last executing test programs: 6.940025968s ago: executing program 0 (id=221): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0xa) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x1c8080, 0x81) lseek(r6, 0x104, 0x2) getdents64(r6, 0x0, 0x4f) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0800000000000000000000000000000200000505000100070000004704379bdd46fd34a2fdb4ab"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) setrlimit(0xa, &(0x7f0000000300)={0x80000000, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x25dfdbff, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x6a, 0x1, {0x6, 0x9}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000380)={0x3c0, 0x76, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x2, 0x1, 0xc}) socket$nl_generic(0x10, 0x3, 0x10) 6.083739084s ago: executing program 0 (id=223): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x0, 0x202000000100, 0x40000004, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x20, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @rand_addr, @local}, &(0x7f0000000500)=0xc) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x11, 0x0}, 0xff31) r7 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r8, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0xfffffffffffffffd, 0x2]}}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000700)={r2, &(0x7f0000000600)='\x89\'\x80/\x00', 0x20103, &(0x7f0000000640)={@_ha_fsid={[0xfee3, 0x1]}, {0xff, 0x4, 0x2, 0x3}}, 0x8, &(0x7f0000000680), &(0x7f0000000180)=0xfff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x19, &(0x7f0000000880)=ANY=[@ANYBLOB="18110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000186100000400000000000000f8ffffff852000000300c3e7ad52f52ad7660000b7080000000000007b8af8ff00000000b7080000d80d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70210000800000018230000", @ANYRES8=r3, @ANYBLOB="0000000000000000b70500000800000085000100a50000008520000004000000a75b0000fcffffff186100000129a0a24978372500000000000000310b00008500000042000000"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @cgroup_sysctl, r0, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x9, 0x5, 0x10001}, 0x10, r6, r1, 0x3, &(0x7f0000000140)=[r8, r9, r0, r1, r0, r1, r1], &(0x7f0000000780)=[{0x0, 0x5, 0x8, 0x3}, {0x4, 0x1, 0x4, 0x61a8a9cee2f380e9}, {0x3, 0x20005, 0x4, 0x9}], 0x10, 0xf}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', 0x0, &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r11 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x10000) close(r10) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 5.193096819s ago: executing program 0 (id=227): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x0, 0x202000000100, 0x40000004, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x20, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @rand_addr, @local}, &(0x7f0000000500)=0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x11, 0x0}, 0xff31) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0xfffffffffffffffd, 0x2]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x19, &(0x7f0000000880)=ANY=[@ANYBLOB="18110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000186100000400000000000000f8ffffff852000000300c3e7ad52f52ad7660000b7080000000000007b8af8ff00000000b7080000d80d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70210", @ANYRES8=r2, @ANYBLOB="0000000000000000b70500000800000085000100a50000008520000004000000a75b0000fcffffff186100000129a0a24978372500000000000000310b00008500000042000000"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @cgroup_sysctl, r0, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x9, 0x5, 0x10001}, 0x10, r3, r1, 0x3, &(0x7f0000000140)=[r4, 0xffffffffffffffff, r0, r1, r0, r1, r1], &(0x7f0000000780)=[{0x0, 0x5, 0x8, 0x3}, {0x4, 0x1, 0x4, 0x61a8a9cee2f380e9}, {0x3, 0x20005, 0x4, 0x9}], 0x10, 0xf}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000) close(r5) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 5.003111842s ago: executing program 1 (id=237): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f0000000340)='./file0\x00', 0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4.854943794s ago: executing program 1 (id=230): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r0, 0x0, 0x0, 0x1001, 0x8008008) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3}) 4.734766377s ago: executing program 1 (id=231): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xa) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x1c8080, 0x81) lseek(r7, 0x104, 0x2) getdents64(r7, 0x0, 0x4f) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) setrlimit(0xa, &(0x7f0000000300)={0x80000000, 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x25dfdbff, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x6a, 0x1, {0x6, 0x9}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000380)={0x3c0, 0x76, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x2, 0x1, 0xc}) socket$nl_generic(0x10, 0x3, 0x10) 3.657689343s ago: executing program 1 (id=232): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0xa) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x1c8080, 0x81) lseek(r6, 0x104, 0x2) getdents64(r6, 0x0, 0x4f) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) setrlimit(0xa, &(0x7f0000000300)={0x80000000, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x25dfdbff, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x6a, 0x1, {0x6, 0x9}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000380)={0x3c0, 0x76, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x2, 0x1, 0xc}) socket$nl_generic(0x10, 0x3, 0x10) 3.615957109s ago: executing program 0 (id=234): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) wait4(r0, 0x0, 0x8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x4}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mknod$loop(0x0, 0x6000, 0x1) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x6000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) io_uring_setup(0x17b1, &(0x7f0000000100)={0x0, 0xe7b5, 0x80, 0x20011, 0x1}) r4 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xb, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "2046a2fc", {0x3, 0x1, 0x0, 0x5, 0x1f, 0xf8, 0x5}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) landlock_restrict_self(r5, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010005fba2a0070000000000000000000", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00000000000a0002000180c2000003000014001400776c616e3100"/48], 0x48}}, 0x800) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'veth0_virt_wifi\x00', @multicast}) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) 3.544874901s ago: executing program 2 (id=235): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xa) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x1c8080, 0x81) lseek(r7, 0x104, 0x2) getdents64(r7, 0x0, 0x4f) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x20000080) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) setrlimit(0xa, &(0x7f0000000300)={0x80000000, 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x25dfdbff, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x6a, 0x1, {0x6, 0x9}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000380)={0x3c0, 0x76, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x2, 0x1, 0xc}) socket$nl_generic(0x10, 0x3, 0x10) 2.722006826s ago: executing program 1 (id=236): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x0, 0x202000000100, 0x40000004, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x20, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @rand_addr, @local}, &(0x7f0000000500)=0xc) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x11, 0x0}, 0xff31) r7 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r8, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0xfffffffffffffffd, 0x2]}}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000700)={r2, &(0x7f0000000600)='\x89\'\x80/\x00', 0x20103, &(0x7f0000000640)={@_ha_fsid={[0xfee3, 0x1]}, {0xff, 0x4, 0x2, 0x3}}, 0x8, &(0x7f0000000680), &(0x7f0000000180)=0xfff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x19, &(0x7f0000000880)=ANY=[@ANYBLOB="18110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000186100000400000000000000f8ffffff852000000300c3e7ad52f52ad7660000b7080000000000007b8af8ff00000000b7080000d80d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70210000800000018230000", @ANYRES8=r3, @ANYBLOB="0000000000000000b70500000800000085000100a50000008520000004000000a75b0000fcffffff186100000129a0a24978372500000000000000310b00008500000042000000"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @cgroup_sysctl, r0, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x9, 0x5, 0x10001}, 0x10, r6, r1, 0x3, &(0x7f0000000140)=[r8, r9, r0, r1, r0, r1, r1], &(0x7f0000000780)=[{0x0, 0x5, 0x8, 0x3}, {0x4, 0x1, 0x4, 0x61a8a9cee2f380e9}, {0x3, 0x20005, 0x4, 0x9}], 0x10, 0xf}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', 0x0, &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r11 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x10000) close(r10) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 2.585206544s ago: executing program 2 (id=239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x2, &(0x7f0000000540)='addr=127.0.0.1E\xa7T.8\x13.m83\xa1&\xed,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x10\xc5\xec^\x92|\x0e\r\a\xb3\fNe\xfbBo^\xaf\xf7+\xe7I.A\xfdg\xec\xb5\t\xa3+\xd9c\x803\x93\"a\xd1\x02_\xa8#\xec\xe8\xda\xf5\xe4Yr\x8b\xac\xc0\xd0\xf1Y\xa7\xd4\x95\x90\xf7\xd6') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000180)={0x800009, 0x10006}) timerfd_gettime(r0, &(0x7f00000001c0)) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 2.439179616s ago: executing program 2 (id=240): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000000140)=[{0x0}], 0x1, 0x1001, 0x8008008) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3}) 2.437928357s ago: executing program 3 (id=241): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x4, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00', 0x10}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x74}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4001) socket$inet6(0xa, 0x1, 0x8010000000000084) openat$random(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtaction={0x112c, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1118, 0x1, [@m_police={0x1114, 0x1, 0x0, 0x0, {{0xb}, {0x10e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x25242e8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0xad8, 0x10001, 0x8001, 0x5, 0x7fff, 0xfffffff6, 0xfffffff4, 0x46, 0x5, 0x8, 0x0, 0x1, 0xd7, 0x0, 0x97, 0x8000, 0xa3, 0x3, 0x7, 0x100, 0x44a8, 0x6, 0x8001, 0x0, 0x7, 0xc4c7, 0x7ff, 0x44, 0x3, 0x0, 0x8, 0x8, 0x28, 0x8, 0x213580fd, 0x2, 0x1, 0x0, 0x5, 0x3, 0x31, 0x7, 0x200, 0x76, 0xec8a, 0x5, 0xe, 0x101, 0x0, 0xe5, 0xc, 0x5, 0x7, 0x4, 0x2, 0x0, 0x80dd, 0xb0, 0x35a26e02, 0xffff, 0xbf, 0x83b, 0x2, 0x200000, 0x8c, 0x2bf, 0x81a8, 0x8, 0x100, 0x3, 0x400, 0x0, 0x7, 0x2, 0x0, 0xffffffff, 0x6, 0x9, 0x237, 0x8, 0xb1, 0x7, 0x11, 0x3, 0xfd, 0xb55, 0x8000, 0x5, 0x6, 0xffffffcd, 0x2, 0x4, 0x80000000, 0x9, 0x7, 0x5, 0xc56a, 0x8, 0xffff, 0x2, 0x3, 0x5c, 0x8, 0x0, 0x6, 0x3, 0x50, 0x10000, 0x8001, 0x5, 0x1, 0x6, 0x7, 0xd, 0x9, 0x10000, 0x19, 0x91d, 0x3, 0x2, 0x1, 0x3, 0x3, 0x7ff, 0x401, 0x7, 0xd70, 0x2c, 0x9, 0x3, 0x6070, 0xfff, 0x1000, 0x8, 0x4, 0x6, 0x5, 0x4, 0x7c, 0x488531db, 0x40, 0x6, 0x5, 0xfffffffb, 0x1000000, 0x1ff, 0x5, 0xc7, 0x0, 0x8, 0x5, 0x5, 0x7, 0xfffffffb, 0x5, 0x5c, 0x1000, 0x3, 0x527, 0x3, 0x5a85, 0xf6, 0xc, 0x1, 0xaa7a, 0x6, 0x1, 0xee1, 0x80000000, 0x825f, 0x9, 0x40, 0x233, 0x80000001, 0x6, 0x401, 0x9, 0x618, 0x6, 0x4, 0x1, 0x846, 0x7, 0xb46, 0x9, 0x1ff, 0xe0, 0x4, 0xd, 0x1, 0xc98, 0x3, 0xffff8000, 0xc, 0x6, 0xfe, 0x1, 0x8, 0x2, 0x2, 0x2, 0xbecd, 0x9, 0x3, 0xba, 0x400, 0x8fe1, 0x371, 0x80, 0x2, 0x8000, 0x10000, 0x9, 0x5, 0x6e36c67d, 0xbe4, 0x7f, 0x1, 0x7, 0x2, 0x3, 0x1, 0x64, 0x8843, 0x6, 0x80, 0x3, 0x6, 0xfffffe01, 0x5, 0x8001, 0xfffffff7, 0x9, 0x9, 0x3ff, 0x751, 0x0, 0x1, 0x8, 0xfffffff3, 0xe, 0x7fff, 0xff, 0x800, 0x3, 0xd, 0x80000000, 0xe, 0xc0, 0x6, 0x6397, 0x9f9, 0x239, 0x89e4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x38f43bb0}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5e5, 0x0, 0x1, 0xa, 0x2, 0x5, 0x0, 0x5, 0x7, 0x2, 0x4, 0x0, 0x2, 0x1000, 0x7fffffff, 0x80, 0x6, 0x0, 0xffffffff, 0xaffc, 0x1, 0x34, 0x1, 0x4, 0x1, 0x5, 0x9, 0x4, 0x4, 0x1, 0x151d, 0x5, 0x6, 0xfffffffa, 0xd, 0xebc, 0x8, 0x752e, 0x8, 0x289, 0x100, 0xffffffff, 0x7f, 0x7fffffff, 0x101, 0x7f, 0x2, 0x5, 0x5, 0xfffffff7, 0x1, 0x5, 0x3, 0xd, 0x0, 0x7f, 0xffff2a91, 0x3, 0x100, 0x5, 0x2ce, 0x7f, 0xc14, 0xfff, 0x6, 0xfffffff7, 0x5, 0xd9, 0xffff6d2d, 0x7e, 0x0, 0x2, 0x4, 0xd1, 0x0, 0x0, 0x85, 0x1, 0xadfb, 0xd34, 0x9, 0xf324, 0x2000, 0x1, 0x5, 0x80, 0x1000, 0x0, 0x0, 0xecc1, 0xc, 0x1000, 0x7fffffff, 0x4, 0x4, 0x0, 0xfff, 0x7, 0x4, 0x7, 0x22, 0xa, 