294] ath6kl: Failed to init ath6kl core: -71 [ 1209.989171][ T4294] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 1210.014895][ T4294] usb 6-1: USB disconnect, device number 13 [ 1211.065415][T15324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2765'. [ 1212.461876][T15341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2770'. [ 1214.899557][T15325] wlan0 speed is unknown, defaulting to 1000 [ 1216.750555][T15373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2780'. [ 1218.790796][T15408] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2792'. [ 1218.810925][T15408] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2792'. [ 1220.550914][T15427] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2796'. [ 1223.517758][T15405] wlan0 speed is unknown, defaulting to 1000 [ 1223.946004][T15457] wlan0 speed is unknown, defaulting to 1000 [ 1224.565578][T15474] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2811'. [ 1225.062989][ T7] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1225.253199][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 1225.262673][ T7] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1225.305784][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.342848][ T7] usb 7-1: Product: syz [ 1225.363039][ T7] usb 7-1: Manufacturer: syz [ 1225.382366][ T7] usb 7-1: SerialNumber: syz [ 1225.439691][ T7] usb 7-1: config 0 descriptor?? [ 1225.674898][ T7] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1226.053775][T15133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1226.126267][T15133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1226.138700][T15133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1226.163420][T15133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1226.177061][T15133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1226.186772][T15133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1226.979711][T15481] wlan0 speed is unknown, defaulting to 1000 [ 1228.256991][T11661] Bluetooth: hci1: command 0x0409 tx timeout [ 1228.270482][ T7] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 1228.281557][T15481] chnl_net:caif_netlink_parms(): no params data found [ 1228.330348][ T7] usb 7-1: USB disconnect, device number 10 [ 1228.555210][T15513] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2823'. [ 1228.664245][T15520] trusted_key: encrypted_key: insufficient parameters specified [ 1229.576023][T15481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.584282][T15481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.592584][T15481] device bridge_slave_0 entered promiscuous mode [ 1229.606979][T15481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.616724][T15481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.626810][T15481] device bridge_slave_1 entered promiscuous mode [ 1230.370004][T11661] Bluetooth: hci1: command 0x041b tx timeout [ 1230.819518][T15481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.009243][T15481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.213732][T15481] team0: Port device team_slave_0 added [ 1231.296111][T15481] team0: Port device team_slave_1 added [ 1231.380869][T15553] kvm: vcpu 0: requested 426 ns lapic timer period limited to 200000 ns [ 1231.466708][T15549] kvm: pic: non byte write [ 1231.489136][T15481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.523499][T15481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.553363][T15481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.567206][T15481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.574271][T15481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.601278][T15481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.881736][T15563] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock [ 1232.272174][T15481] device hsr_slave_0 entered promiscuous mode [ 1232.383167][T11661] Bluetooth: hci1: command 0x040f tx timeout [ 1232.447327][T15481] device hsr_slave_1 entered promiscuous mode [ 1232.581792][T15564] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2836'. [ 1234.463134][T11661] Bluetooth: hci1: command 0x0419 tx timeout [ 1234.938362][T15481] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.110105][T15481] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.322517][T15481] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.909145][T15481] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.973880][T15481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1237.995326][T15481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1238.030730][T15481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1238.197898][T15481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1238.527742][T15481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.591258][T15481] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.632357][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.850228][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.286341][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1239.314277][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1239.532197][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1239.541365][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1239.550280][ T4836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.557452][ T4836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.823438][ T5312] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1239.925362][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1240.053128][ T5312] usb 4-1: Using ep0 maxpacket: 8 [ 1240.095671][ T5312] usb 4-1: config 0 has an invalid interface number: 141 but max is 12 [ 1240.136623][ T5312] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1240.190707][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1240.203341][ T5312] usb 4-1: config 0 has no interface number 0 [ 1240.216081][ T4836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.223327][ T4836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.241785][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1240.245550][ T5312] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1240.260213][ T5312] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1240.266379][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1240.341422][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1240.380873][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1240.396803][ T5312] usb 4-1: Product: syz [ 1240.401036][ T5312] usb 4-1: Manufacturer: syz [ 1240.406135][ T5312] usb 4-1: SerialNumber: syz [ 1240.430244][ T5312] usb 4-1: config 0 descriptor?? [ 1240.446188][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1240.455404][ T5312] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1240.464448][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1240.501565][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1240.524080][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1240.543968][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1240.563179][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1240.586942][T15481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1240.618779][T15481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1240.651667][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1240.684255][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1241.033389][T15638] wlan0 speed is unknown, defaulting to 1000 [ 1241.934633][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1241.944220][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1241.956863][T15481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.031648][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1242.048895][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1242.124654][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1242.137959][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1242.170430][T15481] device veth0_vlan entered promiscuous mode [ 1242.191907][T15481] device veth1_vlan entered promiscuous mode [ 1242.268621][T15481] device veth0_macvtap entered promiscuous mode [ 1242.302764][T15481] device veth1_macvtap entered promiscuous mode [ 1242.350821][ T5312] gspca_zc3xx: reg_w_i err -71 [ 1242.367807][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1242.392782][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1242.405503][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1243.060298][T15691] overlayfs: failed to resolve './file1': -2 [ 1243.153298][ T5312] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1243.236742][ T5312] gspca_zc3xx: probe of 4-1:0.141 failed with error -71 [ 1243.351253][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1243.393767][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1243.412317][ T5312] usb 4-1: USB disconnect, device number 11 [ 1243.450054][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1243.482557][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1243.516606][T15481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1243.558152][T15481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.599038][T15481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1243.623967][T15481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.639413][T15481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1243.660636][T15481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.671024][T15481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1243.683431][T15481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.695074][T15481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1243.748628][T15481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1243.780021][T15481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.792758][T15481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1243.846271][T15481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.857177][T15481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1243.868073][T15481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.878872][T15481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1243.889570][T15481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.906531][T15481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.930080][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1243.949461][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1243.979796][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1244.004861][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1244.022277][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1244.049905][T15481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.069134][T15481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.089376][T15481] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.118846][T15481] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.354707][ T4746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.374026][ T4746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.598421][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1245.710470][ T5057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.792988][T15724] overlayfs: failed to resolve './file1': -2 [ 1246.048888][ T5057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.508957][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1247.593254][T15714] wlan0 speed is unknown, defaulting to 1000 [ 1248.134573][T15744] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1250.021390][T15757] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2897'. [ 1250.973512][T15762] overlayfs: failed to resolve './file1': -2 [ 1252.733065][ T6147] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1252.940137][ T6147] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 1253.013943][ T6147] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.207984][ T6147] usb 6-1: config 0 has no interface number 0 [ 1254.224371][ T6147] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1254.234520][ T6147] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1254.250948][ T6147] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1254.287832][ T6147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.317418][ T6147] usb 6-1: Product: syz [ 1254.321650][ T6147] usb 6-1: Manufacturer: syz [ 1254.353762][ T6147] usb 6-1: SerialNumber: syz [ 1254.382194][ T6147] usb 6-1: config 0 descriptor?? [ 1256.271526][ T4292] usb 6-1: USB disconnect, device number 14 [ 1256.550258][T15796] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1257.475890][T15817] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2917'. [ 1263.005855][T15856] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1264.212481][T15878] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2936'. [ 1265.717976][T15865] wlan0 speed is unknown, defaulting to 1000 [ 1271.423495][ T9890] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1271.623178][ T9890] usb 7-1: Using ep0 maxpacket: 8 [ 1271.656852][ T9890] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1271.667232][ T9890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.675463][ T9890] usb 7-1: Product: syz [ 1271.680852][ T9890] usb 7-1: Manufacturer: syz [ 1271.685729][ T9890] usb 7-1: SerialNumber: syz [ 1271.745465][ T9890] usb 7-1: config 0 descriptor?? [ 1272.126608][ T9890] usb 7-1: USB disconnect, device number 11 [ 1276.291117][T15940] wlan0 speed is unknown, defaulting to 1000 [ 1279.403062][ T5312] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1279.491500][ T26] audit: type=1326 audit(1742027063.600:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.6.