last executing test programs: 18.758317137s ago: executing program 2 (id=173): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002580)={r2, &(0x7f0000000080)="82f7", &(0x7f0000001580)=""/4096}, 0x20) 18.507287776s ago: executing program 0 (id=178): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a4", 0x5}], 0x1) close(0x4) 18.32202615s ago: executing program 2 (id=179): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) inotify_init1(0x80800) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 17.415670764s ago: executing program 2 (id=183): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x18000, &(0x7f0000005180), 0x81, 0x50d4, &(0x7f00000051c0)="$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") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000d00)={[{@grpjquota}, {@dioread_lock}, {@nobarrier}]}, 0xfe, 0x244, &(0x7f0000000840)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) 14.613615383s ago: executing program 5 (id=191): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1}, &(0x7f0000000080)=ANY=[], 0x0, 0x0) 14.324663024s ago: executing program 0 (id=196): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2804000, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@auto_da_alloc}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@nomblk_io_submit}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$eJzs3T1sG2UfAPD/neOmH3nf9JXeV3pBHSpAKlJVJ+kHFKZ2RVSq1AGJBSLXjao4dRU70ESRSPcK0QEB6lI2GBhBDAyIhZGVhY8ZqaIRSE0HMHJ8TtPUDk6oY4h/P+ns57k7+/9/fH4e353u5AAG1uHGQxrxREScTyJG1y0bimzh4eZ6K8uLxfvLi8Uk6vULPyeRRMS95cVia/0kez4QEUsR8f+I+CofcTRde8s9rUJ1fmF6slwuzWb1sdrM1bHq/MKxyzOTU6Wp0pUTz79w6vTJUxPHJ9ane7++vpbfWltvfH/z7RvfvHT75sefHFoqvjuZxJkYyZatb8fj1PxM8nFmw/yTvQjWR0m/E2Bbclk/b3Sl/8Vo5LJe3059/eAwvCPpAT1UH46or1lXBAZAotPDgGrtBzSOf1vTTu5/3DnbPABpxF1ZXiy+Fa34Q81zE7F39dhk/y/JQ0cmjePNgzuZKLvS0vWIGB8aevT7n2Tfv+0bfxwJ0lNfnm1uqEe3f7o2/kSb8Wekde70L2qNfyvZ+LfSJn6uw/h3vssYv7364wcd418fjifbxk/W4idt4qcR8XqX8W+98vnpTsvqH0YcifbxW5LNzw+PXbpcLo03H9vG+OLIoRc7tz9if4f4zXO2e1cTWd/+PVlOaZft/+zrT59a2iT+s09vvv3bff77IuKdLuP/595HL3dadud6crexF7DV7Z9EPm53Gf+5M4e/y4rOGgIAAAAAAAAAwGOUrl7LlqSFtXKaFgrNe3j/G/vTcqVaO3qpMpfLrnk7GPm0daXVaLOeNOoT2fW4rfrxDfUTuSxgbt9qvVCslC/2ue0AAAAAAAAAAAAAAAAAAADwd3Fgw/3/v+ZW7//f+HfVwG7V+S+/gd1O/4fB9XD/T/qWB7Dz/P7DwKpv3v/tD8Bu5vcfBpf+D4NL/4fB1bb/79v5PICd5/cfBpf+DwAAAAAAAAAAAAAAAAAAAAAAAAAAPXH+3LnGVL+/vFhs1C8Ozc9NV944drFUnS7MzBULxcrs1cJUpTJVLhWKlZk/e7+kUrk6Hlfmro3VStXaWHV+4bWZytyV1n+IlfI9bxEAAAAAAAAAAAAAAAAAAAD884ysTklaiMg362laKET8KyIOJpFculwujUfEvyPi21x+uFGf6HfSAAAAAAAAAAAAAAAAAAAAsMtU5xemJ8vl0mzvCkNZqO5e9UOtp/kMbWXliFjadJ181rSu02i845ZzbkXp7WYakEKuy+/hwBf6NCABAAAAAAAAAAAAAAAAAMAAe3DTb7ev+L23CQEAAAAAAAAAAAAAAAAAAMBASn9KIqIxHRl9ZmTj0j3JSm71OSLevHXhvWuTtdrsRGP+3bX5tfez+cf7kT/QrVY/TSOi0Y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB6rzC9OT5XJpdpuF4S7W6XcbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbjjwAAAP//QKjKig==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x11aa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0xff8) 14.297516579s ago: executing program 5 (id=197): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3, 0x6}, {0x4, 0xf}}, [@f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0x6}}]}}, @f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010102}]}}]}, 0x6c}}, 0x20000800) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000380)={0x0, 0x1, @stop_pts=0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x27) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0) 13.104538294s ago: executing program 4 (id=198): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmsg(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xcb6a, 0xc000, 0xc, 0xa0002f1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.102171458s ago: executing program 5 (id=199): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) kexec_load(0x2, 0x0, 0x0, 0x1) socket$inet(0x2, 0xa, 0xfffffffd) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000280)="80ef", 0x2}], 0x1) 12.992348453s ago: executing program 2 (id=202): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x43) 12.7688036s ago: executing program 3 (id=203): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000540)={0x1d, 0x0, 0x2, {0x1, 0xff, 0x4}}, 0x18) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, 0x0, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 12.717312541s ago: executing program 0 (id=204): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0xb4, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @xfrm={{0x9}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x16}, @NFTA_SET_EXPRESSIONS={0x5c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x20000085) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x3caa}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 12.693391694s ago: executing program 5 (id=205): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000900)=[{&(0x7f00000005c0)="10", 0x1}], 0x1) 12.686296821s ago: executing program 1 (id=206): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xf, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffa, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 12.399127999s ago: executing program 4 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000007800)='0\x00', 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socketpair(0x6, 0x6, 0x406, &(0x7f0000000100)) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRESOCT, @ANYBLOB='.'], 0x48) 12.374011726s ago: executing program 3 (id=208): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a4", 0x5}], 0x1) close(0x4) 12.257465757s ago: executing program 1 (id=209): r0 = creat(&(0x7f0000000040)='./file1\x00', 0x8) recvmsg$inet_nvme(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000400)=""/118, 0x76}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, 0x0, 0x20088c4) fallocate(r0, 0x0, 0x1, 0x2000402) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/eem.usb0\x00', 0x1ed) 11.921129896s ago: executing program 0 (id=210): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r5 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r3) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 9.741201674s ago: executing program 3 (id=211): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000010, &(0x7f0000002080)=ANY=[@ANYBLOB='shortname=winnt,nonumtail=0,shortname=win95,uni_xlate=1,iocharset=koi8-r\x00~tf8=1,shortname=winnt,iocharset=cp936,shortname=winy5,rodir,utf8=1,uni_xlate=1,nonumtail=0,shortname=lower,iocharset=macgreek,shortname=lower,\x00'], 0x7, 0x2a6, &(0x7f0000000740)="$eJzs3c2KI1UUAOBT+ekkukgWrkSYAl24GqZ9gm5kBLVBULJQF9o4GZBUGOhAIK0YZ+UT+AQ+jxtx6cYHUNw5C7GkUpWYzFR6TDvTPTTft+nDuffU/amia1U3n782Gd97ML3/8Otfo9tNonEUR/EoiUE0YuXbqPXz7/V5AOAF9yjP44+81ClT8+0e7R2VrcZznxwA8Fxsvv+3GrzdAeDG+ujjT94/Pjm5+2GadiMm382GSZR/y/bj+/FlZDGKO9GPvyLytTJ+592Tu9FKC4N4Y7KYDYvKyWc/Vtc//i1iWX8Y/RjU1x+mpY36xWzYjpeq8Y+yGH3wQ/TjlaLml/dWc1/Vv1VTH8ODePP1jfnfjn789EU8iCzuPVb/zWGavp1//+dXnxbZoj5ZzIaddb+qd/Oq7gkAAAAAAAAAAAAAAAAAAAAAADff7XRtsH3+zurg/wvanzwfqLc64Gexcb7PnTRN86Ts/299K15tRes61w4AAAAAAAAAAAAAAAAAAAAviun8fHya9SJiGWSjszKTzSNiO7NHsPqsv6Yp/t7OdCLiMkOUwa19q6JZTS1LiiW347+Xt6OzrHx65+aeqyi2PxudJa247IY/GSTrTK8MohFxNr0V5VhFplcGG5n/PXo3yrEq49PkaTe3W/eQPIMgr3n8mjurDh7P9KoV1HTuXTD6wcuXmnPe39GURER7vZkXX6f9bPfw6v4HAQAAAAAAAAAAAAAAAAAApen8fNxYfvRb0/jwGiYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANdgOj8fny5//3+PYFEV7+qTN4ugFVWmZtiDK14mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN9w/AQAA//8XQlpx") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) ptrace$cont(0x9, r1, 0xffd3, 0x0) r2 = semget(0xffffffffffffffff, 0x8, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x1, 0xffff, 0x1800}], 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000014006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 9.694013552s ago: executing program 1 (id=212): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="5723516f567cce2d2495e51c086d32d9785857a42688999e44d8f1e968171791d79a3f43d068a056ea1004", 0x2b}], 0x1}}], 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) 9.415351674s ago: executing program 4 (id=213): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x10) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x10000, 0x1, 0x0, 0x0, 0x0, 0x8fc0, 0x65f40}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = memfd_create(0x0, 0x2) ftruncate(r6, 0xffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e"], 0x0, 0x96}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) 9.393627105s ago: executing program 1 (id=214): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="e5", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0xfffe, 0xfff2}, 0x8) 9.349239373s ago: executing program 2 (id=215): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) 8.92954687s ago: executing program 3 (id=216): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='secret\x00', &(0x7f0000000200)='AQB1234567890123456789012345678901234567890=\x00', 