0x3, 0x2, 0x3e78, 0x134, 0x9, 0x80000001, 0x608, 0x80e8, 0x371, 0x8, 0x6f, 0x0, 0xfffff801, 0x6, 0x0, 0x4, 0x5, 0xffff, 0x0, 0x720fbc85, 0x101, 0x1ff, 0x48, 0xa3f, 0x4, 0xf46b, 0x9, 0x0, 0x4, 0x9, 0x401, 0x81, 0x84c, 0x6, 0x3, 0x5, 0xffff, 0x6, 0x7, 0x31a, 0xa, 0x9, 0xc16, 0x3ff, 0x0, 0x8001, 0x9, 0x1ff, 0x4, 0x68000000, 0x5, 0xfff, 0x800, 0x4, 0x30e9, 0x1, 0x9, 0x6, 0xec, 0x0, 0x7, 0x1, 0x8, 0xe0000, 0x0, 0x7, 0x8000000, 0x3, 0x7f, 0x1ff, 0x2, 0x9, 0x0, 0xfffffff1, 0xeb, 0x6, 0x10000, 0x0, 0x3, 0x6, 0x9, 0xdbe, 0x1000, 0x800, 0x3, 0x2, 0x3, 0x10001, 0xa, 0x7, 0x4, 0x4, 0xffffffff, 0x8, 0x0, 0x8000, 0x7, 0x8, 0x2, 0x8, 0x9, 0x238, 0x800, 0xffffffff, 0x4, 0x5, 0x9, 0x3c, 0x8000, 0x5, 0x1, 0x400, 0x2, 0xd, 0x200, 0xc, 0x2, 0x3, 0x1ff, 0x4, 0x0, 0x212c6b57, 0x75, 0x7, 0x70, 0xfffff219, 0xffffffc0, 0x2, 0x200, 0x6c, 0x7, 0x6, 0x9, 0x6bb1, 0x6, 0x8, 0x1, 0x9, 0x6a, 0xbf, 0x2, 0x2, 0x9, 0x9, 0x2, 0x9, 0x1, 0xc, 0x9, 0x8, 0x10000, 0x7, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6000, 0x5, 0x757ab92d, 0x9b5, 0x3, {0x3, 0x0, 0x0, 0x3, 0x7, 0x8}, {0x1, 0x1, 0x3, 0xe5e, 0x7ff, 0x8}, 0xe, 0x8, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x5, 0x7fffffff, 0xfffffffe, {0x2, 0x2, 0x7, 0x8001, 0x101, 0x656}, {0x4, 0x1, 0x80, 0xfad, 0xe, 0x3}, 0x0, 0x9, 0xffff}}], [@TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0x3, 0xfffffff7, 0x1ff, 0x8, 0x4, 0x10000, 0x7fffffff, 0x0, 0x3ff, 0x9, 0x200, 0x7fff, 0x4, 0x8, 0x9000000, 0x1, 0xa, 0xffff751a, 0x1, 0x6, 0xc9e8, 0x8001, 0xffff, 0x9, 0xb, 0x8, 0x7, 0x100, 0xf, 0x2, 0x5, 0x38, 0x0, 0x5b2d, 0x0, 0x5, 0x5, 0x5, 0x9, 0x6, 0x3ff, 0x6, 0x5, 0x21, 0x1, 0x8, 0x9, 0x5, 0xf0c, 0x4, 0x1, 0xc48, 0x60000, 0x10001, 0x62e5, 0xf5, 0x3, 0x4, 0x6, 0x8, 0x6, 0x4, 0x7fff, 0x4, 0xb7, 0x4, 0x9, 0xdaff, 0xdca, 0x6711, 0x2, 0x6, 0x10001, 0x4, 0x101, 0x3, 0xde5, 0x3, 0x401, 0xffffffbc, 0x8000, 0x1, 0x6, 0xa9, 0x7, 0x9, 0x4, 0x8, 0x3, 0x1, 0xc, 0x4, 0x3, 0x6, 0x0, 0xf5, 0xf, 0x8, 0x1, 0x5, 0x3, 0x6b, 0x6, 0x8, 0x8001, 0x4, 0x0, 0x7, 0x7fff, 0x4, 0x0, 0x8, 0x9f4d, 0x9, 0x1000, 0xa10, 0x6, 0x0, 0x7, 0x7, 0x5, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x9, 0x3, 0x5, 0x717, 0x5, 0x5, 0x4, 0x75, 0x401, 0x6, 0x5, 0x7, 0xd9e, 0x0, 0x7, 0x0, 0x97e2, 0x6, 0x6, 0x1ff, 0x6, 0xfffffffa, 0x2, 0x1000, 0x4, 0x800, 0xfffffff9, 0x8001, 0x3, 0x6, 0x69, 0x0, 0x6, 0x401, 0x474, 0x6, 0x1, 0x0, 0x7b75b7e8, 0xd, 0x401, 0xff, 0x3, 0xd93a, 0x6, 0xb98, 0x0, 0x401, 0x2, 0x6, 0x58, 0x3, 0x38f08769, 0xa78e, 0x7, 0x6, 0x7fff, 0x5, 0xa1b6, 0x5e5a, 0x9, 0x1, 0x1, 0x2, 0x1, 0x6, 0x2, 0xff, 0x4000, 0x0, 0x3, 0xb, 0x9, 0xc060da9, 0x8, 0xfffffffc, 0x0, 0x0, 0x1, 0x6, 0x9, 0x10, 0xa2, 0x2, 0xfffffffc, 0x10, 0x5, 0x4, 0x7392, 0x1, 0x2, 0x6, 0x6, 0x4, 0x9, 0xb1e2, 0x2, 0x1, 0xff, 0x6281, 0x5f, 0xc, 0x0, 0x2, 0x0, 0x7, 0xf987, 0xfffffff7, 0x3, 0x8, 0x2, 0x401, 0x6, 0x2, 0xb, 0x80, 0xfffffff7, 0x1, 0xffffad25, 0xa03, 0xff, 0x0, 0x2, 0x4, 0x4, 0x81, 0x4, 0x3, 0xf]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0xd4e4, 0x40, 0x3, 0x6, 0x64b8, 0x155a, 0x1000, 0x5dd900, 0x7ff, 0x2800000, 0x401, 0x5d, 0x6, 0xffff, 0x6, 0x80, 0x101, 0x3005f5ab, 0x3b7e6b03, 0xfff, 0x5, 0x2, 0x10000, 0xe, 0x8, 0x4, 0x8, 0x2, 0x7fffffff, 0x566, 0xb1, 0x5, 0x0, 0x0, 0x4, 0x81, 0x1, 0x8, 0x10001, 0x3, 0x0, 0x30000, 0x2, 0x0, 0x1, 0x0, 0x2, 0x2, 0x1, 0x0, 0x2, 0x0, 0x5, 0x1, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x9, 0xfffffffb, 0x8, 0x3, 0xc00000, 0x5da, 0xffff7fff, 0x787, 0x7, 0x5, 0x8, 0x6a65, 0x1, 0x0, 0x5, 0xd6, 0x9, 0x6, 0x3, 0xa, 0xa0b0, 0xffffff81, 0x3ff, 0x1ff, 0xfffffff6, 0xa, 0xf, 0x6, 0x6, 0x7fffffff, 0x3, 0x10000, 0x31a2, 0x10000, 0x9, 0x5d86a571, 0x101, 0x8, 0x9, 0x1, 0x3, 0x2, 0x3, 0xa361, 0x4, 0xfffffff8, 0x80000000, 0x10001, 0xe, 0x2, 0x3d7a3cad, 0xcba, 0x7, 0x8, 0x7, 0x4, 0x800, 0x2, 0x2, 0x7, 0xfffffe00, 0x9, 0xbb7, 0x10, 0x9, 0x1, 0x5, 0x0, 0xff, 0xf, 0x45f, 0x7, 0x6, 0x9, 0x3, 0x7, 0x9, 0xfffffc01, 0x1b9, 0x1ff, 0x10000, 0x2, 0x8, 0xf, 0x5, 0x2, 0x3, 0xecd4, 0xd7, 0x7, 0x6, 0x7, 0x5, 0x7, 0x4, 0x78ad195f, 0x2, 0x6, 0xc, 0x1, 0x7, 0x76, 0xffffffff, 0x4, 0x8, 0x3, 0x7, 0x4, 0x400, 0x5, 0x0, 0x7, 0x2, 0xff, 0xbcdc, 0x40, 0x5, 0x5, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x39f6, 0xfff, 0x40, 0x5, 0xbf, 0xe8, 0x7fff, 0x2, 0x8, 0x10000, 0x80000001, 0x5, 0x3, 0xc7, 0x7ff, 0x0, 0xfffffff9, 0x3, 0xd23, 0x4, 0x66, 0x2, 0xffffffff, 0x6, 0x9, 0x5, 0x4, 0x8, 0x7, 0xd, 0x7, 0x9, 0x2, 0x5, 0xffffffd4, 0x0, 0xfff, 0x0, 0x6, 0x200, 0x0, 0x0, 0x2, 0x0, 0x7f, 0xfffff801, 0x8, 0x4, 0x9, 0x3, 0x9, 0x2, 0x0, 0xfff, 0x800, 0x9, 0x40, 0x5, 0xfffffffb, 0x8, 0x799, 0x4, 0x3, 0x9, 0x80, 0x3, 0x4, 0x7f, 0x0, 0x4, 0x57]}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x112c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000001780)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x45}, @l2cap_cid_signaling={{0x41}, [@l2cap_conn_req={{0x2, 0x3, 0x4}, {0xfff, 0xffff}}, @l2cap_conf_req={{0x4, 0x8, 0xc}, {0x0, 0x75cb, [@l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_ews={0x7, 0x2, 0x9d5}]}}, @l2cap_conf_rsp={{0x5, 0x3, 0x11}, {0x8000, 0xb59, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0x30}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0x3, 0x37f5, 0xe9, 0x5}}, @l2cap_disconn_req={{0x6, 0xc, 0x4}, {0x7, 0x1}}]}}, 0x4a) flock(0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000003010101000000001646741400000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x80) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="80ba9fe37fe15a4003faed2aa9e3563d271030df15105f522e579c6c6290bec90b4f8210a0f02e15b44b489261f66f7b55590ab6b57c91bdfaddcdd76da1e17c1ebd1e6fe8d347d26d9c22ca75fd4066debe5346f9f1de6ca20ded2e2265a6fe8a9d3311508e0033abbbc5dce4fd4276b6c2af72fae05562868f55a38d65bfbe0a81875ed4d0fc68df802cae8bdf976328000b906deb7ff649363e341a34c8903dbefef1cd63a4286405f603e1d0030aa2b26c16d22f0187b6dc372249d5a70f1640e3f1736951", 0xc7}, {&(0x7f0000000400)="d0b60c8e4f23a541b142399ff1171fa464f6ae93c7", 0x15}, {&(0x7f0000000440)="e9a382cb415c427737332b8793744a6be8d7063a063237bcf02ffe0958161a027232e909508c526f5c29b0100731cea6caf22ab49719088c2e23b01798773e78c866f04dfe7a527ff46ce7ae8ce7270e7781918b961b75bbb891fca4d623a9a3e44ce3ed334a95add657e440a499931b6b362c0f1822b33bc546bab04a2c5de7d9e2579627b52afa2674f1006f0fa1eddc61d85163c02964c7f1adc2afef586ebcecd72c22bf894a35299b24ae1d8ac4d64986987490912196780ef837", 0xbd}], 0x3}, 0x1) 2.374666374s ago: executing program 2 (id=242): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xa) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x1c8080, 0x81) lseek(r7, 0x104, 0x2) getdents64(r7, 0x0, 0x4f) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0800000000000000000000000000000200000505000100070000004704379bdd46fd34a2fdb4ab"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) setrlimit(0xa, &(0x7f0000000300)={0x80000000, 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x25dfdbff, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x6a, 0x1, {0x6, 0x9}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000380)={0x3c0, 0x76, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x2, 0x1, 0xc}) socket$nl_generic(0x10, 0x3, 0x10) 2.373916792s ago: executing program 3 (id=243): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x0, 0x202000000100, 0x40000004, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x20, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @rand_addr, @local}, &(0x7f0000000500)=0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x11, 0x0}, 0xff31) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0xfffffffffffffffd, 0x2]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x19, &(0x7f0000000880)=ANY=[@ANYBLOB="18110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000186100000400000000000000f8ffffff852000000300c3e7ad52f52ad7660000b7080000000000007b8af8ff00000000b7080000d80d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES8=r2, @ANYBLOB="0000000000000000b70500000800000085000100a50000008520000004000000a75b0000fcffffff186100000129a0a24978372500000000000000310b00008500000042000000"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @cgroup_sysctl, r0, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x9, 0x5, 0x10001}, 0x10, r3, r1, 0x3, &(0x7f0000000140)=[r4, 0xffffffffffffffff, r0, r1, r0, r1, r1], &(0x7f0000000780)=[{0x0, 0x5, 0x8, 0x3}, {0x4, 0x1, 0x4, 0x61a8a9cee2f380e9}, {0x3, 0x20005, 0x4, 0x9}], 0x10, 0xf}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000) close(r5) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 1.762001912s ago: executing program 1 (id=244): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) wait4(r0, 0x0, 0x8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) mknod$loop(0x0, 0x6000, 0x1) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x6000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) io_uring_setup(0x17b1, &(0x7f0000000100)={0x0, 0xe7b5, 0x80, 0x20011, 0x1}) r4 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xb, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "2046a2fc", {0x3, 0x1, 0x0, 0x5, 0x1f, 0xf8, 0x5}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) landlock_restrict_self(r5, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010005fba2a0070000000000000000000", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00000000000a0002000180c2000003000014001400776c616e3100"/48], 0x48}}, 0x800) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'veth0_virt_wifi\x00', @multicast}) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) 1.459502686s ago: executing program 2 (id=245): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x0, 0x202000000100, 0x40000004, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x20, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @rand_addr, @local}, &(0x7f0000000500)=0xc) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x11, 0x0}, 0xff31) r7 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r8, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0xfffffffffffffffd, 0x2]}}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000700)={r2, &(0x7f0000000600)='\x89\'\x80/\x00', 0x20103, &(0x7f0000000640)={@_ha_fsid={[0xfee3, 0x1]}, {0xff, 0x4, 0x2, 0x3}}, 0x8, &(0x7f0000000680), &(0x7f0000000180)=0xfff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x19, &(0x7f0000000880)=ANY=[@ANYBLOB="18110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000186100000400000000000000f8ffffff852000000300c3e7ad52f52ad7660000b7080000000000007b8af8ff00000000b7080000d80d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70210000800000018230000", @ANYRES8=r3, @ANYBLOB="0000000000000000b70500000800000085000100a50000008520000004000000a75b0000fcffffff186100000129a0a24978372500000000000000310b00008500000042000000"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @cgroup_sysctl, r0, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x9, 0x5, 0x10001}, 0x10, r6, r1, 0x3, &(0x7f0000000140)=[r8, r9, r0, r1, r0, r1, r1], &(0x7f0000000780)=[{0x0, 0x5, 0x8, 0x3}, {0x4, 0x1, 0x4, 0x61a8a9cee2f380e9}, {0x3, 0x20005, 0x4, 0x9}], 0x10, 0xf}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r11 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x10000) close(r10) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 1.406108198s ago: executing program 3 (id=246): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x0, 0x202000000100, 0x40000004, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x20, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @rand_addr, @local}, &(0x7f0000000500)=0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x11, 0x0}, 0xff31) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0xfffffffffffffffd, 0x2]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x19, &(0x7f0000000880)=ANY=[@ANYBLOB="18110000", @ANYBLOB="0000000000000000b7020000000000008500000086000000186100000400000000000000f8ffffff852000000300c3e7ad52f52ad7660000b7080000000000007b8af8ff00000000b7080000d80d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7021000", @ANYRES8=r2, @ANYBLOB="0000000000000000b70500000800000085000100a50000008520000004000000a75b0000fcffffff186100000129a0a24978372500000000000000310b00008500000042000000"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @cgroup_sysctl, r0, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x9, 0x5, 0x10001}, 0x10, r3, r1, 0x3, &(0x7f0000000140)=[r4, 0xffffffffffffffff, r0, r1, r0, r1, r1], &(0x7f0000000780)=[{0x0, 0x5, 0x8, 0x3}, {0x4, 0x1, 0x4, 0x61a8a9cee2f380e9}, {0x3, 0x20005, 0x4, 0x9}], 0x10, 0xf}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000) close(r5) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 1.034380326s ago: executing program 0 (id=247): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0xa) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x1c8080, 0x81) lseek(r6, 0x104, 0x2) getdents64(r6, 0x0, 