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7fc00000 [ 1279.553577][ T26] audit: type=1326 audit(1742027063.600:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.6.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7fc00000 [ 1279.623199][ T5312] usb 3-1: Using ep0 maxpacket: 8 [ 1279.632590][ T5312] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1279.682605][ T5312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.691202][ T26] audit: type=1326 audit(1742027063.600:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.6.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7fc00000 [ 1279.745557][ T5312] usb 3-1: Product: syz [ 1279.749785][ T5312] usb 3-1: Manufacturer: syz [ 1279.770793][ T5312] usb 3-1: SerialNumber: syz [ 1279.791868][T11661] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1279.804223][T11661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1279.812579][T11661] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1279.822576][ T26] audit: type=1326 audit(1742027063.600:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.6.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7fc00000 [ 1279.845188][T11661] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1279.853387][ T26] audit: type=1326 audit(1742027063.690:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.6.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7fc00000 [ 1279.853462][T11661] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1279.886043][T11661] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1279.889617][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2978'. [ 1279.895616][ T5312] usb 3-1: config 0 descriptor?? [ 1279.934935][T16013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1279.942381][T16013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.950987][T16013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1279.969872][T16013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.249001][T16010] wlan0 speed is unknown, defaulting to 1000 [ 1280.797324][ T5312] usb 3-1: USB disconnect, device number 13 [ 1281.421847][T16031] loop2: detected capacity change from 0 to 1024 [ 1281.434457][T16031] EXT4-fs: Ignoring removed orlov option [ 1281.440712][T16031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1281.549538][T16031] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1281.933128][ T26] audit: type=1326 audit(1742027066.010:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.2.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1281.985113][T11661] Bluetooth: hci3: command 0x0409 tx timeout [ 1282.349677][T16041] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2983'. [ 1282.471829][ T26] audit: type=1326 audit(1742027066.010:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.2.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1282.524261][T16010] chnl_net:caif_netlink_parms(): no params data found [ 1282.548891][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 1282.653197][ T26] audit: type=1326 audit(1742027066.010:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.2.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1282.725407][ T26] audit: type=1326 audit(1742027066.010:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.2.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1282.845321][ T26] audit: type=1326 audit(1742027066.010:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.2.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1282.952329][T15919] tipc: Disabling bearer [ 1282.980408][T15919] tipc: Left network mode [ 1283.160874][T16010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.168618][T16010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.177638][T16010] device bridge_slave_0 entered promiscuous mode [ 1283.358001][T16053] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2987'. [ 1283.552601][T16010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.561432][T16010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.579575][T16010] device bridge_slave_1 entered promiscuous mode [ 1283.731937][T16010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1283.812379][T16010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.058413][T16010] team0: Port device team_slave_0 added [ 1284.064680][T11661] Bluetooth: hci3: command 0x041b tx timeout [ 1284.218127][T16010] team0: Port device team_slave_1 added [ 1284.313204][ T6147] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1284.376275][T16010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1284.404053][T16010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.480094][T16010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.573946][ T4296] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1284.773322][ T4296] usb 6-1: Using ep0 maxpacket: 8 [ 1284.810369][ T4296] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1284.946330][ T4296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.123350][ T4296] usb 6-1: Product: syz [ 1285.143587][ T4296] usb 6-1: Manufacturer: syz [ 1285.163086][ T4296] usb 6-1: SerialNumber: syz [ 1285.190862][ T4296] usb 6-1: config 0 descriptor?? [ 1285.262068][ T6147] usb 1-1: Using ep0 maxpacket: 8 [ 1285.271969][ T6147] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1285.287422][ T6147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.296672][ T6147] usb 1-1: Product: syz [ 1285.300899][ T6147] usb 1-1: Manufacturer: syz [ 1285.303850][T16010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1285.305682][ T6147] usb 1-1: SerialNumber: syz [ 1285.338514][T16010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.344016][ T6147] usb 1-1: config 0 descriptor?? [ 1285.406322][ T6147] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1285.413208][T16094] loop6: detected capacity change from 0 to 1024 [ 1285.451374][T16010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1285.452219][T16094] EXT4-fs: Ignoring removed orlov option [ 1285.493090][T16094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1285.555246][T15919] batman_adv: batadv0: Removing interface: gretap1 [ 1285.564683][T16094] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1285.735722][ T7] usb 6-1: USB disconnect, device number 15 [ 1285.917881][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1285.917898][ T26] audit: type=1326 audit(1742027070.020:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.6.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1286.153365][T11661] Bluetooth: hci3: command 0x040f tx timeout [ 1286.390590][ T26] audit: type=1326 audit(1742027070.030:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.6.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1286.555939][ T26] audit: type=1326 audit(1742027070.030:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.6.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1286.586762][ T8255] EXT4-fs (loop6): unmounting filesystem. [ 1286.596477][T16010] device hsr_slave_0 entered promiscuous mode [ 1286.617753][T16010] device hsr_slave_1 entered promiscuous mode [ 1286.650854][T16010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1286.709844][T16010] Cannot create hsr debugfs directory [ 1286.715753][ T26] audit: type=1326 audit(1742027070.030:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.6.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1286.813086][ T26] audit: type=1326 audit(1742027070.030:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.6.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1286.863213][ T26] audit: type=1326 audit(1742027070.030:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.6.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1286.957807][ T26] audit: type=1326 audit(1742027070.030:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.6.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1286.981492][ T26] audit: type=1326 audit(1742027070.030:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.6.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1287.555833][ T6147] gspca_sonixj: i2c_w8 err -71 [ 1287.833138][ T6147] sonixj: probe of 1-1:0.0 failed with error -71 [ 1287.865669][ T6147] usb 1-1: USB disconnect, device number 18 [ 1287.911334][T16117] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2997'. [ 1288.223112][T11661] Bluetooth: hci3: command 0x0419 tx timeout [ 1288.476885][T16127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3002'. [ 1288.739035][T16146] loop6: detected capacity change from 0 to 1024 [ 1288.758693][T16146] EXT4-fs: Ignoring removed orlov option [ 1288.765076][T16146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1289.553156][T15919] device hsr_slave_0 left promiscuous mode [ 1289.570830][T15919] device hsr_slave_1 left promiscuous mode [ 1289.588226][T15919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1289.606628][T15919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1289.631864][T16146] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1289.737116][T15919] device bridge_slave_1 left promiscuous mode [ 1289.749279][T15919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.831527][T15919] device bridge_slave_0 left promiscuous mode [ 1289.868650][T15919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.077311][ T26] audit: type=1326 audit(1742027074.180:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.6.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1290.392620][ T26] audit: type=1326 audit(1742027074.180:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.6.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1290.859806][ T8255] EXT4-fs (loop6): unmounting filesystem. [ 1292.172921][ T9890] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1292.373385][ T9890] usb 6-1: Using ep0 maxpacket: 8 [ 1292.380520][ T9890] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1292.399046][ T9890] usb 6-1: config 0 has no interface number 0 [ 1292.417334][ T9890] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1292.435692][ T9890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.452988][ T9890] usb 6-1: Product: syz [ 1292.457419][ T9890] usb 6-1: Manufacturer: syz [ 1292.462098][ T9890] usb 6-1: SerialNumber: syz [ 1292.495581][ T9890] usb 6-1: config 0 descriptor?? [ 1292.679886][T15919] team0 (unregistering): Port device team_slave_1 removed [ 1292.744177][T15919] team0 (unregistering): Port device team_slave_0 removed [ 1292.805012][T15919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1292.860660][T15919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1294.004003][T15919] bond0 (unregistering): Released all slaves [ 1294.463097][T16183] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3013'. [ 1294.475043][ T9890] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 1294.485221][ T9890] usb 6-1: No streaming interface found for terminal 6. [ 1294.509157][ T9890] usb 6-1: USB disconnect, device number 16 [ 1294.838404][T16204] loop2: detected capacity change from 0 to 1024 [ 1294.986053][T16204] EXT4-fs: Ignoring removed orlov option [ 1295.012317][T16204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1295.679646][T16204] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1296.814372][T16010] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1296.830416][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 1297.103239][T16010] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1297.149373][T16010] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1297.262195][T16010] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1298.173781][T16010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1298.231419][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1298.239303][T16243] xt_ecn: cannot match TCP bits for non-tcp packets [ 1298.259487][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1298.476619][T16010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1298.613227][T16253] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 1298.619793][T16253] PKCS7: Only support pkcs7_signedData type [ 1299.203257][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1299.212154][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1299.316859][T15919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.324102][T15919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.422773][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1299.457278][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1299.496064][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1299.547043][T15919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.554285][T15919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.613871][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1299.654105][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1299.701974][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1299.736356][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1299.760250][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1299.790498][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1299.853618][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1299.894141][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1299.946718][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1300.052344][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1300.068362][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.076763][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.101999][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1300.932405][T16272] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3030'. [ 1301.303102][T16285] loop5: detected capacity change from 0 to 1024 [ 1301.313989][T16285] EXT4-fs: Ignoring removed orlov option [ 1301.319907][T16285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1301.339883][T16285] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1302.219338][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1302.243163][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1302.259977][T16010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.612739][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1303.642290][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1303.898327][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1304.649719][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1304.701798][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1304.764467][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1304.846933][T16010] device veth0_vlan entered promiscuous mode [ 1304.930647][T16010] device veth1_vlan entered promiscuous mode [ 1305.204093][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 1305.248876][T16010] device veth0_macvtap entered promiscuous mode [ 1306.429900][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1306.501946][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1306.735885][T16010] device veth1_macvtap entered promiscuous mode [ 1306.909103][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1307.001976][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.060787][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.099500][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.287846][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.308346][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.349470][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.392415][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.449887][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.509476][T16010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.344223][T16343] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3044'. [ 1308.376922][T15752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1308.413513][T15752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1308.466981][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.522498][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.604683][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.675495][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.692374][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.704089][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.722934][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.754057][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.078168][T16010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.589330][T16010] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.599304][T16010] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.671164][T16010] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.680632][T16010] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.697255][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1309.714146][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1310.024576][ T5057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.192320][ T5057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.108235][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1311.336604][T16378] loop2: detected capacity change from 0 to 1024 [ 1312.123529][T16378] EXT4-fs: Ignoring removed orlov option [ 1312.129255][T16378] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1312.195453][ T9713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.294866][T16378] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1312.310965][ T9713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.387690][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1312.681329][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1312.681422][ T26] audit: type=1326 audit(1742027096.790:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1314.669883][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 1314.682934][ T26] audit: type=1326 audit(1742027096.790:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1314.999010][ T26] audit: type=1326 audit(1742027096.790:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1315.065208][T16411] trusted_key: encrypted_key: key user:syz not found [ 1316.039734][ T26] audit: type=1326 audit(1742027096.790:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1316.666376][ T26] audit: type=1326 audit(1742027096.790:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1316.827687][ T26] audit: type=1326 audit(1742027096.790:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1316.850054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1316.856647][ T26] audit: type=1326 audit(1742027096.790:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1316.878973][ C0] vkms_vblank_simulate: vblank timer overrun [ 1316.892971][ T26] audit: type=1326 audit(1742027096.790:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efbff78d169 code=0x7ffc0000 [ 1317.367174][ C0] vkms_vblank_simulate: vblank timer overrun [ 1318.586486][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3064'. [ 1319.553688][T16445] loop6: detected capacity change from 0 to 1024 [ 1319.571171][T16445] EXT4-fs: Ignoring removed orlov option [ 1319.603023][T16445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1320.434978][T16445] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1320.822183][ T26] audit: type=1326 audit(1742027104.930:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16442 comm="syz.6.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1321.422610][ T26] audit: type=1326 audit(1742027104.930:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16442 comm="syz.6.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1321.554041][ T26] audit: type=1326 audit(1742027104.930:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16442 comm="syz.6.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1321.577500][ T26] audit: type=1326 audit(1742027104.930:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16442 comm="syz.6.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1321.602027][ T26] audit: type=1326 audit(1742027104.930:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16442 comm="syz.6.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1321.634181][ T8255] EXT4-fs (loop6): unmounting filesystem. [ 1321.651320][ T26] audit: type=1326 audit(1742027104.930:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16442 comm="syz.6.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1321.822323][ T26] audit: type=1326 audit(1742027104.930:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16442 comm="syz.6.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1321.932995][ T26] audit: type=1326 audit(1742027104.930:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16442 comm="syz.6.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1326.335339][T16497] loop6: detected capacity change from 0 to 1024 [ 1326.342432][T16497] EXT4-fs: Ignoring removed orlov option [ 1326.348611][T16497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1326.397314][T16497] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1326.918517][ T26] audit: type=1326 audit(1742027111.000:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16496 comm="syz.6.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1327.447518][ T26] audit: type=1326 audit(1742027111.000:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16496 comm="syz.6.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1327.470403][T16465] wlan0 speed is unknown, defaulting to 1000 [ 1327.485669][ T8255] EXT4-fs (loop6): unmounting filesystem. [ 1327.639202][ T26] audit: type=1326 audit(1742027111.000:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16496 comm="syz.6.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1327.753161][ T26] audit: type=1326 audit(1742027111.010:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16496 comm="syz.6.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1327.843056][ T26] audit: type=1326 audit(1742027111.010:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16496 comm="syz.6.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1328.004225][ T26] audit: type=1326 audit(1742027111.020:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16496 comm="syz.6.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1328.093830][ T26] audit: type=1326 audit(1742027111.020:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16496 comm="syz.6.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1328.196245][ T26] audit: type=1326 audit(1742027111.020:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16496 comm="syz.6.