0x0) 8.857665201s ago: executing program 5 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000000c0)="b11b6134dec3b03dc7e55de4c245a2103fcaf44b86cdffa16b5ba5450ca0a5fd1a8e788eca20cccc80d4f9579229cfa7cb7a", 0x32) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7fc}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r4, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000022, 0x0) 8.045340205s ago: executing program 4 (id=218): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) kexec_load(0x2, 0x0, 0x0, 0x1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0xfffffffffffffffe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x48, {0x2, 0x0, @broadcast}, 'ip6gretap0\x00'}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000280)="80ef", 0x2}], 0x1) 8.045081848s ago: executing program 1 (id=219): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f00000005c0)="943e047401") connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004fa000000000000825b440018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8a08ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.157285693s ago: executing program 3 (id=220): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000540)={0x1d, r1, 0x2, {0x1, 0xff, 0x4}}, 0x18) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 6.013766139s ago: executing program 5 (id=221): openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x102}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 5.889278341s ago: executing program 3 (id=222): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff}, 0x6) socket(0x2, 0x80805, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='4', 0x1) close(r2) keyctl$update(0x2, 0x0, 0x0, 0x5f) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r3, &(0x7f0000000500), 0xfa0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) getsockname(r4, 0x0, &(0x7f0000000080)) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='usb1', 0x4) write(r0, &(0x7f00000000c0)="510003", 0x3) syz_io_uring_setup(0x49da, &(0x7f0000000340)={0x0, 0x9ff2, 0x20000, 0x3, 0x104}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) mmap$IORING_OFF_PBUF_RING(0x0, 0xb, 0x2000008, 0x50, 0xffffffffffffffff, 0x87acb627) 5.8638803s ago: executing program 0 (id=223): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(0x4) 5.770608912s ago: executing program 4 (id=224): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f00000002c0)=0x3) 4.806408442s ago: executing program 1 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x400c4d07, &(0x7f0000000a00)) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) readv(r2, &(0x7f0000000380), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) times(0xfffffffffffffffc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0xe6c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) 2.869274148s ago: executing program 4 (id=226): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="5723516f567cce2d2495e51c086d32d9785857a42688999e44d8f1e968171791d79a3f43d068a056ea1004", 0x2b}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) 727.918808ms ago: executing program 2 (id=227): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) fallocate(0xffffffffffffffff, 0x12, 0x5000000, 0x41b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x10}, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x8010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_open_dev$dvb_frontend(&(0x7f0000001480), 0x0, 0x2) 0s ago: executing program 0 (id=228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r1 = epoll_create1(0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000600)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 79.829291][ T5593] cgroup: Unknown subsys name 'net' [ 79.959017][ T5593] cgroup: Unknown subsys name 'cpuset' [ 79.968291][ T5593] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.448058][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.000595][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.013053][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.016804][ T4921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.027565][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.035965][ T4921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.044886][ T4921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.053780][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.061238][ T4921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.070092][ T4921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.075428][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.093141][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.100956][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.111030][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.115187][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.126616][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.133846][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.139960][ T4921] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.149636][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.159093][ T4921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.166930][ T4921] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.176063][ T4921] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.183864][ T4921] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.191477][ T4921] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.199165][ T4921] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.207559][ T4921] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.216142][ T4921] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.223313][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.231890][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.240616][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.248745][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.136123][ T5623] Bluetooth: hci1: command tx timeout [ 86.141938][ T5608] Bluetooth: hci0: command tx timeout [ 86.226102][ T5608] Bluetooth: hci2: command tx timeout [ 86.232223][ T5623] Bluetooth: hci3: command tx timeout [ 86.297484][ T5623] Bluetooth: hci5: command tx timeout [ 86.303520][ T5608] Bluetooth: hci4: command tx timeout [ 86.639459][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.646769][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.654399][ T5617] bridge_slave_0: entered allmulticast mode [ 86.662425][ T5617] bridge_slave_0: entered promiscuous mode [ 86.722467][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.729952][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.737752][ T5617] bridge_slave_1: entered allmulticast mode [ 86.745252][ T5617] bridge_slave_1: entered promiscuous mode [ 86.752617][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.759758][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.766923][ T5605] bridge_slave_0: entered allmulticast mode [ 86.774339][ T5605] bridge_slave_0: entered promiscuous mode [ 86.851616][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.858977][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.866272][ T5605] bridge_slave_1: entered allmulticast mode [ 86.873804][ T5605] bridge_slave_1: entered promiscuous mode [ 86.881205][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.888343][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.895575][ T5604] bridge_slave_0: entered allmulticast mode [ 86.903013][ T5604] bridge_slave_0: entered promiscuous mode [ 86.940441][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.962287][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.969529][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.976793][ T5604] bridge_slave_1: entered allmulticast mode [ 86.984270][ T5604] bridge_slave_1: entered promiscuous mode [ 87.011814][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.019024][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.026760][ T5621] bridge_slave_0: entered allmulticast mode [ 87.034197][ T5621] bridge_slave_0: entered promiscuous mode [ 87.044776][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.114761][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.122259][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.130031][ T5621] bridge_slave_1: entered allmulticast mode [ 87.137674][ T5621] bridge_slave_1: entered promiscuous mode [ 87.177448][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.203700][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.211901][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.219480][ T5613] bridge_slave_0: entered allmulticast mode [ 87.227069][ T5613] bridge_slave_0: entered promiscuous mode [ 87.261391][ T5617] team0: Port device team_slave_0 added [ 87.269618][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.281675][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.291031][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.298387][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.305811][ T5613] bridge_slave_1: entered allmulticast mode [ 87.313235][ T5613] bridge_slave_1: entered promiscuous mode [ 87.320494][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.327975][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.335328][ T5618] bridge_slave_0: entered allmulticast mode [ 87.342782][ T5618] bridge_slave_0: entered promiscuous mode [ 87.353986][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.365549][ T5617] team0: Port device team_slave_1 added [ 87.386101][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.419501][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.426911][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.434054][ T5618] bridge_slave_1: entered allmulticast mode [ 87.441744][ T5618] bridge_slave_1: entered promiscuous mode [ 87.451480][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.549329][ T5605] team0: Port device team_slave_0 added [ 87.557659][ T5604] team0: Port device team_slave_0 added [ 87.566817][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.602246][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.609527][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.635833][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.650016][ T5605] team0: Port device team_slave_1 added [ 87.657766][ T5604] team0: Port device team_slave_1 added [ 87.667160][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.679577][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.691737][ T5621] team0: Port device team_slave_0 added [ 87.698293][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.705626][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.731913][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.781270][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.792544][ T5621] team0: Port device team_slave_1 added [ 87.876540][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.883772][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.910891][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.923729][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.932380][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.958691][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.974519][ T5613] team0: Port device team_slave_0 added [ 88.031215][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.038532][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.064723][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.076884][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.084170][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.110680][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.123747][ T5613] team0: Port device team_slave_1 added [ 88.131435][ T5618] team0: Port device team_slave_0 added [ 88.139333][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.146794][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.173338][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.215262][ T5608] Bluetooth: hci0: command tx timeout [ 88.221208][ T5623] Bluetooth: hci1: command tx timeout [ 88.228812][ T5618] team0: Port device team_slave_1 added [ 88.235637][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.242717][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.268741][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.288221][ T5617] hsr_slave_0: entered promiscuous mode [ 88.294773][ T5617] hsr_slave_1: entered promiscuous mode [ 88.305293][ T5623] Bluetooth: hci3: command tx timeout [ 88.310844][ T5608] Bluetooth: hci2: command tx timeout [ 88.330464][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.337958][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.363940][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.376387][ T5623] Bluetooth: hci5: command tx timeout [ 88.381811][ T5608] Bluetooth: hci4: command tx timeout [ 88.472432][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.480101][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.506213][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.530358][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.537340][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.563264][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.621622][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.628738][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.654679][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.681009][ T5605] hsr_slave_0: entered promiscuous mode [ 88.687537][ T5605] hsr_slave_1: entered promiscuous mode [ 88.693722][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 88.700047][ T5605] Cannot create hsr debugfs directory [ 88.768274][ T5604] hsr_slave_0: entered promiscuous mode [ 88.774804][ T5604] hsr_slave_1: entered promiscuous mode [ 88.781777][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 88.787763][ T5604] Cannot create hsr debugfs directory [ 88.812504][ T5621] hsr_slave_0: entered promiscuous mode [ 88.819903][ T5621] hsr_slave_1: entered promiscuous mode [ 88.826341][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 88.832052][ T5621] Cannot create hsr debugfs directory [ 88.873418][ T5613] hsr_slave_0: entered promiscuous mode [ 88.880585][ T5613] hsr_slave_1: entered promiscuous mode [ 88.886944][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 88.892658][ T5613] Cannot create hsr debugfs directory [ 88.992932][ T5618] hsr_slave_0: entered promiscuous mode [ 88.999739][ T5618] hsr_slave_1: entered promiscuous mode [ 89.006169][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 89.011893][ T5618] Cannot create hsr debugfs directory [ 89.641454][ T5617] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.653291][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.662044][ T5617] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.672534][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.694372][ T5617] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.704838][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.728898][ T5617] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.740381][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.805009][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.817953][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.826267][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.837421][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.853577][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.863797][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.872178][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.882944][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.982034][ T5604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.994199][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.003393][ T5604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.014315][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.022613][ T5604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.033313][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.042037][ T5604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.051900][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.190836][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.202993][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.217478][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.228351][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.236389][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.247344][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.256193][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.267452][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.284189][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.295984][ T5608] Bluetooth: hci1: command tx timeout [ 90.301418][ T5623] Bluetooth: hci0: command tx timeout [ 90.375216][ T5608] Bluetooth: hci2: command tx timeout [ 90.380685][ T5623] Bluetooth: hci3: command tx timeout [ 90.413657][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.439040][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.455656][ T5623] Bluetooth: hci4: command tx timeout [ 90.455803][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.461841][ T5623] Bluetooth: hci5: command tx timeout [ 90.468425][ T3259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.486442][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.497509][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.516139][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.526899][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.534793][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.547296][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.557166][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.564261][ T3259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.594305][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.604948][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.650194][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.712907][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.720057][ T3259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.731379][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.738509][ T3259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.788323][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.799206][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.821754][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.832953][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.854482][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.866888][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.878059][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.889900][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.909000][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.029137][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.043902][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.082233][ T744] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.089461][ T744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.121169][ T744] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.128340][ T744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.184776][ T882] cfg80211: failed to load regulatory.db [ 91.203247][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.274865][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.282128][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.307210][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.314357][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.434975][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.523566][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.563390][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.570615][ T3316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.606979][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.672460][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.679700][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.730177][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.790503][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.797722][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.870417][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.877636][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.221638][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.277352][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.378108][ T5608] Bluetooth: hci1: command tx timeout [ 92.383588][ T5623] Bluetooth: hci0: command tx timeout [ 92.457568][ T5623] Bluetooth: hci2: command tx timeout [ 92.463056][ T5608] Bluetooth: hci3: command tx timeout [ 92.535270][ T5608] Bluetooth: hci5: command tx timeout [ 92.540741][ T5623] Bluetooth: hci4: command tx timeout [ 92.621620][ T5621] veth0_vlan: entered promiscuous mode [ 92.694643][ T5621] veth1_vlan: entered promiscuous mode [ 92.866112][ T5621] veth0_macvtap: entered promiscuous mode [ 92.903957][ T5621] veth1_macvtap: entered promiscuous mode [ 92.997155][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.049717][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.134164][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.156624][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.196218][ T3259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.250907][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.268500][ T3316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.454156][ T5617] veth0_vlan: entered promiscuous mode [ 93.504710][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.534489][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.564000][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.583393][ T5617] veth1_vlan: entered promiscuous mode [ 93.613262][ T5605] veth0_vlan: entered promiscuous mode [ 93.650828][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.677019][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.690357][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.713006][ T5605] veth1_vlan: entered promiscuous mode [ 93.828404][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.932240][ T5613] veth0_vlan: entered promiscuous mode [ 93.943400][ T5605] veth0_macvtap: entered promiscuous mode [ 93.952407][ T5617] veth0_macvtap: entered promiscuous mode [ 93.988581][ T5617] veth1_macvtap: entered promiscuous mode [ 94.002099][ T5605] veth1_macvtap: entered promiscuous mode [ 94.014754][ T5618] veth0_vlan: entered promiscuous mode [ 94.046049][ T1042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.061742][ T5613] veth1_vlan: entered promiscuous mode [ 94.117460][ T5618] veth1_vlan: entered promiscuous mode [ 94.130837][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.183277][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.199551][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.214217][ T5604] veth0_vlan: entered promiscuous mode [ 94.227592][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.271840][ T5604] veth1_vlan: entered promiscuous mode [ 94.286732][ T1042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.329143][ T5618] veth0_macvtap: entered promiscuous mode [ 94.343761][ T5613] veth0_macvtap: entered promiscuous mode [ 94.355514][ T75] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.373526][ T5618] veth1_macvtap: entered promiscuous mode [ 94.396199][ T5613] veth1_macvtap: entered promiscuous mode [ 94.519825][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.559906][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.577222][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.596732][ T5604] veth0_macvtap: entered promiscuous mode [ 94.633760][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.640293][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.643355][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.689976][ T5604] veth1_macvtap: entered promiscuous mode [ 94.746506][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.767215][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.838717][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.863234][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.936173][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.953160][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.965700][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.052520][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.151903][ T3316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.159120][ T3259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.181435][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.192931][ T3259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.446057][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.485179][ T3316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.499735][ T3316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.612239][ T3316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.626417][ T3259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.642651][ T3316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.666083][ T3259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.867107][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.889876][ T75] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.917332][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.229000][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.780887][ T5868] loop2: detected capacity change from 0 to 2048 [ 96.798441][ T75] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.891245][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.923629][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.950539][ T5868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.792537][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.801370][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.805635][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.958042][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.066560][ T5890] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 98.810811][ T5894] 8021q: VLANs not supported on ip6tnl0 [ 98.822142][ T5902] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.864257][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.781240][ T3259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.397730][ T5917] loop4: detected capacity change from 0 to 256 [ 100.426584][ T5902] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.481683][ T5902] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.607343][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.511492][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.524388][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.801674][ T5924] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 102.158576][ T75] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.358392][ T5930] GUP no