0x4f) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) setrlimit(0xa, &(0x7f0000000300)={0x80000000, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x25dfdbff, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x6a, 0x1, {0x6, 0x9}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000380)={0x3c0, 0x76, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x2, 0x1, 0xc}) socket$nl_generic(0x10, 0x3, 0x10) 463.300554ms ago: executing program 2 (id=248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x2, &(0x7f0000000540)='addr=127.0.0.1E\xa7T.8\x13.m83\xa1&\xed,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x10\xc5\xec^\x92|\x0e\r\a\xb3\fNe\xfbBo^\xaf\xf7+\xe7I.A\xfdg\xec\xb5\t\xa3+\xd9c\x803\x93\"a\xd1\x02_\xa8#\xec\xe8\xda\xf5\xe4Yr\x8b\xac\xc0\xd0\xf1Y\xa7\xd4\x95\x90\xf7\xd6') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000180)={0x800009, 0x10006}) timerfd_gettime(r0, &(0x7f00000001c0)) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 460.68925ms ago: executing program 3 (id=249): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='0', 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000300)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write$P9_RSTATu(r7, &(0x7f0000000000)=ANY=[], 0x1e) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 221.82487ms ago: executing program 3 (id=250): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000000140)=[{0x0}], 0x1, 0x1001, 0x8008008) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3}) 221.39466ms ago: executing program 3 (id=251): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xa) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x1c8080, 0x81) lseek(r7, 0x104, 0x2) getdents64(r7, 0x0, 0x4f) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0800000000000000000000000000000200000505000100070000004704379bdd46fd34a2fdb4ab"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) setrlimit(0xa, &(0x7f0000000300)={0x80000000, 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x25dfdbff, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x6a, 0x1, {0x6, 0x9}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000380)={0x3c0, 0x76, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x2, 0x1, 0xc}) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=252): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x0, 0x202000000100, 0x40000004, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x20, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @rand_addr, @local}, &(0x7f0000000500)=0xc) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x11, 0x0}, 0xff31) r7 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r8, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0xfffffffffffffffd, 0x2]}}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000700)={r2, &(0x7f0000000600)='\x89\'\x80/\x00', 0x20103, &(0x7f0000000640)={@_ha_fsid={[0xfee3, 0x1]}, {0xff, 0x4, 0x2, 0x3}}, 0x8, &(0x7f0000000680), &(0x7f0000000180)=0xfff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x19, &(0x7f0000000880)=ANY=[@ANYBLOB="18110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000186100000400000000000000f8ffffff852000000300c3e7ad52f52ad7660000b7080000000000007b8af8ff00000000b7080000d80d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70210000800000018230000", @ANYRES8=r3, @ANYBLOB="0000000000000000b70500000800000085000100a50000008520000004000000a75b0000fcffffff186100000129a0a24978372500000000000000310b00008500000042000000"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @cgroup_sysctl, r0, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x9, 0x5, 0x10001}, 0x10, r6, r1, 0x3, &(0x7f0000000140)=[r8, r9, r0, r1, r0, r1, r1], &(0x7f0000000780)=[{0x0, 0x5, 0x8, 0x3}, {0x4, 0x1, 0x4, 0x61a8a9cee2f380e9}, {0x3, 0x20005, 0x4, 0x9}], 0x10, 0xf}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r11 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x10000) close(r10) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:48492' (ED25519) to the list of known hosts. [ 42.071395][ T5713] cgroup: Unknown subsys name 'net' [ 42.180972][ T5713] cgroup: Unknown subsys name 'cpuset' [ 42.187024][ T5713] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.126446][ T5713] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.132256][ T5731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.136127][ T5731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.140687][ T5731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.147751][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.151087][ T5735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.156919][ T5735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.160339][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.163116][ T5735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.163798][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.167112][ T5735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.236937][ T5735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.239395][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.242219][ T5735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.244369][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.246110][ T5735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.249769][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.252325][ T5735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.255911][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.256861][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.261396][ T5735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.824796][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.828744][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.831977][ T5733] bridge_slave_0: entered allmulticast mode [ 47.836021][ T5733] bridge_slave_0: entered promiscuous mode [ 47.885388][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.888242][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.891010][ T5733] bridge_slave_1: entered allmulticast mode [ 47.894560][ T5733] bridge_slave_1: entered promiscuous mode [ 47.928210][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.931441][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.934697][ T5728] bridge_slave_0: entered allmulticast mode [ 47.939050][ T5728] bridge_slave_0: entered promiscuous mode [ 47.967225][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.969869][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.972237][ T5728] bridge_slave_1: entered allmulticast mode [ 47.974992][ T5728] bridge_slave_1: entered promiscuous mode [ 47.990723][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.010129][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.014244][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.031713][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.098299][ T5733] team0: Port device team_slave_0 added [ 48.103251][ T5733] team0: Port device team_slave_1 added [ 48.120295][ T5728] team0: Port device team_slave_0 added [ 48.141921][ T5728] team0: Port device team_slave_1 added [ 48.155271][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.158401][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.160999][ T5744] bridge_slave_0: entered allmulticast mode [ 48.163790][ T5744] bridge_slave_0: entered promiscuous mode [ 48.178685][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.181919][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.192653][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.199401][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.201910][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.204291][ T5744] bridge_slave_1: entered allmulticast mode [ 48.207030][ T5744] bridge_slave_1: entered promiscuous mode [ 48.216109][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.221788][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.230342][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.234573][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.237648][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.247863][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.263594][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.265768][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.273690][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.291148][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.309417][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.356446][ T5744] team0: Port device team_slave_0 added [ 48.376736][ T5744] team0: Port device team_slave_1 added [ 48.386841][ T5728] hsr_slave_0: entered promiscuous mode [ 48.389222][ T5728] hsr_slave_1: entered promiscuous mode [ 48.394858][ T5733] hsr_slave_0: entered promiscuous mode [ 48.397433][ T5733] hsr_slave_1: entered promiscuous mode [ 48.399950][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 48.401660][ T5733] Cannot create hsr debugfs directory [ 48.432682][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.435010][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.442560][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.453232][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.455703][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.464087][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.517023][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.519980][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.522330][ T5743] bridge_slave_0: entered allmulticast mode [ 48.525058][ T5743] bridge_slave_0: entered promiscuous mode [ 48.555156][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.557868][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.560426][ T5743] bridge_slave_1: entered allmulticast mode [ 48.563550][ T5743] bridge_slave_1: entered promiscuous mode [ 48.577956][ T5744] hsr_slave_0: entered promiscuous mode [ 48.581135][ T5744] hsr_slave_1: entered promiscuous mode [ 48.584127][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 48.586577][ T5744] Cannot create hsr debugfs directory [ 48.659934][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.685663][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.741532][ T5743] team0: Port device team_slave_0 added [ 48.746507][ T5743] team0: Port device team_slave_1 added [ 48.788166][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.790425][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.798178][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.805644][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.808485][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.818073][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.863777][ T5743] hsr_slave_0: entered promiscuous mode [ 48.866441][ T5743] hsr_slave_1: entered promiscuous mode [ 48.868628][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 48.870469][ T5743] Cannot create hsr debugfs directory [ 48.978029][ T5728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.987021][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.995606][ T5728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.001350][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.004059][ T5728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.009816][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.013360][ T5728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.017900][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.102342][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.108287][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.111651][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.117137][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.119799][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.124341][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.127185][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.131936][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.184226][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.190059][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.193338][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.198544][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.201475][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.205996][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.209173][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.213417][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.247410][ T64] Bluetooth: hci0: command tx timeout [ 49.247732][ T5735] Bluetooth: hci1: command tx timeout [ 49.275323][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.282534][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.285311][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.291718][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.295106][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.302256][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.305241][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.311170][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.317175][ T5735] Bluetooth: hci2: command tx timeout [ 49.317526][ T64] Bluetooth: hci3: command tx timeout [ 49.377383][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.431527][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.444727][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.447782][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.464965][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.470087][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.472476][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.500295][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.513284][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.516468][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.529900][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.540776][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.543841][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.570081][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.583358][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.593862][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.596547][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.618711][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.622091][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.640654][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.653527][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.655804][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.671802][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.674146][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.853008][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.883812][ T5728] veth0_vlan: entered promiscuous mode [ 49.893844][ T5728] veth1_vlan: entered promiscuous mode [ 49.912740][ T5728] veth0_macvtap: entered promiscuous mode [ 49.922362][ T5728] veth1_macvtap: entered promiscuous mode [ 49.932133][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.942302][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.976012][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.010724][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.023563][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.040709][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.043745][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.062022][ T5744] veth0_vlan: entered promiscuous mode [ 50.083642][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.086634][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.093054][ T5744] veth1_vlan: entered promiscuous mode [ 50.127881][ T5728] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.136022][ T5743] veth0_vlan: entered promiscuous mode [ 50.137262][ T5728] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.143521][ T5733] veth0_vlan: entered promiscuous mode [ 50.144621][ T5728] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.152468][ T5743] veth1_vlan: entered promiscuous mode [ 50.153405][ T5728] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.159916][ T5733] veth1_vlan: entered promiscuous mode [ 50.164874][ T5728] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.172041][ T5744] veth0_macvtap: entered promiscuous mode [ 50.188478][ T5744] veth1_macvtap: entered promiscuous mode [ 50.202875][ T5743] veth0_macvtap: entered promiscuous mode [ 50.220804][ T5743] veth1_macvtap: entered promiscuous mode [ 50.226423][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.240688][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.244639][ T5733] veth0_macvtap: entered promiscuous mode [ 50.250434][ T5733] veth1_macvtap: entered promiscuous mode [ 50.263519][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.277076][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.285489][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.308417][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.326439][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.335681][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.360710][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.363283][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.400336][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.400378][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.403101][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.406425][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.425329][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.428207][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.449114][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.452024][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.475068][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.479525][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.486386][ T5804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.495992][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.501718][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.506685][ T5804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.511554][ T5804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.514776][ T5804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.536412][ T5804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.543974][ T5804] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.552045][ T5804] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.562868][ T5804] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.572984][ T5804] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.578777][ T5804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.587999][ T5804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.593559][ T5804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.624333][ T42] audit: type=1326 audit(1786738368.190:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.1.5" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 50.630982][ T42] audit: type=1326 audit(1786738368.190:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.1.5" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 50.680030][ T5886] process 'syz.1.5' launched './file2' with NULL argv: empty string added [ 50.751635][ T42] audit: type=1326 audit(1786738368.320:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.1.5" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07008 code=0x7ffc0000 [ 50.759572][ T42] audit: type=1326 audit(1786738368.330:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.1.5" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 50.767396][ T42] audit: type=1326 audit(1786738368.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.1.5" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 50.822925][ T5890] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 50.831958][ T5890] capability: warning: `syz.3.6' uses deprecated v2 capabilities in a way that may be insecure [ 50.909905][ T5894] random: crng reseeded on system resumption [ 50.933806][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 50.973958][ T5897] loop5: detected capacity change from 0 to 6735 [ 51.000570][ T5896] jffs2: notice: (5896) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 51.002955][ T5737] Buffer I/O error on dev loop5, logical block 841, async page read [ 51.066272][ T1035] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.216745][ T1035] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 51.223798][ T1035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.227036][ T1035] usb 6-1: Product: syz [ 51.228818][ T1035] usb 6-1: Manufacturer: syz [ 51.230825][ T1035] usb 6-1: SerialNumber: syz [ 51.278709][ T1035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 51.316698][ T64] Bluetooth: hci1: command tx timeout [ 51.326813][ T64] Bluetooth: hci0: command tx timeout [ 51.397869][ T64] Bluetooth: hci3: command tx timeout [ 51.406296][ T64] Bluetooth: hci2: command tx timeout [ 51.421959][ T5901] Zero length message leads to an empty skb [ 51.516197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 51.604983][ T42] audit: type=1326 audit(1786738369.170:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.1.5" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 51.864569][ T42] audit: type=1326 audit(1786738369.170:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.1.5" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71074eb code=0x7ffc0000 [ 51.872437][ T42] audit: type=1326 audit(1786738369.380:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.1.5" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 51.884311][ T42] audit: type=1326 audit(1786738369.380:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.1.5" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 51.892115][ T42] audit: type=1326 audit(1786738369.390:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.1.5" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 51.950606][ T5884] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 51.953385][ T5884] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 51.970705][ T5906] ======================================================= [ 51.970705][ T5906] WARNING: The mand mount option has been deprecated and [ 51.970705][ T5906] and is ignored by this kernel. Remove the mand [ 51.970705][ T5906] option from the mount to silence this warning. [ 51.970705][ T5906] ======================================================= [ 52.003620][ T5884] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.012278][ T5884] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 52.017417][ T5884] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 52.031894][ T5884] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 52.206069][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 52.261108][ T5911] jffs2: notice: (5911) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 52.364928][ T1035] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 52.367868][ T1035] ath9k_htc: Failed to initialize the device [ 52.374329][ T5884] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 52.381186][ T5884] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.391211][ T5884] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.398763][ T1035] usb 6-1: ath9k_htc: USB layer deinitialized [ 52.406098][ T5884] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 52.408957][ T5884] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.423058][ T5884] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.502774][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 52.508480][ T5918] vlan0: entered promiscuous mode [ 52.826330][ T5834] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.977740][ T5834] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 52.985936][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.989761][ T5834] usb 7-1: Product: syz [ 52.991482][ T5834] usb 7-1: Manufacturer: syz [ 52.993381][ T5834] usb 7-1: SerialNumber: syz [ 53.021028][ T5818] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 53.118122][ T5826] usb 6-1: USB disconnect, device number 2 [ 53.323924][ T5922] Console: switching to colour dummy device 80x25 [ 53.393510][ T5923] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 53.437469][ T5923] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 53.443237][ T5923] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 53.451825][ T5923] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 53.467942][ T5923] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 53.527374][ T5916] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.529468][ T5916] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.540823][ T5923] pci 0000:00:01.0: Adding to iommu group 1 [ 53.543792][ T5916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.547486][ T5916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.585008][ T5923] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 53.587370][ T5923] pci 0000:00:01.0: vgaarb: bridge control possible [ 53.590048][ T5923] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 53.623328][ T5923] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 53.656874][ T5923] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 53.690367][ T996] usb 7-1: USB disconnect, device number 2 [ 53.724805][ T5923] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 53.742330][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 53.746617][ T5923] [drm] Found bochs VGA, ID 0xb0c5. [ 53.748316][ T5923] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 53.749904][ T5929] input: syz0 as /devices/virtual/input/input5 [ 53.797902][ T5926] jffs2: notice: (5926) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 53.805512][ T5923] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 53.917164][ T5929] netlink: 'syz.3.14': attribute type 3 has an invalid length. [ 53.920669][ T64] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 54.036634][ T5923] Console: switching to colour frame buffer device 160x50 [ 54.046352][ T5818] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 54.046565][ T5818] ath9k_htc: Failed to initialize the device [ 54.047292][ T996] usb 7-1: ath9k_htc: USB layer deinitialized [ 54.056309][ T5936] binder: 5935:5936 ioctl c00c6211 0 returned -14 [ 54.168178][ T5923] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 54.828145][ T5947] overlayfs: missing 'lowerdir' [ 54.959168][ T5951] overlayfs: missing 'lowerdir' [ 55.076124][ T5954] input: syz0 as /devices/virtual/input/input7 [ 55.087250][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 55.151103][ T5952] jffs2: notice: (5952) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 55.176248][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.217037][ T5957] netlink: 'syz.1.21': attribute type 3 has an invalid length. [ 55.221068][ T64] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 55.332550][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 55.446336][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 55.449790][ T5962] vlan0: entered promiscuous mode [ 55.465843][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.481918][ T24] usb 7-1: Product: syz [ 55.483357][ T24] usb 7-1: Manufacturer: syz [ 55.491878][ T24] usb 7-1: SerialNumber: syz [ 55.569967][ T64] Bluetooth: hci3: command 0x0419 tx timeout [ 55.570080][ T5735] Bluetooth: hci2: command 0x0419 tx timeout [ 55.570145][ T5731] Bluetooth: hci1: command 0x0419 tx timeout [ 55.570183][ T5731] Bluetooth: hci0: command 0x0419 tx timeout [ 55.673615][ T42] kauditd_printk_skb: 102 callbacks suppressed [ 55.673849][ T42] audit: type=1326 audit(1786738373.240:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.2.17" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 55.740514][ T850] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 55.788686][ T42] audit: type=1326 audit(1786738373.280:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.2.17" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 55.801714][ T42] audit: type=1326 audit(1786738373.290:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.2.17" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 55.817867][ T42] audit: type=1326 audit(1786738373.290:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.2.17" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 55.832207][ T42] audit: type=1326 audit(1786738373.290:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.2.17" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 55.846722][ T42] audit: type=1326 audit(1786738373.290:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.2.17" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 55.863648][ T42] audit: type=1326 audit(1786738373.290:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.2.17" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 55.875083][ T42] audit: type=1326 audit(1786738373.290:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.2.17" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 55.891828][ T42] audit: type=1326 audit(1786738373.290:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.2.17" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 55.899060][ T42] audit: type=1326 audit(1786738373.300:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.2.17" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 56.080458][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 56.111822][ T5966] jffs2: notice: (5966) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 56.209733][ T5941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.211895][ T5941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.213960][ T5941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.216409][ T5941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.232119][ T5818] usb 7-1: USB disconnect, device number 3 [ 56.265326][ T5969] netlink: 64 bytes leftover after parsing attributes in process `syz.3.25'. [ 56.268816][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25'. [ 56.319933][ T5974] random: crng reseeded on system resumption [ 56.387041][ T5977] loop5: detected capacity change from 0 to 13871 [ 56.400141][ T5732] Buffer I/O error on dev loop5, logical block 1733, async page read [ 56.406310][ T5977] jffs2: notice: (5977) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 56.996317][ T850] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 56.998885][ T850] ath9k_htc: Failed to initialize the device [ 57.001223][ T5818] usb 7-1: ath9k_htc: USB layer deinitialized [ 57.306843][ T5818] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.397420][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 57.409844][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 57.437352][ T5811] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.456915][ T5818] usb 7-1: Using ep0 maxpacket: 32 [ 57.459619][ T5818] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 57.463918][ T5818] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 57.467823][ T5818] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 57.471693][ T5818] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 57.475259][ T5818] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 57.482500][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.485196][ T5818] usb 7-1: Product: syz [ 57.486644][ T5818] usb 7-1: Manufacturer: syz [ 57.488091][ T5818] usb 7-1: SerialNumber: syz [ 57.496699][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 57.501398][ T5818] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input8 [ 57.609021][ T5811] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 57.633713][ T5811] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 57.636989][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.641931][ T5811] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 57.644682][ T5811] usb 6-1: Manufacturer: syz [ 57.648952][ T5811] usb 6-1: config 0 descriptor?? [ 57.716225][ T5811] rc_core: IR keymap rc-hauppauge not found [ 57.718737][ T5811] Registered IR keymap rc-empty [ 57.722311][ T5811] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 57.729518][ T5811] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 57.752732][ T5992] syz.3.31 (5992) used greatest stack depth: 19528 bytes left [ 57.806202][ T5818] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 57.809000][ T5818] (id 0x00) [ 57.876571][ T5818] rc_core: IR keymap rc-imon-pad not found [ 57.880150][ T5811] usb 6-1: USB disconnect, device number 3 [ 57.882946][ T5818] Registered IR keymap rc-empty [ 57.885756][ T5818] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 57.889069][ T5818] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 57.892167][ T6001] input: syz0 as /devices/virtual/input/input11 [ 58.004142][ T6006] random: crng reseeded on system resumption [ 58.010076][ T5818] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc1 [ 58.018173][ T5818] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc1/input9 [ 58.034509][ T5818] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:4> initialized [ 58.063190][ T6001] netlink: 'syz.3.32': attribute type 3 has an invalid length. [ 58.068119][ T5089] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 58.101983][ T6007] loop5: detected capacity change from 0 to 13903 [ 58.110761][ T5737] Buffer I/O error on dev loop5, logical block 1737, async page read [ 58.119713][ T6007] jffs2: notice: (6007) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 58.141734][ T6010] overlayfs: missing 'lowerdir' [ 58.276262][ T5735] Bluetooth: hci2: command 0x0419 tx timeout [ 58.276280][ T64] Bluetooth: hci1: command 0x0419 tx timeout [ 58.278261][ T5089] Bluetooth: hci3: command 0x0419 tx timeout [ 58.286257][ T5089] Bluetooth: hci0: command 0x0419 tx timeout [ 58.303506][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'. [ 59.074228][ T6022] input: syz0 as /devices/virtual/input/input12 [ 59.114181][ T6024] input: syz0 as /devices/virtual/input/input13 [ 59.186681][ T6022] netlink: 'syz.0.37': attribute type 3 has an invalid length. [ 59.189875][ T5089] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 59.228663][ T6024] netlink: 'syz.3.38': attribute type 3 has an invalid length. [ 59.231841][ T5089] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 59.260965][ T6026] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 59.278365][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.281902][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.293220][ T6029] syz.3.40 uses obsolete (PF_INET,SOCK_PACKET) [ 59.301318][ T6029] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 59.628183][ T996] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 59.670934][ T6041] random: crng reseeded on system resumption [ 59.736088][ T6042] loop5: detected capacity change from 0 to 13719 [ 59.744596][ T5737] Buffer I/O error on dev loop5, logical block 1714, async page read [ 59.780606][ T6042] jffs2: notice: (6042) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 59.790325][ T6043] program syz.1.42 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.813158][ T996] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 59.819281][ T996] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.822900][ T996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.833599][ T996] usb 8-1: config 0 descriptor?? [ 59.998111][ T6046] imon:vfd_write: invalid payload size [ 60.053797][ T6029] trusted_key: encrypted_key: insufficient parameters specified [ 60.060735][ T996] ath6kl: Failed to submit usb control message: -71 [ 60.063421][ T996] ath6kl: unable to send the bmi data to the device: -71 [ 60.066010][ T996] ath6kl: Unable to send get target info: -71 [ 60.077398][ T996] ath6kl: Failed to init ath6kl core: -71 [ 60.082290][ T996] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 60.103220][ T996] usb 8-1: USB disconnect, device number 2 [ 60.357416][ T5089] Bluetooth: hci0: command 0x0419 tx timeout [ 60.357452][ T64] Bluetooth: hci1: command 0x0419 tx timeout [ 60.359837][ T5089] Bluetooth: hci3: command 0x0419 tx timeout [ 60.361464][ T64] Bluetooth: hci2: command 0x0419 tx timeout [ 60.753290][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 60.794049][ T6048] MTD: Couldn't look up './dev/mtdblock0': -2 [ 60.978299][ T6056] Bluetooth: MGMT ver 1.23 [ 61.037347][ T5875] usb 7-1: USB disconnect, device number 4 [ 61.081593][ T6060] input: syz0 as /devices/virtual/input/input15 [ 61.141855][ T6065] random: crng reseeded on system resumption [ 61.176647][ T6066] netlink: 'syz.2.49': attribute type 3 has an invalid length. [ 61.179799][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 61.203949][ T6069] loop5: detected capacity change from 0 to 8663 [ 61.217888][ T5737] Buffer I/O error on dev loop5, logical block 1082, async page read [ 61.218770][ T6069] jffs2: notice: (6069) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 61.255005][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 61.339739][ T6076] input: syz0 as /devices/virtual/input/input16 [ 61.381623][ T6076] netlink: 'syz.0.54': attribute type 3 has an invalid length. [ 61.384547][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 61.480483][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 61.519986][ T6078] MTD: Couldn't look up './dev/mtdblock0': -2 [ 61.984494][ T6083] overlayfs: missing 'lowerdir' [ 62.020126][ T6084] random: crng reseeded on system resumption [ 62.069303][ T6088] overlayfs: missing 'lowerdir' [ 62.081343][ T6089] loop5: detected capacity change from 0 to 12023 [ 62.092575][ T5737] Buffer I/O error on dev loop5, logical block 1502, async page read [ 62.100307][ T6089] jffs2: notice: (6089) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 62.348660][ T6102] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 62.436311][ T64] Bluetooth: hci0: command 0x0419 tx timeout [ 62.436352][ T5735] Bluetooth: hci2: command 0x0419 tx timeout [ 62.436590][ T5089] Bluetooth: hci1: command 0x0419 tx timeout [ 62.436627][ T5089] Bluetooth: hci3: command 0x0419 tx timeout [ 62.597727][ T5875] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 62.627759][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 62.693115][ T6109] input: syz0 as /devices/virtual/input/input18 [ 62.756991][ T5875] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 62.761470][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.765483][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.770300][ T5875] usb 5-1: config 0 descriptor?? [ 62.785043][ T6109] netlink: 'syz.3.66': attribute type 3 has an invalid length. [ 62.791027][ T5735] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 62.819345][ T5737] Buffer I/O error on dev loop5, logical block 1502, async page read [ 62.908907][ T6115] random: crng reseeded on system resumption [ 62.986956][ T6102] trusted_key: encrypted_key: insufficient parameters specified [ 63.013460][ T5875] ath6kl: Failed