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1328.527823][ T4250] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1328.691666][ T4250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1328.700746][ T4250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1328.710123][ T4250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1329.200644][ T4250] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1329.210041][ T4250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1331.101266][ T52] block nbd0: Attempted send on invalid socket [ 1331.388986][ T52] blk_print_req_error: 7 callbacks suppressed [ 1331.389005][ T52] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.390548][ T4250] Bluetooth: hci0: command 0x0409 tx timeout [ 1331.539902][ T52] block nbd0: Attempted send on invalid socket [ 1331.548560][ T52] I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.663830][T16540] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1331.722688][ T93] block nbd0: Attempted send on invalid socket [ 1331.729132][ T93] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.740961][T16540] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1331.751676][T16540] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1331.838725][T16540] UDF-fs: Scanning with blocksize 512 failed [ 1331.856568][ T93] block nbd0: Attempted send on invalid socket [ 1331.862955][ T93] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.872455][ T93] block nbd0: Attempted send on invalid socket [ 1331.879003][ T93] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.888884][T16540] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1331.900051][ T93] block nbd0: Attempted send on invalid socket [ 1331.906353][ T93] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.924316][T16540] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1331.961683][T16540] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1332.011142][T16540] UDF-fs: Scanning with blocksize 1024 failed [ 1332.051941][ T52] block nbd0: Attempted send on invalid socket [ 1332.058317][ T52] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1332.080366][ T93] block nbd0: Attempted send on invalid socket [ 1332.086928][ T93] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1332.099734][T16540] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1332.119873][ T93] block nbd0: Attempted send on invalid socket [ 1332.128839][ T93] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1332.140903][T16540] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1332.158067][T16540] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1332.167018][T16540] UDF-fs: Scanning with blocksize 2048 failed [ 1332.177266][ T93] block nbd0: Attempted send on invalid socket [ 1332.183555][ T93] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1332.197539][T16540] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1332.210807][T16540] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1332.224301][T16540] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1332.237042][T16540] UDF-fs: Scanning with blocksize 4096 failed [ 1332.244593][T16540] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1332.417587][T16552] loop0: detected capacity change from 0 to 1024 [ 1332.445040][T16552] EXT4-fs: Ignoring removed orlov option [ 1332.477956][T16552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1332.529192][T16552] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1332.845147][ T26] audit: type=1326 audit(1742027116.950:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e54d8d169 code=0x7ffc0000 [ 1332.910063][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056ea9800: rx timeout, send abort [ 1333.448300][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888056ea9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1333.489918][T15481] EXT4-fs (loop0): unmounting filesystem. [ 1333.490900][ T26] audit: type=1326 audit(1742027116.950:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e54d8d169 code=0x7ffc0000 [ 1333.521093][ T26] audit: type=1326 audit(1742027116.950:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1e54d8d169 code=0x7ffc0000 [ 1333.561816][ T26] audit: type=1326 audit(1742027116.950:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e54d8d169 code=0x7ffc0000 [ 1333.591072][ T26] audit: type=1326 audit(1742027116.950:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e54d8d169 code=0x7ffc0000 [ 1333.593469][ T4250] Bluetooth: hci0: command 0x041b tx timeout [ 1333.663654][ T26] audit: type=1326 audit(1742027116.950:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f1e54d8d169 code=0x7ffc0000 [ 1333.693925][ T26] audit: type=1326 audit(1742027116.960:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e54d8d169 code=0x7ffc0000 [ 1333.716685][ T26] audit: type=1326 audit(1742027116.960:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e54d8d169 code=0x7ffc0000 [ 1334.319839][T16542] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1334.389085][T16522] wlan0 speed is unknown, defaulting to 1000 [ 1334.397464][T16549] tipc: Enabled bearer , priority 0 [ 1334.678544][T16547] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1334.778993][T16547] tipc: Resetting bearer [ 1334.923418][ T4647] tipc: Resetting bearer [ 1334.956421][T16545] tipc: Resetting bearer [ 1335.212093][T16572] trusted_key: encrypted_key: key user:syz not found [ 1335.663097][ T4250] Bluetooth: hci0: command 0x040f tx timeout [ 1336.381445][T10029] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1336.567728][T10029] usb 1-1: Using ep0 maxpacket: 8 [ 1336.578347][T10029] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1336.598724][T10029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.610319][T10029] usb 1-1: Product: syz [ 1336.618298][T10029] usb 1-1: Manufacturer: syz [ 1336.627390][T10029] usb 1-1: SerialNumber: syz [ 1336.677945][T10029] usb 1-1: config 0 descriptor?? [ 1336.900110][T10029] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1337.319726][T10029] usb write operation failed. (-71) [ 1337.353989][T10029] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1337.366452][T10029] dvbdev: DVB: registering new adapter (Terratec H7) [ 1337.374188][T10029] usb 1-1: media controller created [ 1337.390628][T10029] usb read operation failed. (-71) [ 1337.431261][T10029] usb write operation failed. (-71) [ 1337.479561][T10029] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 1337.491964][T10029] usb 1-1: USB disconnect, device number 19 [ 1337.753079][ T4250] Bluetooth: hci0: command 0x0419 tx timeout [ 1339.005991][T16590] loop5: detected capacity change from 0 to 1024 [ 1339.028707][T16590] EXT4-fs: Ignoring removed orlov option [ 1339.054740][T16590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1339.157845][T16590] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1339.582437][ T26] audit: type=1326 audit(1742027123.690:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1339.738553][ T26] audit: type=1326 audit(1742027123.690:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1339.909612][ T26] audit: type=1326 audit(1742027123.690:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1339.972771][ T26] audit: type=1326 audit(1742027123.690:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1340.046106][ T26] audit: type=1326 audit(1742027123.690:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1340.144579][ T26] audit: type=1326 audit(1742027123.690:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1340.174929][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 1340.243000][ T26] audit: type=1326 audit(1742027123.690:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1340.313031][ T26] audit: type=1326 audit(1742027123.690:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1341.416332][T16545] tipc: Disabling bearer [ 1341.429559][T16605] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3105'. [ 1341.923008][ T4339] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1342.037070][T16522] chnl_net:caif_netlink_parms(): no params data found [ 1342.134178][ T4339] usb 6-1: config 1 has an invalid interface descriptor of length 6, skipping [ 1342.172943][ T4339] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.252989][ T4339] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1342.311023][ T4339] usb 6-1: config 1 has no interface number 1 [ 1342.367246][ T4339] usb 6-1: string descriptor 0 read error: -22 [ 1342.423013][ T4339] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1342.562751][T16621] trusted_key: encrypted_key: key user:syz not found [ 1343.602532][ T4339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.631266][ T4339] usb 6-1: MIDIStreaming interface descriptor not found [ 1343.657230][ T4339] snd-usb-audio: probe of 6-1:1.2 failed with error -16 [ 1343.764720][T16522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.771914][T16522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.828457][T10029] usb 6-1: USB disconnect, device number 17 [ 1343.834314][T16522] device bridge_slave_0 entered promiscuous mode [ 1343.865425][T16522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.888283][T16522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.924731][T16522] device bridge_slave_1 entered promiscuous mode [ 1344.005233][T16522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.014992][ T4339] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1344.027772][T16522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.066099][T16522] team0: Port device team_slave_0 added [ 1344.075951][T16522] team0: Port device team_slave_1 added [ 1344.134303][T16522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.142819][T16522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.203029][ T4339] usb 4-1: Using ep0 maxpacket: 32 [ 1344.217066][ T4339] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1344.271409][T16522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.284627][T16620] wlan0 speed is unknown, defaulting to 1000 [ 1344.290684][ T4339] usb 4-1: config 0 has no interface number 0 [ 1344.292835][T16522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.297630][ T4339] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1344.304622][T16522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1344.323731][ T4339] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1344.338377][T16522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.178259][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.179410][T16522] device hsr_slave_0 entered promiscuous mode [ 1345.194692][ T4339] usb 4-1: Product: syz [ 1345.198927][ T4339] usb 4-1: Manufacturer: syz [ 1345.204263][T16522] device hsr_slave_1 entered promiscuous mode [ 1345.209410][ T4339] usb 4-1: SerialNumber: syz [ 1345.217534][ T4339] usb 4-1: config 0 descriptor?? [ 1345.246727][T16522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1345.271072][T16522] Cannot create hsr debugfs directory [ 1345.355938][T16638] loop5: detected capacity change from 0 to 1024 [ 1345.379582][T16638] EXT4-fs: Ignoring removed orlov option [ 1345.412956][T16638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1345.480371][T16638] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1345.650043][ T4339] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1345.663020][ T4339] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1345.672006][ T4339] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1345.687628][ T4339] f81534: probe of 4-1:0.12 failed with error -71 [ 1345.710912][ T4339] usb 4-1: USB disconnect, device number 12 [ 1345.784565][T16522] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.890373][ T26] audit: type=1326 audit(1742027129.990:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.5.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1346.316717][ T26] audit: type=1326 audit(1742027129.990:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.5.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1346.358567][T16522] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.497426][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 1346.515323][ T26] audit: type=1326 audit(1742027130.000:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.5.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1346.551054][ T26] audit: type=1326 audit(1742027130.000:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.5.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1346.581616][T16522] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.590686][ T26] audit: type=1326 audit(1742027130.000:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.5.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1346.627451][ T26] audit: type=1326 audit(1742027130.000:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.5.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1346.724572][ T26] audit: type=1326 audit(1742027130.000:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.5.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1346.771951][T16657] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3117'. [ 1346.812952][ T26] audit: type=1326 audit(1742027130.000:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.5.