longer grows the stack in syz.5.27 (5930): 200000005000-200000008000 (200000004000) [ 102.423055][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz.5.27 Not tainted syzkaller #0 PREEMPT(full) [ 102.423087][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.423103][ T5930] Call Trace: [ 102.423113][ T5930] [ 102.423123][ T5930] dump_stack_lvl+0xe8/0x150 [ 102.423165][ T5930] fixup_user_fault+0x637/0x6f0 [ 102.423213][ T5930] fault_in_user_writeable+0x71/0xd0 [ 102.423248][ T5930] futex_lock_pi+0x7ba/0xab0 [ 102.423289][ T5930] ? __pfx_futex_lock_pi+0x10/0x10 [ 102.423339][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.423369][ T5930] ? futex_private_hash_put+0x14e/0x180 [ 102.423406][ T5930] ? __pfx_futex_wake_mark+0x10/0x10 [ 102.423442][ T5930] ? userfaultfd_unmap_complete+0x292/0x310 [ 102.423484][ T5930] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 102.423531][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.423565][ T5930] do_futex+0x330/0x4e0 [ 102.423609][ T5930] ? __pfx_do_futex+0x10/0x10 [ 102.423646][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.423674][ T5930] ? __vm_munmap+0x2fe/0x3e0 [ 102.423719][ T5930] __se_sys_futex+0x3a8/0x450 [ 102.423764][ T5930] ? __pfx___se_sys_futex+0x10/0x10 [ 102.423801][ T5930] ? rcu_is_watching+0x15/0xb0 [ 102.423845][ T5930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.423873][ T5930] ? __x64_sys_futex+0x21/0xf0 [ 102.423910][ T5930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.423937][ T5930] do_syscall_64+0x174/0x580 [ 102.423971][ T5930] ? trace_irq_disable+0x3b/0x140 [ 102.424007][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.424032][ T5930] RIP: 0033:0x7f5b6539e0d9 [ 102.424053][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.424073][ T5930] RSP: 002b:00007f5b661f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.424099][ T5930] RAX: ffffffffffffffda RBX: 00007f5b65625fa0 RCX: 00007f5b6539e0d9 [ 102.424116][ T5930] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 102.424131][ T5930] RBP: 00007f5b65435024 R08: 0000000000000000 R09: 0000000000000001 [ 102.424145][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.424159][ T5930] R13: 00007f5b65626038 R14: 00007f5b65625fa0 R15: 00007ffe4ef6be78 [ 102.424197][ T5930] [ 102.805879][ T5932] loop0: detected capacity change from 0 to 2048 [ 102.941925][ T5941] loop4: detected capacity change from 0 to 256 [ 103.779240][ T5932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.809979][ T5932] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 104.039581][ T5605] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.195604][ T5953] syz.2.34 uses obsolete (PF_INET,SOCK_PACKET) [ 106.114108][ T5967] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 107.265868][ T5985] netlink: 'syz.5.45': attribute type 1 has an invalid length. [ 108.507853][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.45'. [ 108.552153][ T5995] loop2: detected capacity change from 0 to 2048 [ 108.934881][ T6004] capability: warning: `syz.4.50' uses deprecated v2 capabilities in a way that may be insecure [ 109.391780][ T5995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.489920][ T5995] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 111.664379][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.637495][ T6020] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 113.495526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 114.867162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.645880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.055407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 116.465167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 116.785322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 117.286132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 118.205285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 118.616256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 118.625258][ T5608] Bluetooth: hci0: command 0x0401 tx timeout [ 119.112957][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.67'. [ 119.151581][ T6052] loop0: detected capacity change from 0 to 256 [ 119.193902][ T6052] ======================================================= [ 119.193902][ T6052] WARNING: The mand mount option has been deprecated and [ 119.193902][ T6052] and is ignored by this kernel. Remove the mand [ 119.193902][ T6052] option from the mount to silence this warning. [ 119.193902][ T6052] ======================================================= [ 120.599043][ T6076] netlink: 'syz.0.75': attribute type 4 has an invalid length. [ 122.571432][ T6109] Zero length message leads to an empty skb [ 123.140461][ T6113] loop0: detected capacity change from 0 to 256 [ 123.206932][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.87'. [ 123.248728][ T6113] FAT-fs (loop0): data area starts beyond volume (274 > 64) [ 123.312155][ T6113] FAT-fs (loop0): Can't find a valid FAT filesystem [ 124.272806][ T6129] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 124.536825][ T5608] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 124.550214][ T5608] Bluetooth: hci2: Injecting HCI hardware error event [ 124.560522][ T5608] Bluetooth: hci2: hardware error 0x00 [ 125.407218][ T6129] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 126.051042][ T6139] loop2: detected capacity change from 0 to 4096 [ 126.094130][ T6139] EXT4-fs: Ignoring removed oldalloc option [ 126.223024][ T6152] loop3: detected capacity change from 0 to 256 [ 126.263139][ T6139] EXT4-fs (loop2): Test dummy encryption mode enabled [ 126.563525][ T6160] binder: 6159:6160 ioctl 4018620d 0 returned -22 [ 126.611160][ T6139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.796344][ T6163] loop4: detected capacity change from 0 to 128 [ 126.885198][ T6139] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 127.160197][ T6139] EXT4-fs error (device loop2): ext4_empty_dir:3101: inode #12: block 80: comm syz.2.96: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 127.285171][ T6139] EXT4-fs warning (device loop2): ext4_empty_dir:3104: inode #12: comm syz.2.96: directory missing '..' [ 127.388924][ T6172] loop0: detected capacity change from 0 to 256 [ 127.404827][ T6172] vfat: Unknown parameter '' [ 127.968912][ T5608] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 128.298542][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.106'. [ 128.351029][ T6172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.357253][ T6172] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.464278][ T6172] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.497590][ T6172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.504362][ T6172] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.543858][ T6172] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.610698][ T6172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.616813][ T6172] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 128.696336][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.739155][ T6172] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 128.784208][ T6172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 128.790495][ T6172] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 128.833857][ T6172] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 128.874911][ T6172] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 128.881038][ T6172] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 128.919255][ T6172] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 129.825171][ T6201] loop5: detected capacity change from 0 to 256 [ 130.501693][ T5608] Bluetooth: hci0: command 0x0401 tx timeout [ 130.537329][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.581324][ T6204] loop2: detected capacity change from 0 to 1035 [ 130.705461][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.848606][ T6204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.864788][ T5608] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.865335][ T6204] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.935323][ T5608] Bluetooth: hci5: command 0x0c1a tx timeout [ 132.058230][ T6220] program syz.1.119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.181993][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.201071][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.422362][ T6225] loop3: detected capacity change from 0 to 128 [ 132.465902][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 132.533227][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.544380][ T5608] Bluetooth: hci0: command 0x0401 tx timeout [ 132.618917][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.781776][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.816064][ T6233] loop1: detected capacity change from 0 to 256 [ 132.823301][ T6233] exfat: Deprecated parameter 'utf8' [ 132.828792][ T6233] exfat: Deprecated parameter 'utf8' [ 132.834172][ T6233] exfat: Deprecated parameter 'utf8' [ 132.935729][ T5608] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.016016][ T5608] Bluetooth: hci5: command 0x0c1a tx timeout [ 133.126915][ T6233] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 133.788798][ T6249] loop3: detected capacity change from 0 to 256 [ 133.852186][ T6249] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 133.903301][ T6249] FAT-fs (loop3): Filesystem has been set read-only [ 134.042100][ T6260] loop1: detected capacity change from 0 to 256 [ 134.204814][ T6267] loop0: detected capacity change from 0 to 128 [ 134.247467][ T6270] loop3: detected capacity change from 0 to 512 [ 134.277905][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.142'. [ 134.396273][ T6270] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 134.449931][ T6270] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.141: corrupted in-inode xattr: e_value size too large [ 134.479867][ T6270] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.485096][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 134.502276][ C0] EXT4-fs (loop3): initial error at time 1786123379: ext4_iget_extra_inode:5180: inode 15 [ 134.512360][ C0] EXT4-fs (loop3): last error at time 1786123379: ext4_iget_extra_inode:5180: inode 15 [ 134.559482][ T6270] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.141: couldn't read orphan inode 15 (err -117) [ 134.581363][ T6270] loop3: lost filesystem error report for type 5 error -117 [ 134.617552][ T5608] Bluetooth: hci0: command 0x0401 tx timeout [ 134.640595][ T6270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.697823][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.855268][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.015114][ T5608] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.095133][ T5608] Bluetooth: hci5: command 0x0c1a tx timeout [ 136.402187][ T30] audit: type=1800 audit(1786123381.211:2): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.146" name="file0" dev="overlay" ino=158 res=0 errno=0 [ 137.350856][ T6305] loop4: detected capacity change from 0 to 1024 [ 137.532943][ T30] audit: type=1804 audit(1786123382.451:3): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.149" name="/newroot/22/file0" dev="tmpfs" ino=135 res=1 errno=0 [ 137.784188][ T6305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.856239][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.164052][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.155'. [ 139.269106][ T6322] loop5: detected capacity change from 0 to 512 [ 139.802412][ T6322] EXT4-fs error (device loop5): ext4_quota_enable:7228: comm syz.5.154: Bad quota inum: 2, type: 1 [ 139.814350][ T6322] loop5: lost filesystem error report for type 5 error -117 [ 139.816251][ C1] EXT4-fs (loop5): initial error at time 1786123384: ext4_quota_enable:7228 [ 139.832286][ C1] EXT4-fs (loop5): last error at time 1786123384: ext4_quota_enable:7228 [ 139.841773][ T6322] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 139.860793][ T6322] EXT4-fs (loop5): mount failed [ 139.928965][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 140.065307][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.424070][ T6377] loop2: detected capacity change from 0 to 256 [ 141.440144][ T6375] kAFS: Can only specify source 'none' with -o dyn [ 141.576517][ T6380] input: syz1 as /devices/virtual/input/input5 [ 141.989162][ T6383] Bluetooth: MGMT ver 1.23 [ 142.245482][ T6383] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 142.415819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 144.548825][ T6393] loop0: detected capacity change from 0 to 128 [ 144.653649][ T6393] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.715954][ T6401] loop3: detected capacity change from 0 to 512 [ 144.766690][ T6393] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.810405][ T6401] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.167: iget: bad i_size value: 38620345925642 [ 144.834565][ T6401] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 144.835071][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 144.850817][ C1] EXT4-fs (loop3): initial error at time 1786123389: ext4_orphan_get:1399: inode 15 [ 144.860284][ C1] EXT4-fs (loop3): last error at time 1786123389: ext4_orphan_get:1399: inode 15 [ 144.878004][ T6401] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.167: couldn't read orphan inode 15 (err -117) [ 144.956718][ T6401] loop3: lost filesystem error report for type 5 error -117 [ 144.965467][ T6401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.058857][ T5605] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.458707][ T6413] 9pnet_fd: Insufficient options for proto=fd [ 146.317265][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 146.391802][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'. [ 146.485201][ T6359] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:16: bg 0: block 5: invalid block bitmap [ 146.536996][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.174'. [ 146.578081][ T29] usb 1-1: Dual-Role OTG device on HNP port [ 146.587848][ T6359] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 496 with error 28 [ 146.607932][ T29] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 146.649910][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.664952][ T6359] EXT4-fs (loop3): This should not happen!! Data will be lost [ 146.664952][ T6359] [ 146.711835][ T6359] EXT4-fs (loop3): Total free blocks count 0 [ 146.743883][ T6359] EXT4-fs (loop3): Free/Dirty block details [ 146.772426][ T6424] loop5: detected capacity change from 0 to 256 [ 146.790074][ T6359] EXT4-fs (loop3): free_blocks=0 [ 146.807723][ T6359] EXT4-fs (loop3): dirty_blocks=500 [ 146.836742][ T6359] EXT4-fs (loop3): Block reservation details [ 146.865971][ T29] gspca_main: spca501-2.14.0 probing 0000:0000 [ 146.874944][ T6359] EXT4-fs (loop3): i_reserved_data_blocks=500 [ 146.900143][ T29] gspca_spca501: reg write: error -32 [ 146.915151][ T29] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 146.961289][ T29] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 147.074125][ T5613] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 147.153508][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.251600][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 147.270615][ T6430] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 149.174864][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.185'. [ 150.248557][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.189'. [ 150.942262][ T6474] loop4: detected capacity change from 0 to 256 [ 150.956833][ T6473] loop1: detected capacity change from 0 to 1024 [ 151.271739][ T6479] loop0: detected capacity change from 0 to 1024 [ 151.281220][ T6479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.289643][ T6479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.089378][ T6479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 152.142165][ T6479] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.403275][ T6352] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u8:13: lblock 0 mapped to illegal pblock 0 (length 4) [ 152.470327][ T6352] EXT4-fs (loop0): Remounting filesystem read-only [ 152.519841][ T5605] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 152.553534][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 152.838354][ T6506] capability: warning: `syz.0.204' uses 32-bit capabilities (legacy support in use) [ 152.871034][ T6498] loop2: detected capacity change from 0 to 4096 [ 152.893281][ T6506] program syz.0.204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.948688][ T6498] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.055154][ T6498] EXT4-fs (loop2): Test dummy encryption mode enabled [ 153.163344][ T6498] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 153.211846][ T5754] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 153.233316][ T6498] System zones: 0-5 [ 153.260295][ T6498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.331411][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 155.310477][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 155.322487][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 155.334611][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 155.503277][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 155.697616][ T6529] loop3: detected capacity change from 0 to 256 [ 156.068412][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.098828][ T5754] usb 6-1: string descriptor 0 read error: -71 [ 157.062747][ T5754] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 157.072041][ T5754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.099383][ T5754] usb 6-1: config 0 descriptor?? [ 157.105852][ T5754] usb 6-1: can't set config #0, error -71 [ 158.948560][ T5754] usb 6-1: USB disconnect, device number 2 [ 162.414526][ T6549] usb 1-1: USB