to submit usb control message: -71 [ 63.016206][ T5875] ath6kl: unable to send the bmi data to the device: -71 [ 63.018969][ T5875] ath6kl: Unable to send get target info: -71 [ 63.021806][ T5875] ath6kl: Failed to init ath6kl core: -71 [ 63.024318][ T5875] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 63.030560][ T5875] usb 5-1: USB disconnect, device number 2 [ 63.049766][ T5732] Buffer I/O error on dev loop5, logical block 1502, async page read [ 63.054379][ T6115] jffs2: notice: (6115) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 63.173974][ T6122] program syz.3.68 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.862497][ T6133] input: syz0 as /devices/virtual/input/input19 [ 63.952387][ T6134] netlink: 'syz.2.73': attribute type 3 has an invalid length. [ 63.958293][ T5735] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 63.980929][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 63.980940][ T42] audit: type=1326 audit(1786738381.550:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.1.74" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 63.990276][ T42] audit: type=1326 audit(1786738381.560:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.1.74" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 64.133636][ T42] audit: type=1326 audit(1786738381.700:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.1.74" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07008 code=0x7ffc0000 [ 64.140327][ T42] audit: type=1326 audit(1786738381.700:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.1.74" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 64.146676][ T42] audit: type=1326 audit(1786738381.700:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.1.74" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 64.296361][ T60] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.449697][ T60] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 64.456056][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.459300][ T60] usb 6-1: Product: syz [ 64.460669][ T60] usb 6-1: Manufacturer: syz [ 64.462221][ T60] usb 6-1: SerialNumber: syz [ 64.480948][ T5880] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 64.684330][ T42] audit: type=1326 audit(1786738382.250:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.1.74" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 64.691863][ T42] audit: type=1326 audit(1786738382.250:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.1.74" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71074eb code=0x7ffc0000 [ 64.744467][ T6142] input: syz0 as /devices/virtual/input/input20 [ 64.788145][ T6144] input: syz0 as /devices/virtual/input/input21 [ 64.810450][ T6144] netlink: 'syz.0.84': attribute type 3 has an invalid length. [ 64.813979][ T5735] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 64.835664][ T6145] netlink: 'syz.2.76': attribute type 3 has an invalid length. [ 64.839484][ T5735] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 64.884789][ T42] audit: type=1326 audit(1786738382.450:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.1.74" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 64.891504][ T42] audit: type=1326 audit(1786738382.450:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.1.74" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 64.898438][ T42] audit: type=1326 audit(1786738382.450:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.1.74" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 64.957232][ T6136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.959417][ T6136] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.961369][ T6136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.963950][ T6136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.979836][ T29] usb 6-1: USB disconnect, device number 4 [ 65.023353][ T6150] jffs2: notice: (6150) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 65.556522][ T5880] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 65.558797][ T5880] ath9k_htc: Failed to initialize the device [ 65.561933][ T29] usb 6-1: ath9k_htc: USB layer deinitialized [ 65.603888][ T6155] input: syz0 as /devices/virtual/input/input22 [ 65.652570][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 65.693596][ T6161] netlink: 'syz.1.78': attribute type 3 has an invalid length. [ 65.702311][ T5735] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 65.761950][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'. [ 65.766869][ T6159] vlan0: entered promiscuous mode [ 65.881546][ T6166] random: crng reseeded on system resumption [ 66.008644][ T6170] loop5: detected capacity change from 0 to 1207 [ 66.048305][ T6171] jffs2: notice: (6171) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 66.586863][ T6177] MTD: Couldn't look up './dev/mtdblock0': -2 [ 66.623650][ T6179] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 66.879587][ T6188] overlayfs: missing 'lowerdir' [ 66.884494][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 66.996315][ T5735] Bluetooth: hci3: command 0x0419 tx timeout [ 66.998415][ T5735] Bluetooth: hci2: command 0x0419 tx timeout [ 67.000397][ T64] Bluetooth: hci1: command 0x0419 tx timeout [ 67.000479][ T5731] Bluetooth: hci0: command 0x0419 tx timeout [ 67.256323][ T5101] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.431235][ T5101] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 67.437972][ T5101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.441550][ T5101] usb 5-1: Product: syz [ 67.446324][ T5101] usb 5-1: Manufacturer: syz [ 67.455209][ T5101] usb 5-1: SerialNumber: syz [ 67.473868][ T5826] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 67.615603][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 67.622204][ T6197] vlan0: entered promiscuous mode [ 67.898734][ T6201] input: syz0 as /devices/virtual/input/input23 [ 67.922300][ T6201] netlink: 'syz.2.92': attribute type 3 has an invalid length. [ 67.925143][ T5731] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 67.948371][ T6190] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 67.951437][ T6190] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.957279][ T6190] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.960286][ T6190] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.029648][ T5880] usb 5-1: USB disconnect, device number 3 [ 68.206388][ T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 68.216708][ T6207] random: crng reseeded on system resumption [ 68.298694][ T6208] jffs2: notice: (6208) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 68.356980][ T60] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 68.369259][ T60] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 68.373551][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.382477][ T60] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 68.384915][ T60] usb 8-1: Manufacturer: syz [ 68.391329][ T60] usb 8-1: config 0 descriptor?? [ 68.446232][ T60] rc_core: IR keymap rc-hauppauge not found [ 68.448166][ T60] Registered IR keymap rc-empty [ 68.450614][ T60] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 68.455785][ T60] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input24 [ 68.516278][ T5826] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 68.519687][ T5826] ath9k_htc: Failed to initialize the device [ 68.522508][ T5880] usb 5-1: ath9k_htc: USB layer deinitialized [ 68.530509][ T6215] loop5: detected capacity change from 0 to 11327 [ 68.542644][ T5732] Buffer I/O error on dev loop5, logical block 1415, async page read [ 68.609877][ T996] usb 8-1: USB disconnect, device number 3 [ 69.184729][ T6226] random: crng reseeded on system resumption [ 69.247903][ T6229] MTD: Couldn't look up './dev/mtdblock0': -2 [ 69.260033][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 69.435662][ T6231] netlink: 64 bytes leftover after parsing attributes in process `syz.1.99'. [ 69.438660][ T6231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.99'. [ 69.911071][ T5737] Buffer I/O error on dev loop5, logical block 1415, async page read [ 69.956292][ T5735] Bluetooth: hci0: command 0x0419 tx timeout [ 69.958498][ T5731] Bluetooth: hci1: command 0x0419 tx timeout [ 70.046638][ T5731] Bluetooth: hci3: command 0x0419 tx timeout [ 70.049579][ T5735] Bluetooth: hci2: command 0x0419 tx timeout [ 70.454646][ T6239] random: crng reseeded on system resumption [ 70.499304][ T6246] input: syz0 as /devices/virtual/input/input25 [ 70.515361][ T6246] netlink: 'syz.3.103': attribute type 3 has an invalid length. [ 70.518454][ T6247] jffs2: notice: (6247) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 70.519050][ T5735] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 70.525482][ T6245] overlayfs: missing 'workdir' [ 70.641550][ T6253] input: syz0 as /devices/virtual/input/input26 [ 70.770346][ T6256] netlink: 'syz.3.107': attribute type 3 has an invalid length. [ 70.774558][ T5735] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 70.775687][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'. [ 70.929136][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.931657][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.054295][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 71.194867][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 71.754756][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 72.349006][ T6271] overlayfs: missing 'workdir' [ 72.397838][ T6273] overlayfs: missing 'lowerdir' [ 72.552447][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 72.825217][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 72.825229][ T42] audit: type=1326 audit(1786738390.390:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.1.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 72.834876][ T42] audit: type=1326 audit(1786738390.400:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.1.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 72.844402][ T42] audit: type=1326 audit(1786738390.400:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.1.118" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 72.960019][ T42] audit: type=1326 audit(1786738390.530:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.1.118" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07008 code=0x7ffc0000 [ 72.968993][ T42] audit: type=1326 audit(1786738390.530:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.1.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 72.981523][ T42] audit: type=1326 audit(1786738390.530:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.1.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 73.038405][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 73.167237][ T850] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 73.369079][ T850] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 73.385839][ T850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.391517][ T850] usb 6-1: Product: syz [ 73.393428][ T850] usb 6-1: Manufacturer: syz [ 73.395725][ T850] usb 6-1: SerialNumber: syz [ 73.740394][ T24] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 73.868822][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.121'. [ 73.994192][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.120'. [ 74.248050][ T42] audit: type=1326 audit(1786738391.820:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.1.118" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 74.255288][ T42] audit: type=1326 audit(1786738391.820:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.1.118" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71074eb code=0x7ffc0000 [ 74.399286][ T6298] random: crng reseeded on system resumption [ 74.452199][ T42] audit: type=1326 audit(1786738392.020:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.1.