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1346.855877][T16522] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.211060][T16668] tipc: Started in network mode [ 1347.218259][T16668] tipc: Node identity def467ca776c, cluster identity 4711 [ 1347.243476][T16668] tipc: Enabled bearer , priority 0 [ 1347.271101][T16664] tipc: Resetting bearer [ 1348.270641][ T4339] tipc: Node number set to 2845337546 [ 1349.391122][T10029] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1349.587118][T10029] usb 6-1: config 0 has no interfaces? [ 1349.599913][T10029] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 1349.615430][T10029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.629963][T10029] usb 6-1: config 0 descriptor?? [ 1350.038844][ T22] usb 6-1: USB disconnect, device number 18 [ 1350.813988][T16688] loop5: detected capacity change from 0 to 1024 [ 1350.821641][T16688] EXT4-fs: Ignoring removed orlov option [ 1350.831794][ T52] nbd_handle_cmd: 2 callbacks suppressed [ 1350.831981][T16688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1350.842931][ T52] block nbd6: Attempted send on invalid socket [ 1350.851880][ T52] blk_print_req_error: 2 callbacks suppressed [ 1350.851893][ T52] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1350.894412][ T52] block nbd6: Attempted send on invalid socket [ 1351.058834][ T52] I/O error, dev nbd6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1351.169809][T16689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1351.253663][ T52] block nbd6: Attempted send on invalid socket [ 1351.259860][ T52] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1351.275968][T16689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1351.288414][T16689] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1351.321768][T16689] UDF-fs: Scanning with blocksize 512 failed [ 1351.331309][T16688] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1351.350933][ T52] block nbd6: Attempted send on invalid socket [ 1351.357203][ T52] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1351.387367][ T52] block nbd6: Attempted send on invalid socket [ 1351.397512][ T52] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1351.411300][T16689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1351.422375][ T52] block nbd6: Attempted send on invalid socket [ 1351.429977][ T52] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1351.569596][T16689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1351.583581][T16689] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1351.591640][T16689] UDF-fs: Scanning with blocksize 1024 failed [ 1351.608678][ T93] block nbd6: Attempted send on invalid socket [ 1351.615088][ T93] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1351.868130][ T26] audit: type=1326 audit(1742027135.800:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1352.105205][ T93] block nbd6: Attempted send on invalid socket [ 1352.111408][ T93] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1352.121918][T16689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1352.146977][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 1352.153951][ T93] block nbd6: Attempted send on invalid socket [ 1352.160148][ T93] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1352.169908][T16689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1352.193085][T16689] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1352.201766][T16689] UDF-fs: Scanning with blocksize 2048 failed [ 1352.208999][ T93] block nbd6: Attempted send on invalid socket [ 1352.215483][ T93] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1352.215625][ T26] audit: type=1326 audit(1742027135.800:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1352.253829][T16689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1352.283104][T16689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1352.296773][T16689] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1352.318106][T16689] UDF-fs: Scanning with blocksize 4096 failed [ 1352.329262][ T26] audit: type=1326 audit(1742027135.810:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1352.369218][T16689] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1352.411851][ T26] audit: type=1326 audit(1742027135.810:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1352.483158][ T26] audit: type=1326 audit(1742027135.810:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1352.523017][ T26] audit: type=1326 audit(1742027135.810:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1352.576420][ T26] audit: type=1326 audit(1742027135.810:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1352.630903][ T26] audit: type=1326 audit(1742027135.810:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1353.343046][T11661] Bluetooth: hci1: command 0x0406 tx timeout [ 1353.881143][T16712] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11 [ 1355.811175][T16725] loop5: detected capacity change from 0 to 1024 [ 1355.818650][T16725] EXT4-fs: Ignoring removed orlov option [ 1355.830858][T16725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1355.861755][T16725] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1356.077531][T16664] tipc: Disabling bearer [ 1356.213291][ T26] audit: type=1326 audit(1742027140.320:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16724 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1356.743519][T16522] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1356.794601][ T26] audit: type=1326 audit(1742027140.320:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16724 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1356.833567][T16522] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1356.913415][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 1356.920218][ T26] audit: type=1326 audit(1742027140.320:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16724 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1356.929105][T16522] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1356.948510][ T26] audit: type=1326 audit(1742027140.320:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16724 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1357.004015][T16522] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1357.050146][ T26] audit: type=1326 audit(1742027140.320:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16724 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1357.161998][ T26] audit: type=1326 audit(1742027140.320:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16724 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1357.259802][ T26] audit: type=1326 audit(1742027140.320:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16724 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1357.353591][T16522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.402949][ T26] audit: type=1326 audit(1742027140.320:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16724 comm="syz.5.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1357.437188][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1358.081029][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1358.369414][T16522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.477676][T15752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1358.495791][T15752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1358.552691][T15752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.559901][T15752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1358.686319][T15752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1358.704093][T15752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1358.909536][T15752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.916834][T15752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1359.045757][T15752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1359.250947][T16522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1359.262744][T16522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1359.346752][T16751] infiniband syz0: set active [ 1359.363189][T16751] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1359.438318][T16751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1359.489536][T16751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1359.543645][T16751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1359.613825][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1359.652476][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1359.694245][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1359.749057][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1359.829094][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1359.851695][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1359.946496][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1359.984673][ T4250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1360.000025][ T4250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1360.011623][T15133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1360.039551][T15133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1360.060035][T15133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1360.068486][T15133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1360.424275][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1361.829186][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.835583][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.924067][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1361.993440][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1362.023730][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1362.053648][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1362.148294][T16774] loop5: detected capacity change from 0 to 1024 [ 1362.177107][T16774] EXT4-fs: Ignoring removed orlov option [ 1362.211325][T16774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1362.354223][T16774] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1362.503011][T11661] Bluetooth: hci1: command 0x0409 tx timeout [ 1362.538204][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.571709][T16522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.605492][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1362.672685][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1362.720808][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1362.766034][ T26] audit: type=1326 audit(1742027146.870:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16773 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1362.913684][ T26] audit: type=1326 audit(1742027146.870:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16773 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1363.063575][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1363.163123][ T26] audit: type=1326 audit(1742027146.870:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16773 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1363.260775][ T26] audit: type=1326 audit(1742027146.870:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16773 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1363.355798][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 1363.366049][T16763] wlan0 speed is unknown, defaulting to 1000 [ 1363.366881][ T26] audit: type=1326 audit(1742027146.870:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16773 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1363.395110][ T26] audit: type=1326 audit(1742027146.880:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16773 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1363.480021][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.503089][ T26] audit: type=1326 audit(1742027146.880:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16773 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1363.536774][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1363.563065][ T26] audit: type=1326 audit(1742027146.880:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16773 comm="syz.5.