disconnect, device number 2 [ 164.446931][ T6562] MTRR 1 not used [ 166.460161][ T6549] ================================================================== [ 166.468246][ T6549] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x602/0x7b0 [ 166.476404][ T6549] Write of size 8 at addr ffff888029ce8350 by task syz.3.222/6549 [ 166.484202][ T6549] [ 166.486547][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.3.222 Not tainted syzkaller #0 PREEMPT(full) [ 166.486569][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 166.486581][ T6549] Call Trace: [ 166.486591][ T6549] [ 166.486599][ T6549] dump_stack_lvl+0xe8/0x150 [ 166.486629][ T6549] print_address_description+0x55/0x1e0 [ 166.486655][ T6549] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 166.486684][ T6549] print_report+0x58/0x70 [ 166.486706][ T6549] kasan_report+0x117/0x150 [ 166.486736][ T6549] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 166.486767][ T6549] snd_usb_midi_v2_free+0x602/0x7b0 [ 166.486800][ T6549] snd_usb_midi_v2_free_all+0x67/0x90 [ 166.486830][ T6549] snd_usb_audio_free+0x4c/0x100 [ 166.486852][ T6549] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 166.486873][ T6549] release_card_device+0xab/0x1b0 [ 166.486901][ T6549] ? __pfx_release_card_device+0x10/0x10 [ 166.486929][ T6549] device_release+0xc4/0x1f0 [ 166.486955][ T6549] kobject_put+0x222/0x550 [ 166.486988][ T6549] usb_unbind_interface+0x295/0x9f0 [ 166.487020][ T6549] ? kernfs_remove_by_name_ns+0x101/0x140 [ 166.487042][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.487065][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.487088][ T6549] ? __pfx_usb_unbind_interface+0x10/0x10 [ 166.487118][ T6549] device_release_driver_internal+0x4f5/0x880 [ 166.487144][ T6549] bus_remove_device+0x444/0x560 [ 166.487175][ T6549] ? __pfx_bus_remove_device+0x10/0x10 [ 166.487205][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.487227][ T6549] ? kernfs_remove_by_name_ns+0x101/0x140 [ 166.487247][ T6549] device_del+0x524/0x8f0 [ 166.487270][ T6549] ? __pfx_device_del+0x10/0x10 [ 166.487288][ T6549] ? __pfx___mutex_lock+0x10/0x10 [ 166.487314][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.487340][ T6549] usb_disable_device+0x3d4/0x8d0 [ 166.487373][ T6549] usb_disconnect+0x346/0x9a0 [ 166.487402][ T6549] hub_quiesce+0x171/0x330 [ 166.487434][ T6549] hub_disconnect+0xc6/0x450 [ 166.487464][ T6549] usb_unbind_interface+0x295/0x9f0 [ 166.487494][ T6549] ? kernfs_remove_by_name_ns+0x101/0x140 [ 166.487516][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.487547][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.487571][ T6549] ? __pfx_usb_unbind_interface+0x10/0x10 [ 166.487601][ T6549] device_release_driver_internal+0x4f5/0x880 [ 166.487626][ T6549] bus_remove_device+0x444/0x560 [ 166.487657][ T6549] ? __pfx_bus_remove_device+0x10/0x10 [ 166.487687][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.487709][ T6549] ? kernfs_remove_by_name_ns+0x101/0x140 [ 166.487729][ T6549] device_del+0x524/0x8f0 [ 166.487752][ T6549] ? __pfx_device_del+0x10/0x10 [ 166.487769][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.487791][ T6549] ? kobject_put+0x516/0x550 [ 166.487825][ T6549] usb_disable_device+0x3d4/0x8d0 [ 166.487857][ T6549] usb_set_configuration+0x449/0x2180 [ 166.487886][ T6549] ? __up_read+0x29c/0x930 [ 166.487909][ T6549] ? blocking_notifier_call_chain+0x74/0x90 [ 166.487938][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.487959][ T6549] ? blocking_notifier_call_chain+0x74/0x90 [ 166.487986][ T6549] ? __pfx_usb_generic_driver_disconnect+0x10/0x10 [ 166.488016][ T6549] usb_unbind_device+0x78/0x190 [ 166.488035][ T6549] ? __pfx_usb_unbind_device+0x10/0x10 [ 166.488052][ T6549] device_release_driver_internal+0x4f5/0x880 [ 166.488079][ T6549] unbind_store+0x1a1/0x1d0 [ 166.488098][ T6549] ? __pfx_sysfs_kf_write+0x10/0x10 [ 166.488120][ T6549] kernfs_fop_write_iter+0x3a4/0x540 [ 166.488142][ T6549] vfs_write+0x612/0xba0 [ 166.488174][ T6549] ? __pfx_vfs_write+0x10/0x10 [ 166.488205][ T6549] ? __fget_files+0x2a/0x420 [ 166.488230][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.488255][ T6549] ksys_write+0x150/0x270 [ 166.488290][ T6549] ? __pfx_ksys_write+0x10/0x10 [ 166.488329][ T6549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.488353][ T6549] do_syscall_64+0x174/0x580 [ 166.488385][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.488417][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.488436][ T6549] RIP: 0033:0x7fa4e4b9e0d9 [ 166.488453][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.488468][ T6549] RSP: 002b:00007fa4e59d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.488487][ T6549] RAX: ffffffffffffffda RBX: 00007fa4e4e25fa0 RCX: 00007fa4e4b9e0d9 [ 166.488500][ T6549] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000008 [ 166.488511][ T6549] RBP: 00007fa4e4c35024 R08: 0000000000000000 R09: 0000000000000000 [ 166.488522][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.488533][ T6549] R13: 00007fa4e4e26038 R14: 00007fa4e4e25fa0 R15: 00007ffd5496f438 [ 166.488559][ T6549] [ 166.488566][ T6549] [ 166.949628][ T6549] Allocated by task 29: [ 166.953771][ T6549] kasan_save_track+0x3e/0x80 [ 166.958457][ T6549] __kasan_kmalloc+0x93/0xb0 [ 166.963055][ T6549] __kmalloc_cache_noprof+0x32d/0x660 [ 166.968429][ T6549] snd_ump_endpoint_new+0x7d/0x3d0 [ 166.973558][ T6549] create_midi2_ump+0x314/0x7b0 [ 166.978410][ T6549] snd_usb_midi_v2_create+0x140d/0x4ac0 [ 166.983959][ T6549] snd_usb_create_stream+0x262/0x630 [ 166.989236][ T6549] usb_audio_probe+0x1447/0x2280 [ 166.994166][ T6549] usb_probe_interface+0x653/0xc60 [ 166.999273][ T6549] really_probe+0x254/0xae0 [ 167.003775][ T6549] __driver_probe_device+0x1e8/0x360 [ 167.009060][ T6549] driver_probe_device+0x4f/0x240 [ 167.014092][ T6549] __device_attach_driver+0x270/0x410 [ 167.019462][ T6549] bus_for_each_drv+0x258/0x2f0 [ 167.024322][ T6549] __device_attach+0x2c4/0x450 [ 167.029092][ T6549] device_initial_probe+0xa1/0xd0 [ 167.034155][ T6549] bus_probe_device+0x12a/0x220 [ 167.039008][ T6549] device_add+0x7d7/0xb80 [ 167.043327][ T6549] usb_set_configuration+0x1ad8/0x2180 [ 167.048789][ T6549] usb_generic_driver_probe+0x8d/0x150 [ 167.054252][ T6549] usb_probe_device+0x1c3/0x3b0 [ 167.059103][ T6549] really_probe+0x254/0xae0 [ 167.063608][ T6549] __driver_probe_device+0x1e8/0x360 [ 167.068891][ T6549] driver_probe_device+0x4f/0x240 [ 167.073919][ T6549] __device_attach_driver+0x270/0x410 [ 167.079290][ T6549] bus_for_each_drv+0x258/0x2f0 [ 167.084148][ T6549] __device_attach+0x2c4/0x450 [ 167.088960][ T6549] device_initial_probe+0xa1/0xd0 [ 167.093986][ T6549] bus_probe_device+0x12a/0x220 [ 167.098842][ T6549] device_add+0x7d7/0xb80 [ 167.103164][ T6549] usb_new_device+0x99d/0x1620 [ 167.107928][ T6549] hub_event+0x28e8/0x4d30 [ 167.112345][ T6549] process_scheduled_works+0xa8e/0x14e0 [ 167.117888][ T6549] worker_thread+0xa47/0xfb0 [ 167.122477][ T6549] kthread+0x388/0x470 [ 167.126553][ T6549] ret_from_fork+0x514/0xb70 [ 167.131150][ T6549] ret_from_fork_asm+0x1a/0x30 [ 167.135915][ T6549] [ 167.138222][ T6549] Freed by task 6549: [ 167.142184][ T6549] kasan_save_track+0x3e/0x80 [ 167.146861][ T6549] kasan_save_free_info+0x40/0x50 [ 167.151878][ T6549] __kasan_slab_free+0x5c/0x80 [ 167.156658][ T6549] kfree+0x1c5/0x640 [ 167.160557][ T6549] snd_rawmidi_free+0x400/0x420 [ 167.165411][ T6549] snd_rawmidi_dev_free+0x38/0x50 [ 167.170434][ T6549] snd_device_free_all+0x2c7/0x7a0 [ 167.175565][ T6549] release_card_device+0x75/0x1b0 [ 167.180599][ T6549] device_release+0xc4/0x1f0 [ 167.185189][ T6549] kobject_put+0x222/0x550 [ 167.189611][ T6549] usb_unbind_interface+0x295/0x9f0 [ 167.194810][ T6549] device_release_driver_internal+0x4f5/0x880 [ 167.200873][ T6549] bus_remove_device+0x444/0x560 [ 167.205815][ T6549] device_del+0x524/0x8f0 [ 167.210135][ T6549] usb_disable_device+0x3d4/0x8d0 [ 167.215159][ T6549] usb_disconnect+0x346/0x9a0 [ 167.219841][ T6549] hub_quiesce+0x171/0x330 [ 167.224255][ T6549] hub_disconnect+0xc6/0x450 [ 167.228846][ T6549] usb_unbind_interface+0x295/0x9f0 [ 167.234047][ T6549] device_release_driver_internal+0x4f5/0x880 [ 167.240119][ T6549] bus_remove_device+0x444/0x560 [ 167.245060][ T6549] device_del+0x524/0x8f0 [ 167.249379][ T6549] usb_disable_device+0x3d4/0x8d0 [ 167.254409][ T6549] usb_set_configuration+0x449/0x2180 [ 167.259802][ T6549] usb_unbind_device+0x78/0x190 [ 167.264649][ T6549] device_release_driver_internal+0x4f5/0x880 [ 167.270715][ T6549] unbind_store+0x1a1/0x1d0 [ 167.275214][ T6549] kernfs_fop_write_iter+0x3a4/0x540 [ 167.280493][ T6549] vfs_write+0x612/0xba0 [ 167.284741][ T6549] ksys_write+0x150/0x270 [ 167.289075][ T6549] do_syscall_64+0x174/0x580 [ 167.293670][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.299567][ T6549] [ 167.301882][ T6549] The buggy address belongs to the object at ffff888029ce8000 [ 167.301882][ T6549] which belongs