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 74.467260][ T6299] jffs2: notice: (6299) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 74.474634][ T42] audit: type=1326 audit(1786738392.020:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.1.118" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 74.492115][ T60] usb 6-1: USB disconnect, device number 5 [ 74.836374][ T24] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 74.839124][ T24] ath9k_htc: Failed to initialize the device [ 74.845217][ T60] usb 6-1: ath9k_htc: USB layer deinitialized [ 74.870761][ T6306] overlayfs: missing 'lowerdir' [ 75.103431][ T6313] input: syz0 as /devices/virtual/input/input27 [ 75.182942][ T5735] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 75.186318][ T1035] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.328805][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.127'. [ 75.347318][ T1035] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 75.845303][ T6319] input: syz0 as /devices/virtual/input/input28 [ 75.917197][ T1035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.925731][ T5735] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 76.108620][ T6323] random: crng reseeded on system resumption [ 76.154152][ T1035] usb 7-1: Product: syz [ 76.156365][ T1035] usb 7-1: Manufacturer: syz [ 76.158054][ T1035] usb 7-1: SerialNumber: syz [ 76.173932][ T6324] loop5: detected capacity change from 0 to 12015 [ 76.194680][ T60] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 76.206913][ T6324] jffs2: notice: (6324) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 76.207532][ T5740] Buffer I/O error on dev loop5, logical block 1501, async page read [ 76.289948][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 76.719369][ T5875] usb 7-1: USB disconnect, device number 5 [ 77.070559][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'. [ 77.157532][ T996] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.313719][ T60] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 77.330924][ T996] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 77.364905][ T996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.373527][ T996] usb 5-1: Product: syz [ 77.378656][ T996] usb 5-1: Manufacturer: syz [ 77.399715][ T996] usb 5-1: SerialNumber: syz [ 77.462549][ T60] ath9k_htc: Failed to initialize the device [ 77.465912][ T5875] usb 7-1: ath9k_htc: USB layer deinitialized [ 77.550897][ T6343] random: crng reseeded on system resumption [ 77.674577][ T6345] loop5: detected capacity change from 0 to 8407 [ 77.694246][ T6345] jffs2: notice: (6345) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 77.708314][ T5732] Buffer I/O error on dev loop5, logical block 1050, async page read [ 77.832475][ T6346] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 78.040864][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 78.115250][ T42] kauditd_printk_skb: 81 callbacks suppressed [ 78.115284][ T42] audit: type=1326 audit(1786738395.680:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.125164][ T42] audit: type=1326 audit(1786738395.690:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71274eb code=0x7ffc0000 [ 78.325064][ T42] audit: type=1326 audit(1786738395.890:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.346383][ T42] audit: type=1326 audit(1786738395.890:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.366222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.367321][ T42] audit: type=1326 audit(1786738395.910:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.392357][ T42] audit: type=1326 audit(1786738395.910:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.411931][ T42] audit: type=1326 audit(1786738395.910:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.435010][ T42] audit: type=1326 audit(1786738395.910:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.456814][ T42] audit: type=1326 audit(1786738395.910:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.469662][ T5826] usb 5-1: USB disconnect, device number 4 [ 78.503169][ T42] audit: type=1326 audit(1786738395.910:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.0.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.916286][ T6346] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 78.918658][ T6346] ath9k_htc: Failed to initialize the device [ 79.024573][ T5826] usb 5-1: ath9k_htc: USB layer deinitialized [ 79.406280][ T60] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 79.426267][ T5880] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 79.440626][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 79.478709][ T6371] jffs2: notice: (6371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 79.556848][ T60] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 79.562205][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.564967][ T60] usb 7-1: Product: syz [ 79.566424][ T60] usb 7-1: Manufacturer: syz [ 79.567935][ T60] usb 7-1: SerialNumber: syz [ 79.576777][ T5880] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 79.584800][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.587375][ T5880] usb 6-1: Product: syz [ 79.588827][ T5880] usb 6-1: Manufacturer: syz [ 79.590346][ T5880] usb 6-1: SerialNumber: syz [ 79.593746][ T60] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 79.613001][ T1035] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 79.707177][ T6375] random: crng reseeded on system resumption [ 79.770896][ T6376] jffs2: notice: (6376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.029821][ T5811] usb 7-1: USB disconnect, device number 6 [ 80.103671][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 80.114440][ T24] usb 6-1: USB disconnect, device number 6 [ 80.655228][ T6384] input: syz0 as /devices/virtual/input/input29 [ 80.676577][ T1035] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 80.680259][ T60] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 80.682994][ T1035] ath9k_htc: Failed to initialize the device [ 80.685411][ T24] usb 6-1: ath9k_htc: USB layer deinitialized [ 80.685430][ T60] ath9k_htc: Failed to initialize the device [ 80.693212][ T5811] usb 7-1: ath9k_htc: USB layer deinitialized [ 80.782484][ T6387] netlink: 'syz.2.144': attribute type 3 has an invalid length. [ 80.798722][ T5735] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 80.907947][ T6390] input: syz0 as /devices/virtual/input/input30 [ 80.947697][ T6392] input: syz0 as /devices/virtual/input/input31 [ 80.975364][ T5735] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 81.052350][ T6392] netlink: 'syz.3.147': attribute type 3 has an invalid length. [ 81.055380][ T5735] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 81.173724][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 81.195282][ T9] cfg80211: failed to load regulatory.db [ 81.211633][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'. [ 82.099831][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 82.129952][ T6407] random: crng reseeded on system resumption [ 82.133081][ T6404] jffs2: notice: (6404) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.201125][ T6411] loop5: detected capacity change from 0 to 5183 [ 82.207642][ T6410] input: syz0 as /devices/virtual/input/input32 [ 82.236125][ T6413] input: syz0 as /devices/virtual/input/input33 [ 82.241133][ T6411] jffs2: notice: (6411) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.260068][ T6003] Buffer I/O error on dev loop5, logical block 647, async page read [ 82.315992][ T6418] netlink: 'syz.2.151': attribute type 3 has an invalid length. [ 82.327558][ T5735] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 82.354023][ T5735] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 83.055302][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 83.102173][ T6425] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 83.363866][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 83.507120][ T60] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 83.991957][ T6436] input: syz0 as /devices/virtual/input/input34 [ 84.058483][ T5735] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 84.132410][ T42] kauditd_printk_skb: 117 callbacks suppressed [ 84.132422][ T42] audit: type=1326 audit(1786738401.700:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 84.143764][ T42] audit: type=1326 audit(1786738401.720:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.162" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 84.153058][ T6434] input: syz0 as /devices/virtual/input/input35 [ 84.223398][ T6434] netlink: 'syz.1.160': attribute type 3 has an invalid length. [ 84.229078][ T5735] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 84.267519][ T42] audit: type=1326 audit(1786738401.840:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.162" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fff008 code=0x7ffc0000 [ 84.280324][ T42] audit: type=1326 audit(1786738401.840:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 84.291784][ T42] audit: type=1326 audit(1786738401.840:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 84.626253][ T60] usb 8-1: device descriptor read/64, error -71 [ 84.841535][ T42] audit: type=1326 audit(1786738402.410:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.1.172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 84.852877][ T42] audit: type=1326 audit(1786738402.410:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.1.172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 84.866556][ T42] audit: type=1326 audit(1786738402.420:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.1.172" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 84.877744][ T60] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.884206][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 84.908027][ T6450] jffs2: notice: (6450) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.916928][ T42] audit: type=1326 audit(1786738402.490:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6454 comm="syz.0.165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 84.925769][ T42] audit: type=1326 audit(1786738402.490:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6454 comm="syz.0.165" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 85.026967][ T60] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 85.033475][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.037297][ T60] usb 8-1: Product: syz [ 85.039006][ T60] usb 8-1: Manufacturer: syz [ 85.040904][ T60] usb 8-1: SerialNumber: syz [ 85.062165][ T1035] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 85.216357][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.216387][ T6346] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 85.366705][ T6346] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 85.367537][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 85.372068][ T6346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.375024][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.375040][ T24] usb 5-1: Product: syz [ 85.375047][ T24] usb 5-1: Manufacturer: syz [ 85.375054][ T24] usb 5-1: SerialNumber: syz [ 85.382578][ T6346] usb 6-1: Product: syz [ 85.383932][ T6346] usb 6-1: Manufacturer: syz [ 85.385389][ T6346] usb 6-1: SerialNumber: syz [ 85.393616][ T5811] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 85.401655][ T5875] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 85.530271][ T6439] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.532469][ T6439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.534700][ T6439] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.537125][ T6439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.595237][ T6463] jffs2: notice: (6463) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 85.618306][ T60] usb 8-1: USB disconnect, device number 6 [ 85.861001][ T6452] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.863036][ T6452] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.864908][ T6452] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.867555][ T6452] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.887012][ T34] usb 6-1: USB disconnect, device number 7 [ 85.889128][ T5826] usb 5-1: USB disconnect, device number 5 [ 86.116225][ T1035] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 86.118549][ T1035] ath9k_htc: Failed to initialize the device [ 86.122027][ T60] usb 8-1: ath9k_htc: USB layer deinitialized [ 86.238202][ T6471] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 86.438878][ T6480] random: crng reseeded on system resumption [ 86.446199][ T5811] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 86.447084][ T5875] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 86.448889][ T5811] ath9k_htc: Failed to initialize the device [ 86.452939][ T5875] ath9k_htc: Failed to initialize the device [ 86.453555][ T5826] usb 5-1: ath9k_htc: USB layer deinitialized [ 86.455023][ T34] usb 6-1: ath9k_htc: USB layer deinitialized [ 86.500441][ T6482] loop5: detected capacity change from 0 to 12599 [ 86.525412][ T6483] jffs2: notice: (6483) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 86.539519][ T5732] Buffer I/O error on dev loop5, logical block 1574, async page read [ 86.641596][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'. [ 86.644724][ T6491] input: syz0 as /devices/virtual/input/input36 [ 86.715262][ T5735] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 87.364262][ T6499] random: crng reseeded on system resumption [ 87.424063][ T6501] loop5: detected capacity change from 0 to 14215 [ 87.440389][ T5737] Buffer I/O error on dev loop5, logical block 1776, async page read [ 87.454513][ T6501] No source specified [ 87.569136][ T6504] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 87.604987][ T6507] overlay: filesystem on ./file0 not supported as upperdir [ 87.691555][ T6514] input: syz0 as /devices/virtual/input/input37 [ 87.765368][ T5735] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 