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1363.596845][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1363.616380][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1363.632375][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1363.660297][T16522] device veth0_vlan entered promiscuous mode [ 1363.842015][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.220188][T16522] device veth1_vlan entered promiscuous mode [ 1364.543549][T11661] Bluetooth: hci1: command 0x041b tx timeout [ 1364.606406][T16788] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1364.684331][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.508919][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1365.524328][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1365.560900][T16522] device veth0_macvtap entered promiscuous mode [ 1365.603805][T16522] device veth1_macvtap entered promiscuous mode [ 1365.887728][T16522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.898840][T16522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.912194][T16522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.923874][T16522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.934495][T16522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.945377][T16522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.955948][T16522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.967020][T16522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.983565][T16522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1366.013013][T16522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.035678][T16522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1366.079592][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1366.093742][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1366.140585][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1366.184076][T16522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1366.216603][T16522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.232957][T16522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1366.281099][T16522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.291920][T16522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1366.315401][T16522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.328763][T16522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1366.339739][T16522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.357163][T16522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1366.370484][T16522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.387136][T16522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1366.407816][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1366.428354][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1366.450205][T16763] chnl_net:caif_netlink_parms(): no params data found [ 1366.484819][T16522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.520036][T16522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.532305][T16522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.550649][T16522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.629564][T11661] Bluetooth: hci1: command 0x040f tx timeout [ 1367.518082][T16828] loop5: detected capacity change from 0 to 1024 [ 1367.580950][T16828] EXT4-fs: Ignoring removed orlov option [ 1367.589584][T16825] libceph: resolve '0.0' (ret=-3): failed [ 1367.595952][T16828] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1367.749351][T16828] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1368.102776][ T26] audit: type=1326 audit(1742027152.210:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16824 comm="syz.5.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1368.464974][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 1368.562936][ T26] audit: type=1326 audit(1742027152.210:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16824 comm="syz.5.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1368.605600][T16763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.616341][ T26] audit: type=1326 audit(1742027152.210:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16824 comm="syz.5.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1368.645976][T16763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.664307][T16763] device bridge_slave_0 entered promiscuous mode [ 1368.682934][ T26] audit: type=1326 audit(1742027152.210:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16824 comm="syz.5.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1368.916262][T11661] Bluetooth: hci1: command 0x0419 tx timeout [ 1368.963557][T16763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.970698][T16763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.554858][T16763] device bridge_slave_1 entered promiscuous mode [ 1369.598344][ T26] audit: type=1326 audit(1742027152.210:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16824 comm="syz.5.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1369.709549][T16791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.765960][ T26] audit: type=1326 audit(1742027152.210:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16824 comm="syz.5.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1369.788650][ T26] audit: type=1326 audit(1742027152.210:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16824 comm="syz.5.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1369.811859][ T26] audit: type=1326 audit(1742027152.210:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16824 comm="syz.5.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1369.834226][ C0] vkms_vblank_simulate: vblank timer overrun [ 1369.835446][T16791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.028345][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1370.052508][T16763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1370.085588][T16763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1371.558841][T16763] team0: Port device team_slave_0 added [ 1371.588478][T16763] team0: Port device team_slave_1 added [ 1371.739391][ T4419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.792970][ T4419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.090037][T16763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1372.116410][T16763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.199651][T16763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.241843][T16791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1372.283580][T16763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.290592][T16763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.393042][T16763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.026836][T16883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1373.082150][T16883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1373.120534][T16883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1373.430634][T16890] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 1373.475628][T16763] device hsr_slave_0 entered promiscuous mode [ 1373.544688][T16763] device hsr_slave_1 entered promiscuous mode [ 1373.606492][T16763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1373.619830][T16763] Cannot create hsr debugfs directory [ 1373.779441][ T11] device hsr_slave_0 left promiscuous mode [ 1373.787439][T16901] loop2: detected capacity change from 0 to 1024 [ 1373.809316][ T11] device hsr_slave_1 left promiscuous mode [ 1373.826545][T16901] EXT4-fs: Ignoring removed orlov option [ 1373.832247][T16901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1373.845316][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1373.883020][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.920720][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.939105][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1373.957348][ T11] device bridge_slave_1 left promiscuous mode [ 1373.958996][T16901] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1373.973040][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.984569][ T11] device bridge_slave_0 left promiscuous mode [ 1373.990844][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.320214][ T26] audit: type=1326 audit(1742027158.420:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16900 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1374.415193][ T26] audit: type=1326 audit(1742027158.420:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16900 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1374.857900][T16522] EXT4-fs (loop2): unmounting filesystem. [ 1374.883433][ T26] audit: type=1326 audit(1742027158.430:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16900 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1374.905633][ C0] vkms_vblank_simulate: vblank timer overrun [ 1375.023239][ T26] audit: type=1326 audit(1742027158.430:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16900 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1375.087964][ T26] audit: type=1326 audit(1742027158.430:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16900 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1375.180949][ T26] audit: type=1326 audit(1742027158.430:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16900 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1375.203354][ C0] vkms_vblank_simulate: vblank timer overrun [ 1375.252056][ T26] audit: type=1326 audit(1742027158.430:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16900 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1375.426020][ T26] audit: type=1326 audit(1742027158.430:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16900 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1376.701781][ T11] device veth1_macvtap left promiscuous mode [ 1376.717059][ T11] device veth0_macvtap left promiscuous mode [ 1376.748240][ T11] device veth1_vlan left promiscuous mode [ 1376.780944][ T11] device veth0_vlan left promiscuous mode [ 1378.842599][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1378.891683][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1378.949374][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.007877][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.595633][ T11] bond0 (unregistering): Released all slaves [ 1381.269158][T16950] loop2: detected capacity change from 0 to 1024 [ 1381.300205][T16950] EXT4-fs: Ignoring removed orlov option [ 1381.306981][T16763] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1381.336432][T16950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1381.376506][T16763] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1381.468791][T16963] libceph: resolve '0.0' (ret=-3): failed [ 1381.576573][T16763] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1381.615145][T16950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1381.844409][T16763] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1382.548271][ T26] audit: type=1326 audit(1742027166.230:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.2.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1382.756447][T16522] EXT4-fs (loop2): unmounting filesystem. [ 1382.845690][ T26] audit: type=1326 audit(1742027166.240:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.2.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1383.034239][ T26] audit: type=1326 audit(1742027166.240:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.2.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1383.152800][ T26] audit: type=1326 audit(1742027166.240:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.2.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1383.240658][T16763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1383.339822][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1383.355191][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1383.368702][ T26] audit: type=1326 audit(1742027166.240:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.2.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1383.420876][T16763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1383.455333][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1383.500886][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1383.519980][ T26] audit: type=1326 audit(1742027166.240:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.2.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1384.140740][T15919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.147990][T15919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1384.386303][ T26] audit: type=1326 audit(1742027166.240:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.2.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1384.409197][ T26] audit: type=1326 audit(1742027166.240:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.2.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1384.846671][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1384.876269][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1384.921134][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1384.954697][T15919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.961852][T15919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1384.975035][T15919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1385.025242][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1385.071667][T16991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 1385.094724][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1385.214178][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1385.258176][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1385.334570][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1385.425588][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1385.478482][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1385.506563][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1385.647599][T16763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1385.659898][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1385.685819][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1385.713900][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1387.132241][T17019] loop3: detected capacity change from 0 to 1024 [ 1388.005785][T17023] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1388.118857][T17024] Set syz0 is full, maxelem 0 reached [ 1388.969154][T17019] EXT4-fs: Ignoring removed orlov option [ 1389.069750][T17019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1389.185166][T17019] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1389.962197][ T26] audit: type=1326 audit(1742027173.980:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.3.