to the cache kmalloc-4k of size 4096 [ 167.315930][ T6549] The buggy address is located 848 bytes inside of [ 167.315930][ T6549] freed 4096-byte region [ffff888029ce8000, ffff888029ce9000) [ 167.329815][ T6549] [ 167.332133][ T6549] The buggy address belongs to the physical page: [ 167.338529][ T6549] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29ce8 [ 167.347291][ T6549] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 167.355786][ T6549] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 167.363328][ T6549] page_type: f5(slab) [ 167.367323][ T6549] raw: 00fff00000000040 ffff88801b005140 dead000000000100 dead000000000122 [ 167.375904][ T6549] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 167.384489][ T6549] head: 00fff00000000040 ffff88801b005140 dead000000000100 dead000000000122 [ 167.393159][ T6549] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 167.401830][ T6549] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 167.410496][ T6549] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 167.419160][ T6549] page dumped because: kasan: bad access detected [ 167.425566][ T6549] page_owner tracks the page as allocated [ 167.431266][ T6549] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4973, tgid 4973 (udevadm), ts 32860358273, free_ts 32853114771 [ 167.451412][ T6549] post_alloc_hook+0x1f9/0x250 [ 167.456228][ T6549] get_page_from_freelist+0x21fa/0x2270 [ 167.461773][ T6549] __alloc_frozen_pages_noprof+0x18d/0x380 [ 167.467579][ T6549] allocate_slab+0x79/0x5e0 [ 167.472084][ T6549] refill_objects+0x2d5/0x350 [ 167.476746][ T6549] __pcs_replace_empty_main+0x2bf/0x6b0 [ 167.482295][ T6549] __kmalloc_noprof+0x485/0x720 [ 167.487142][ T6549] tomoyo_realpath_from_path+0xef/0x640 [ 167.492678][ T6549] tomoyo_check_open_permission+0x229/0x470 [ 167.498570][ T6549] security_file_open+0xa9/0x240 [ 167.503516][ T6549] do_dentry_open+0x4a0/0x1380 [ 167.508289][ T6549] vfs_open+0x3b/0x340 [ 167.512356][ T6549] path_openat+0x2e44/0x3830 [ 167.516947][ T6549] do_file_open+0x23e/0x4a0 [ 167.521455][ T6549] do_sys_openat2+0x115/0x200 [ 167.526128][ T6549] __x64_sys_openat+0x138/0x170 [ 167.530971][ T6549] page last free pid 4973 tgid 4973 stack trace: [ 167.537278][ T6549] __free_frozen_pages+0xc1e/0xd10 [ 167.542383][ T6549] __slab_free+0x274/0x2c0 [ 167.546793][ T6549] qlist_free_all+0x99/0x100 [ 167.551378][ T6549] kasan_quarantine_reduce+0x148/0x160 [ 167.556829][ T6549] __kasan_slab_alloc+0x22/0x80 [ 167.561679][ T6549] __kmalloc_cache_noprof+0x2ab/0x660 [ 167.567068][ T6549] kernfs_fop_open+0x3ac/0xce0 [ 167.571833][ T6549] do_dentry_open+0x816/0x1380 [ 167.576592][ T6549] vfs_open+0x3b/0x340 [ 167.580654][ T6549] path_openat+0x2e44/0x3830 [ 167.585245][ T6549] do_file_open+0x23e/0x4a0 [ 167.589745][ T6549] do_sys_openat2+0x115/0x200 [ 167.594415][ T6549] __x64_sys_openat+0x138/0x170 [ 167.599261][ T6549] do_syscall_64+0x174/0x580 [ 167.603939][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.609825][ T6549] [ 167.612132][ T6549] Memory state around the buggy address: [ 167.617743][ T6549] ffff888029ce8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.625813][ T6549] ffff888029ce8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.633859][ T6549] >ffff888029ce8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.641904][ T6549] ^ [ 167.648565][ T6549] ffff888029ce8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.656611][ T6549] ffff888029ce8400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.664657][ T6549] ================================================================== [ 167.736056][ T6549] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 167.743304][ T6549] CPU: 0 UID: 0 PID: 6549 Comm: syz.3.222 Not tainted syzkaller #0 PREEMPT(full) [ 167.752514][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 167.762583][ T6549] Call Trace: [ 167.765862][ T6549] [ 167.768793][ T6549] vpanic+0x56c/0xa60 [ 167.772796][ T6549] ? __pfx_vpanic+0x10/0x10 [ 167.777319][ T6549] ? __pfx___schedule+0x10/0x10 [ 167.782183][ T6549] panic+0xc5/0xd0 [ 167.785962][ T6549] ? __pfx_panic+0x10/0x10 [ 167.790393][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.796034][ T6549] ? preempt_schedule_common+0x82/0xd0 [ 167.801526][ T6549] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 167.806926][ T6549] check_panic_on_warn+0x89/0xb0 [ 167.811887][ T6549] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 167.817274][ T6549] end_report+0x73/0x170 [ 167.821537][ T6549] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 167.826934][ T6549] kasan_report+0x128/0x150 [ 167.831465][ T6549] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 167.836864][ T6549] snd_usb_midi_v2_free+0x602/0x7b0 [ 167.842071][ T6549] snd_usb_midi_v2_free_all+0x67/0x90 [ 167.847449][ T6549] snd_usb_audio_free+0x4c/0x100 [ 167.852390][ T6549] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 167.857935][ T6549] release_card_device+0xab/0x1b0 [ 167.862970][ T6549] ? __pfx_release_card_device+0x10/0x10 [ 167.868613][ T6549] device_release+0xc4/0x1f0 [ 167.873230][ T6549] kobject_put+0x222/0x550 [ 167.877658][ T6549] usb_unbind_interface+0x295/0x9f0 [ 167.882862][ T6549] ? kernfs_remove_by_name_ns+0x101/0x140 [ 167.888580][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.894210][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.899846][ T6549] ? __pfx_usb_unbind_interface+0x10/0x10 [ 167.905575][ T6549] device_release_driver_internal+0x4f5/0x880 [ 167.911640][ T6549] bus_remove_device+0x444/0x560 [ 167.916576][ T6549] ? __pfx_bus_remove_device+0x10/0x10 [ 167.922038][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.927664][ T6549] ? kernfs_remove_by_name_ns+0x101/0x140 [ 167.933382][ T6549] device_del+0x524/0x8f0 [ 167.937711][ T6549] ? __pfx_device_del+0x10/0x10 [ 167.942551][ T6549] ? __pfx___mutex_lock+0x10/0x10 [ 167.947589][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.953248][ T6549] usb_disable_device+0x3d4/0x8d0 [ 167.958300][ T6549] usb_disconnect+0x346/0x9a0 [ 167.962992][ T6549] hub_quiesce+0x171/0x330 [ 167.967425][ T6549] hub_disconnect+0xc6/0x450 [ 167.972027][ T6549] usb_unbind_interface+0x295/0x9f0 [ 167.977267][ T6549] ? kernfs_remove_by_name_ns+0x101/0x140 [ 167.982983][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.988606][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.994228][ T6549] ? __pfx_usb_unbind_interface+0x10/0x10 [ 167.999957][ T6549] device_release_driver_internal+0x4f5/0x880 [ 168.006024][ T6549] bus_remove_device+0x444/0x560 [ 168.010966][ T6549] ? __pfx_bus_remove_device+0x10/0x10 [ 168.016419][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.022082][ T6549] ? kernfs_remove_by_name_ns+0x101/0x140 [ 168.027797][ T6549] device_del+0x524/0x8f0 [ 168.032121][ T6549] ? __pfx_device_del+0x10/0x10 [ 168.036958][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.042584][ T6549] ? kobject_put+0x516/0x550 [ 168.047191][ T6549] usb_disable_device+0x3d4/0x8d0 [ 168.052226][ T6549] usb_set_configuration+0x449/0x2180 [ 168.057604][ T6549] ? __up_read+0x29c/0x930 [ 168.062017][ T6549] ? blocking_notifier_call_chain+0x74/0x90 [ 168.067918][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.073558][ T6549] ? blocking_notifier_call_chain+0x74/0x90 [ 168.079489][ T6549] ? __pfx_usb_generic_driver_disconnect+0x10/0x10 [ 168.085998][ T6549] usb_unbind_device+0x78/0x190 [ 168.090845][ T6549] ? __pfx_usb_unbind_device+0x10/0x10 [ 168.096293][ T6549] device_release_driver_internal+0x4f5/0x880 [ 168.102364][ T6549] unbind_store+0x1a1/0x1d0 [ 168.106858][ T6549] ? __pfx_sysfs_kf_write+0x10/0x10 [ 168.112062][ T6549] kernfs_fop_write_iter+0x3a4/0x540 [ 168.117349][ T6549] vfs_write+0x612/0xba0 [ 168.121599][ T6549] ? __pfx_vfs_write+0x10/0x10 [ 168.126367][ T6549] ? __fget_files+0x2a/0x420 [ 168.130950][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.136570][ T6549] ksys_write+0x150/0x270 [ 168.140900][ T6549] ? __pfx_ksys_write+0x10/0x10 [ 168.145755][ T6549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.151809][ T6549] do_syscall_64+0x174/0x580 [ 168.156395][ T6549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.162016][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.167899][ T6549] RIP: 0033:0x7fa4e4b9e0d9 [ 168.172305][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.191909][ T6549] RSP: 002b:00007fa4e59d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.200328][ T6549] RAX: ffffffffffffffda RBX: 00007fa4e4e25fa0 RCX: 00007fa4e4b9e0d9 [ 168.208290][ T6549] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000008 [ 168.216245][ T6549] RBP: 00007fa4e4c35024 R08: 0000000000000000 R09: 0000000000000000 [ 168.224202][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.232163][ T6549] R13: 00007fa4e4e26038 R14: 00007fa4e4e25fa0 R15: 00007ffd5496f438 [ 168.240140][ T6549] [ 168.243409][ T6549] Kernel Offset: disabled [ 168.247721][ T6549] Rebooting in 86400 seconds..