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1390.223352][ T26] audit: type=1326 audit(1742027173.990:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.3.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1390.371902][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1390.381578][T16010] EXT4-fs (loop3): unmounting filesystem. [ 1390.389590][ T26] audit: type=1326 audit(1742027173.990:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.3.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1390.414220][ T26] audit: type=1326 audit(1742027173.990:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.3.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1390.436568][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.459192][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1390.487668][T16763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1390.496969][T17040] loop5: detected capacity change from 0 to 1024 [ 1390.512991][ T26] audit: type=1326 audit(1742027174.000:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.3.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1390.535339][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.554459][T17040] EXT4-fs: Ignoring removed orlov option [ 1390.560159][T17040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1390.641227][ T26] audit: type=1326 audit(1742027174.000:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.3.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1390.704431][ T26] audit: type=1326 audit(1742027174.000:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.3.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1390.745970][T17040] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1390.791502][ T26] audit: type=1326 audit(1742027174.000:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.3.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1390.867591][T17047] libceph: resolve '0.0' (ret=-3): failed [ 1391.615569][ T26] audit: type=1326 audit(1742027175.250:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17039 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1391.656912][ T6471] EXT4-fs (loop5): unmounting filesystem. [ 1392.176276][ T26] audit: type=1326 audit(1742027175.250:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17039 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79a98d169 code=0x7ffc0000 [ 1393.043144][T17065] loop6: detected capacity change from 0 to 524287999 [ 1393.065235][ C1] blk_print_req_error: 2 callbacks suppressed [ 1393.065252][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1393.080615][ C1] buffer_io_error: 7 callbacks suppressed [ 1393.080630][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1393.173018][T17068] loop6: detected capacity change from 524287999 to 524288000 [ 1393.221278][T17070] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1393.223218][T17065] loop6: unable to read partition table [ 1393.253801][T17065] loop_reread_partitions: partition scan of loop6 (Í¢†¨ÙÇ´WÝC@'OÈQžšÒ¥‹) failed (rc=-5) [ 1393.832712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1393.854995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1393.923396][T17085] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3210'. [ 1394.774614][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1394.845069][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1394.874454][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1394.898122][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1394.920247][T17089] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 1394.942284][T16763] device veth0_vlan entered promiscuous mode [ 1394.983603][T16763] device veth1_vlan entered promiscuous mode [ 1394.993983][T15133] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1395.005013][T15133] CPU: 0 PID: 15133 Comm: kworker/u5:2 Not tainted 6.1.131-syzkaller #0 [ 1395.013398][T15133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1395.023490][T15133] Workqueue: hci3 hci_rx_work [ 1395.028231][T15133] Call Trace: [ 1395.031541][T15133] [ 1395.034501][T15133] dump_stack_lvl+0x1e3/0x2cb [ 1395.039221][T15133] ? nf_tcp_handle_invalid+0x647/0x647 [ 1395.044716][T15133] ? panic+0x764/0x764 [ 1395.048820][T15133] sysfs_create_dir_ns+0x2c6/0x390 [ 1395.053965][T15133] ? sysfs_warn_dup+0xa0/0xa0 [ 1395.058671][T15133] kobject_add_internal+0x6df/0xd10 [ 1395.063915][T15133] kobject_add+0x14e/0x210 [ 1395.068370][T15133] ? device_add+0x3c2/0xfd0 [ 1395.072927][T15133] ? kobject_init+0x1d0/0x1d0 [ 1395.077627][T15133] ? __raw_spin_lock_init+0x41/0x100 [ 1395.082933][T15133] ? get_device_parent+0x128/0x400 [ 1395.088078][T15133] device_add+0x476/0xfd0 [ 1395.092430][T15133] hci_conn_add_sysfs+0xe4/0x1f0 [ 1395.097385][T15133] le_conn_complete_evt+0xcfe/0x1350 [ 1395.102697][T15133] ? trace_contention_end+0x61/0x170 [ 1395.108001][T15133] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 1395.114262][T15133] ? __mutex_unlock_slowpath+0x218/0x750 [ 1395.119917][T15133] ? mutex_unlock+0x10/0x10 [ 1395.124437][T15133] ? skb_pull_data+0x10e/0x220 [ 1395.129217][T15133] hci_le_conn_complete_evt+0x188/0x410 [ 1395.134790][T15133] hci_event_packet+0xa40/0x1510 [ 1395.139766][T15133] ? hci_remote_host_features_evt+0x270/0x270 [ 1395.145850][T15133] ? bis_list+0x290/0x290 [ 1395.150198][T15133] ? do_raw_spin_unlock+0x137/0x8a0 [ 1395.155411][T15133] ? kcov_remote_start+0x4ae/0x7c0 [ 1395.160542][T15133] ? lockdep_hardirqs_on+0x10/0x130 [ 1395.165756][T15133] ? hci_send_to_monitor+0x99/0x4d0 [ 1395.170974][T15133] hci_rx_work+0x3a6/0xd10 [ 1395.175414][T15133] ? process_one_work+0x806/0x1260 [ 1395.180542][T15133] process_one_work+0x917/0x1260 [ 1395.185508][T15133] ? worker_detach_from_pool+0x260/0x260 [ 1395.191157][T15133] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1395.196718][T15133] ? kthread_data+0x4e/0xc0 [ 1395.201244][T15133] ? wq_worker_running+0x97/0x190 [ 1395.206278][T15133] worker_thread+0xa47/0x1200 [ 1395.210977][T15133] ? _raw_spin_unlock+0x40/0x40 [ 1395.215834][T15133] ? release_firmware_map_entry+0x18b/0x18b [ 1395.221742][T15133] ? _raw_spin_unlock+0x40/0x40 [ 1395.226614][T15133] kthread+0x28d/0x320 [ 1395.230689][T15133] ? worker_clr_flags+0x190/0x190 [ 1395.235724][T15133] ? kthread_blkcg+0xd0/0xd0 [ 1395.240335][T15133] ret_from_fork+0x1f/0x30 [ 1395.244779][T15133] [ 1395.252196][T15133] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1395.265505][T15133] Bluetooth: hci3: failed to register connection device [ 1395.312758][T17099] loop6: detected capacity change from 0 to 1024 [ 1395.320270][T17099] EXT4-fs: Ignoring removed orlov option [ 1395.325993][T17099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1395.455984][T17099] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1395.532148][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1396.439861][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1396.439881][ T26] audit: type=1326 audit(1742027180.030:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1396.519357][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1396.529161][ T26] audit: type=1326 audit(1742027180.030:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1396.552435][ T26] audit: type=1326 audit(1742027180.030:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1396.587916][T16763] device veth0_macvtap entered promiscuous mode [ 1396.595102][ T8255] EXT4-fs (loop6): unmounting filesystem. [ 1396.597101][ T26] audit: type=1326 audit(1742027180.030:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1396.636280][T16763] device veth1_macvtap entered promiscuous mode [ 1396.895477][T16763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.926606][T16763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.872946][ T26] audit: type=1326 audit(1742027180.030:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1398.913050][T16763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.159114][T16763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.183002][ T26] audit: type=1326 audit(1742027180.030:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1399.184860][T16763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.224668][T16763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.240740][T16763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.251570][ T26] audit: type=1326 audit(1742027180.030:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1399.275431][T16763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.286290][T16763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.302704][ T26] audit: type=1326 audit(1742027180.030:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17098 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64678d169 code=0x7ffc0000 [ 1399.332378][T16763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.347176][T16763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.387640][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1399.413949][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1399.436640][T16763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.447490][T16763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.461126][T16763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.497482][T16763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.520884][T16763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.532467][T16763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.542927][T16763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.553742][T16763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.564008][T16763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.574856][T16763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.598390][T16763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.622476][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1399.647978][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1399.686608][T16763] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.723835][T16763] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.732593][T16763] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.747967][T16763] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.690273][T17137] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3225'. [ 1401.693797][T15133] Bluetooth: hci3: command 0x0406 tx timeout [ 1401.788618][ T4836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.833458][ T4836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.980179][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1402.010422][T17146] loop3: detected capacity change from 0 to 1024 [ 1402.019349][T17146] EXT4-fs: Ignoring removed orlov option [ 1402.034465][ T4471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.044959][T17144] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input15 [ 1402.056862][T17146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1402.066469][ T4471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.132368][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1402.191098][T17146] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1402.552304][ T26] audit: type=1326 audit(1742027186.660:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17145 comm="syz.3.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1403.073066][ T26] audit: type=1326 audit(1742027186.660:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17145 comm="syz.3.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1403.154862][ T26] audit: type=1326 audit(1742027186.660:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17145 comm="syz.3.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1403.156688][T16010] EXT4-fs (loop3): unmounting filesystem. [ 1403.184391][ T26] audit: type=1326 audit(1742027186.660:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17145 comm="syz.3.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1403.283854][ T26] audit: type=1326 audit(1742027186.660:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17145 comm="syz.3.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1403.369219][ T26] audit: type=1326 audit(1742027186.660:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17145 comm="syz.3.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1403.432706][ T26] audit: type=1326 audit(1742027186.660:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17145 comm="syz.3.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1403.573069][ T26] audit: type=1326 audit(1742027186.660:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17145 comm="syz.3.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1403.839328][T17172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1404.649564][T11661] Bluetooth: hci3: command 0x0406 tx timeout [ 1406.010882][T17203] loop2: detected capacity change from 0 to 1024 [ 1406.040195][T17203] EXT4-fs: Ignoring removed orlov option [ 1406.050233][T17203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1406.283853][T17203] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1407.667429][ T26] audit: type=1326 audit(1742027191.770:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17202 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1407.791655][ T26] audit: type=1326 audit(1742027191.770:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17202 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1407.791689][T17202] syz.2.3241 (17202) used greatest stack depth: 19496 bytes left [ 1407.895356][ T26] audit: type=1326 audit(1742027191.770:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17202 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1408.061362][ T26] audit: type=1326 audit(1742027191.770:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17202 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1408.225272][ T26] audit: type=1326 audit(1742027191.780:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17202 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1408.272127][ T26] audit: type=1326 audit(1742027191.780:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17202 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1408.300994][T16522] EXT4-fs (loop2): unmounting filesystem. [ 1408.485482][T17236] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1408.651210][ T26] audit: type=1326 audit(1742027191.780:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17202 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1409.254334][ T26] audit: type=1326 audit(1742027191.780:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17202 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4f8d169 code=0x7ffc0000 [ 1411.374150][T17261] overlayfs: failed to resolve './file0': -2 [ 1411.843062][T16762] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1412.058710][T16762] usb 7-1: Using ep0 maxpacket: 32 [ 1412.068256][T16762] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1412.875891][T16762] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1412.886039][T16762] usb 7-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1412.896275][T16762] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.906189][T16762] usb 7-1: config 0 descriptor?? [ 1413.009502][T17284] loop3: detected capacity change from 0 to 1024 [ 1413.038724][T17284] EXT4-fs: Ignoring removed orlov option [ 1413.063046][T17284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1413.304009][T17284] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1413.330306][T16762] hid-u2fzero 0003:10C4:8ACF.0007: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.6-1/input0 [ 1413.909782][ T26] audit: type=1326 audit(1742027198.020:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.3.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1414.369559][ T26] audit: type=1326 audit(1742027198.020:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.3.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1414.477148][T16762] hid-u2fzero 0003:10C4:8ACF.0007: U2F Zero LED initialised [ 1414.485545][T16762] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 1414.497313][T16762] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 1414.499646][T16010] EXT4-fs (loop3): unmounting filesystem. [ 1414.505734][T16762] CPU: 0 PID: 16762 Comm: kworker/0:2 Not tainted 6.1.131-syzkaller #0 [ 1414.505761][T16762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1414.505776][T16762] Workqueue: usb_hub_wq hub_event [ 1414.534946][T16762] RIP: 0010:u2fzero_rng_read+0x27d/0x750 [ 1414.540617][T16762] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 b2 a0 bb f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 14 a1 bb f9 48 8d 84 24 80 00 00 [ 1414.560693][T16762] RSP: 0018:ffffc90003dee720 EFLAGS: 00010202 [ 1414.566796][T16762] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000 [ 1414.574780][T16762] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888018d77669 [ 1414.582767][T16762] RBP: ffffc90003dee8d0 R08: dffffc0000000000 R09: ffff888018d7762e [ 1414.590744][T16762] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888041f233e0 [ 1414.598717][T16762] R13: 1ffff110083e4606 R14: ffff888041f23030 R15: dffffc0000000000 [ 1414.606695][T16762] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1414.615629][T16762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1414.622214][T16762] CR2: 000000110c342d04 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 1414.630192][T16762] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1414.638169][T16762] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1414.646320][T16762] Call Trace: [ 1414.649598][T16762] [ 1414.652529][T16762] ? __die_body+0x5e/0xa0 [ 1414.656874][T16762] ? die_addr+0x95/0xc0 [ 1414.661049][T16762] ? exc_general_protection+0x3ae/0x590 [ 1414.666629][T16762] ? asm_exc_general_protection+0x22/0x30 [ 1414.672382][T16762] ? u2fzero_rng_read+0x27d/0x750 [ 1414.677426][T16762] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1414.682982][T16762] ? mutex_lock_nested+0x10/0x10 [ 1414.687941][T16762] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1414.693502][T16762] add_early_randomness+0x78/0x140 [ 1414.698621][T16762] hwrng_register+0x3a0/0x440 [ 1414.703307][T16762] devm_hwrng_register+0x43/0xb0 [ 1414.708250][T16762] u2fzero_probe+0x31a/0x410 [ 1414.712888][T16762] ? hid_map_usage_clear+0x180/0x180 [ 1414.718202][T16762] hid_device_probe+0x298/0x3a0 [ 1414.723120][T16762] ? hid_uevent+0x310/0x310 [ 1414.727670][T16762] really_probe+0x2ab/0xcb0 [ 1414.732199][T16762] __driver_probe_device+0x1a2/0x3d0 [ 1414.737532][T16762] driver_probe_device+0x50/0x420 [ 1414.742620][T16762] __device_attach_driver+0x2cf/0x510 [ 1414.748039][T16762] ? coredump_store+0x90/0x90 [ 1414.752754][T16762] bus_for_each_drv+0x183/0x200 [ 1414.757676][T16762] ? subsys_find_device_by_id+0x310/0x310 [ 1414.763458][T16762] __device_attach+0x359/0x570 [ 1414.768272][T16762] ? device_attach+0x20/0x20 [ 1414.772909][T16762] ? kobject_uevent_env+0x54a/0x8c0 [ 1414.778273][T16762] ? kobject_uevent_env+0x54a/0x8c0 [ 1414.783534][T16762] bus_probe_device+0xba/0x1e0 [ 1414.788357][T16762] ? device_add+0xab9/0xfd0 [ 1414.792902][T16762] device_add+0xb48/0xfd0 [ 1414.797292][T16762] hid_add_device+0x3a5/0x510 [ 1414.802040][T16762] usbhid_probe+0xc09/0xfc0 [ 1414.806654][T16762] usb_probe_interface+0x5c0/0xaf0 [ 1414.811809][T16762] ? usb_register_driver+0x3d0/0x3d0 [ 1414.817129][T16762] really_probe+0x2ab/0xcb0 [ 1414.821699][T16762] __driver_probe_device+0x1a2/0x3d0 [ 1414.827055][T16762] driver_probe_device+0x50/0x420 [ 1414.832133][T16762] __device_attach_driver+0x2cf/0x510 [ 1414.837581][T16762] ? coredump_store+0x90/0x90 [ 1414.842307][T16762] bus_for_each_drv+0x183/0x200 [ 1414.847231][T16762] ? subsys_find_device_by_id+0x310/0x310 [ 1414.853019][T16762] __device_attach+0x359/0x570 [ 1414.857833][T16762] ? device_attach+0x20/0x20 [ 1414.862458][T16762] ? kobject_uevent_env+0x54a/0x8c0 [ 1414.867794][T16762] ? kobject_uevent_env+0x54a/0x8c0 [ 1414.873043][T16762] bus_probe_device+0xba/0x1e0 [ 1414.877861][T16762] ? device_add+0xab9/0xfd0 [ 1414.882401][T16762] device_add+0xb48/0xfd0 [ 1414.886787][T16762] usb_set_configuration+0x19dd/0x2020 [ 1414.892351][T16762] usb_generic_driver_probe+0x84/0x140 [ 1414.897878][T16762] usb_probe_device+0x130/0x260 [ 1414.902781][T16762] ? usb_register_device_driver+0x240/0x240 [ 1414.908713][T16762] really_probe+0x2ab/0xcb0 [ 1414.913235][T16762] __driver_probe_device+0x1a2/0x3d0 [ 1414.918536][T16762] driver_probe_device+0x50/0x420 [ 1414.923666][T16762] __device_attach_driver+0x2cf/0x510 [ 1414.929065][T16762] ? coredump_store+0x90/0x90 [ 1414.933753][T16762] bus_for_each_drv+0x183/0x200 [ 1414.938641][T16762] ? subsys_find_device_by_id+0x310/0x310 [ 1414.944409][T16762] __device_attach+0x359/0x570 [ 1414.949184][T16762] ? device_attach+0x20/0x20 [ 1414.953776][T16762] ? kobject_uevent_env+0x54a/0x8c0 [ 1414.958992][T16762] ? kobject_uevent_env+0x54a/0x8c0 [ 1414.964205][T16762] bus_probe_device+0xba/0x1e0 [ 1414.969008][T16762] ? device_add+0xab9/0xfd0 [ 1414.973529][T16762] device_add+0xb48/0xfd0 [ 1414.977873][T16762] usb_new_device+0xbdd/0x1900 [ 1414.982740][T16762] ? usb_disconnect+0x8c0/0x8c0 [ 1414.987596][T16762] ? do_raw_spin_unlock+0x137/0x8a0 [ 1414.992819][T16762] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1414.998027][T16762] ? lockdep_hardirqs_on+0x94/0x130 [ 1415.003235][T16762] hub_event+0x2efe/0x5730 [ 1415.007674][T16762] ? led_work+0x700/0x700 [ 1415.012008][T16762] ? read_lock_is_recursive+0x10/0x10 [ 1415.017388][T16762] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1415.023389][T16762] ? print_irqtrace_events+0x210/0x210 [ 1415.028858][T16762] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1415.034759][T16762] ? do_raw_spin_unlock+0x137/0x8a0 [ 1415.039984][T16762] ? process_one_work+0x806/0x1260 [ 1415.045108][T16762] process_one_work+0x917/0x1260 [ 1415.050093][T16762] ? worker_detach_from_pool+0x260/0x260 [ 1415.055734][T16762] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1415.061284][T16762] ? kthread_data+0x4e/0xc0 [ 1415.065802][T16762] ? wq_worker_running+0x97/0x190 [ 1415.070830][T16762] worker_thread+0xa47/0x1200 [ 1415.075513][T16762] ? _raw_spin_unlock+0x40/0x40 [ 1415.080367][T16762] ? release_firmware_map_entry+0x18b/0x18b [ 1415.086269][T16762] ? _raw_spin_unlock+0x40/0x40 [ 1415.091124][T16762] kthread+0x28d/0x320 [ 1415.095194][T16762] ? worker_clr_flags+0x190/0x190 [ 1415.100227][T16762] ? kthread_blkcg+0xd0/0xd0 [ 1415.104821][T16762] ret_from_fork+0x1f/0x30 [ 1415.109254][T16762] [ 1415.112270][T16762] Modules linked in: [ 1415.118328][T16762] ---[ end trace 0000000000000000 ]--- [ 1415.123854][T16762] RIP: 0010:u2fzero_rng_read+0x27d/0x750 [ 1415.129519][T16762] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 b2 a0 bb f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 14 a1 bb f9 48 8d 84 24 80 00 00 [ 1415.149641][T16762] RSP: 0018:ffffc90003dee720 EFLAGS: 00010202 [ 1415.155779][T16762] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000 [ 1415.163987][T16762] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888018d77669 [ 1415.172529][T16762] RBP: ffffc90003dee8d0 R08: dffffc0000000000 R09: ffff888018d7762e [ 1415.192976][ T26] audit: type=1326 audit(1742027198.020:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.3.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1415.215368][T16762] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888041f233e0 [ 1415.252872][ T26] audit: type=1326 audit(1742027198.020:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.3.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1415.280056][ T26] audit: type=1326 audit(1742027198.020:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.3.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1415.898721][T16762] R13: 1ffff110083e4606 R14: ffff888041f23030 R15: dffffc0000000000 [ 1415.945601][T16762] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1416.014449][T16762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1416.080873][ T26] audit: type=1326 audit(1742027198.020:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.3.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1416.181563][T16762] CR2: 0000559d3df6a950 CR3: 0000000057a4a000 CR4: 00000000003506f0 [ 1416.202891][T16762] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1416.221427][T16762] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1416.240715][ T26] audit: type=1326 audit(1742027198.020:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.3.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1416.281027][ T26] audit: type=1326 audit(1742027198.020:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.3.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad21d8d169 code=0x7ffc0000 [ 1416.284029][T16762] Kernel panic - not syncing: Fatal exception [ 1416.303645][T16762] Kernel Offset: disabled [ 1416.314024][T16762] Rebooting in 86400 seconds..