87.796189][ T6519] jffs2: notice: (6519) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.882634][ T5735] Bluetooth: hci3: command 0x0419 tx timeout [ 87.882705][ T64] Bluetooth: hci1: command 0x0419 tx timeout [ 87.882721][ T5089] Bluetooth: hci0: command 0x0419 tx timeout [ 87.883292][ T5731] Bluetooth: hci2: command 0x0419 tx timeout [ 88.017088][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 88.177387][ T5737] Buffer I/O error on dev loop5, logical block 1776, async page read [ 89.104700][ T6537] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 89.535173][ T42] kauditd_printk_skb: 94 callbacks suppressed [ 89.535185][ T42] audit: type=1326 audit(1786738407.100:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 89.546351][ T42] audit: type=1326 audit(1786738407.110:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 89.553584][ T42] audit: type=1326 audit(1786738407.110:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.195" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf702efec code=0x7ffc0000 [ 89.554903][ T6558] random: crng reseeded on system resumption [ 89.630934][ T6560] loop5: detected capacity change from 0 to 13703 [ 89.662271][ T42] audit: type=1326 audit(1786738407.230:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.195" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 89.664586][ T6560] No source specified [ 89.671724][ T42] audit: type=1326 audit(1786738407.230:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 89.677565][ T5737] Buffer I/O error on dev loop5, logical block 1712, async page read [ 89.680710][ T42] audit: type=1326 audit(1786738407.230:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 89.856242][ T5875] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 90.018334][ T5875] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 90.024022][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.027347][ T5875] usb 7-1: Product: syz [ 90.028904][ T5875] usb 7-1: Manufacturer: syz [ 90.030514][ T5875] usb 7-1: SerialNumber: syz [ 90.048335][ T996] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 90.194352][ T6564] input: syz0 as /devices/virtual/input/input38 [ 90.270756][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.196'. [ 90.271990][ T42] audit: type=1326 audit(1786738407.840:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.195" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 90.281484][ T42] audit: type=1326 audit(1786738407.840:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.195" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71674eb code=0x7ffc0000 [ 90.288206][ T64] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 90.472334][ T42] audit: type=1326 audit(1786738408.040:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 90.485296][ T42] audit: type=1326 audit(1786738408.050:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.2.195" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702efec code=0x7ffc0000 [ 90.546594][ T6556] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.553713][ T6556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.562720][ T6556] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.567140][ T6556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.684553][ T5826] usb 7-1: USB disconnect, device number 7 [ 91.086265][ T996] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 91.088658][ T996] ath9k_htc: Failed to initialize the device [ 91.091884][ T5826] usb 7-1: ath9k_htc: USB layer deinitialized [ 91.127157][ T6577] random: crng reseeded on system resumption [ 91.189870][ T6578] jffs2: notice: (6578) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.397053][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 91.679224][ T6589] loop5: detected capacity change from 0 to 10015 [ 91.703991][ T5732] Buffer I/O error on dev loop5, logical block 1251, async page read [ 91.790993][ T6590] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 92.345423][ T6598] random: crng reseeded on system resumption [ 92.421915][ T5737] Buffer I/O error on dev loop5, logical block 1251, async page read [ 92.426979][ T6602] No source specified [ 92.470175][ T6606] input: syz0 as /devices/virtual/input/input39 [ 92.508254][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.208'. [ 92.544529][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 92.606311][ T64] Bluetooth: hci3: command 0x0419 tx timeout [ 92.606414][ T5735] Bluetooth: hci2: command 0x0419 tx timeout [ 92.608981][ T64] Bluetooth: hci1: command 0x0419 tx timeout [ 92.611494][ T5731] Bluetooth: hci0: command 0x0419 tx timeout [ 93.438670][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 93.440195][ T6620] random: crng reseeded on system resumption [ 93.505754][ T6621] jffs2: notice: (6621) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 93.596423][ T5826] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 93.720728][ T6624] overlayfs: missing 'lowerdir' [ 93.748249][ T5826] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 93.757822][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.760693][ T5826] usb 6-1: Product: syz [ 93.763183][ T5826] usb 6-1: Manufacturer: syz [ 93.765762][ T5826] usb 6-1: SerialNumber: syz [ 93.795647][ T6626] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.797337][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.241534][ T5811] usb 6-1: USB disconnect, device number 8 [ 94.373587][ T6642] overlayfs: missing 'lowerdir' [ 94.505034][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 94.556283][ T996] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 94.596698][ T5875] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 94.708983][ T996] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.714942][ T996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.717678][ T996] usb 7-1: Product: syz [ 94.719011][ T996] usb 7-1: Manufacturer: syz [ 94.720550][ T996] usb 7-1: SerialNumber: syz [ 94.739288][ T50] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.767019][ T5875] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.772912][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.775597][ T5875] usb 8-1: Product: syz [ 94.777183][ T5875] usb 8-1: Manufacturer: syz [ 94.778736][ T5875] usb 8-1: SerialNumber: syz [ 94.807369][ T5875] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.836288][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 94.838938][ T9] ath9k_htc: Failed to initialize the device [ 94.841850][ T5811] usb 6-1: ath9k_htc: USB layer deinitialized [ 94.946890][ T42] kauditd_printk_skb: 79 callbacks suppressed [ 94.946908][ T42] audit: type=1326 audit(1786738412.520:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.2.225" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 94.957191][ T42] audit: type=1326 audit(1786738412.520:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.2.225" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71674eb code=0x7ffc0000 [ 95.016283][ T42] audit: type=1326 audit(1786738412.580:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.217" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 95.024074][ T42] audit: type=1326 audit(1786738412.590:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.217" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 95.124138][ T6649] binder: 6648:6649 ioctl c00c6211 0 returned -14 [ 95.148423][ T42] audit: type=1326 audit(1786738412.720:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.2.225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 95.155106][ T42] audit: type=1326 audit(1786738412.720:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.2.225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 95.161902][ T42] audit: type=1326 audit(1786738412.720:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.2.225" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702efec code=0x7ffc0000 [ 95.208059][ T6634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.210832][ T6634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.213387][ T6634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.215998][ T6634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.220857][ T42] audit: type=1326 audit(1786738412.790:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.2.225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 95.244254][ T42] audit: type=1326 audit(1786738412.800:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 95.260585][ T9] usb 7-1: USB disconnect, device number 8 [ 95.263641][ T42] audit: type=1326 audit(1786738412.800:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.3.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 95.287856][ T5826] usb 8-1: USB disconnect, device number 7 [ 95.412436][ T6657] random: crng reseeded on system resumption [ 95.473170][ T6658] loop5: detected capacity change from 0 to 10591 [ 95.482989][ T5737] Buffer I/O error on dev loop5, logical block 1323, async page read [ 95.796302][ T50] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 95.798869][ T50] ath9k_htc: Failed to initialize the device [ 95.802644][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 95.886506][ T5875] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 95.888928][ T5875] ath9k_htc: Failed to initialize the device [ 95.891234][ T5826] usb 8-1: ath9k_htc: USB layer deinitialized [ 96.002021][ T6663] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.316341][ T5875] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 96.388818][ T6673] random: crng reseeded on system resumption [ 96.472619][ T5875] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 96.483661][ T6679] jffs2: notice: (6679) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.495765][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.499190][ T5875] usb 8-1: Product: syz [ 96.501131][ T5875] usb 8-1: Manufacturer: syz [ 96.504444][ T5875] usb 8-1: SerialNumber: syz [ 96.514452][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'. [ 96.766356][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'. [ 96.857549][ T5875] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 97.236696][ T5735] Bluetooth: hci0: command 0x0419 tx timeout [ 97.236782][ T64] Bluetooth: hci2: command 0x0419 tx timeout [ 97.240264][ T5735] Bluetooth: hci1: command 0x0419 tx timeout [ 97.240828][ T5731] Bluetooth: hci3: command 0x0419 tx timeout [ 97.547833][ T6660] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.553259][ T6660] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.562348][ T6660] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.575930][ T6660] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.648158][ T50] usb 8-1: USB disconnect, device number 8 [ 97.861076][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'. [ 97.945709][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 98.128230][ T5875] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 98.165462][ T5875] ath9k_htc: Failed to initialize the device [ 98.185116][ T50] usb 8-1: ath9k_htc: USB layer deinitialized [ 98.764414][ T6703] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 98.815748][ T6706] random: crng reseeded on system resumption [ 98.883118][ T6710] loop5: detected capacity change from 0 to 8943 [ 98.894978][ T5737] Buffer I/O error on dev loop5, logical block 1117, async page read [ 98.985124][ T6714] input: syz0 as /devices/virtual/input/input41 [ 99.001571][ T6714] netlink: 'syz.3.241': attribute type 3 has an invalid length. [ 99.004428][ T5731] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 99.076365][ T50] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 99.124332][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.242'. [ 99.227100][ T50] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 99.236679][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.239228][ T50] usb 5-1: Product: syz [ 99.240495][ T50] usb 5-1: Manufacturer: syz [ 99.242361][ T50] usb 5-1: SerialNumber: syz [ 99.260251][ T50] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 99.298499][ T6721] jffs2: notice: (6721) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.556342][ T5735] Bluetooth: hci0: command 0x0419 tx timeout [ 99.556342][ T5731] Bluetooth: hci1: command 0x0419 tx timeout [ 99.637135][ T5735] Bluetooth: hci2: command 0x0419 tx timeout [ 99.637284][ T5731] Bluetooth: hci3: command 0x0419 tx timeout [ 99.726459][ T6699] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.728507][ T6699] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.730408][ T6699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.732371][ T6699] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.743387][ T5826] usb 5-1: USB disconnect, device number 6 [ 100.025807][ T6730] random: crng reseeded on system resumption [ 100.029354][ T42] kauditd_printk_skb: 159 callbacks suppressed [ 100.029368][ T42] audit: type=1326 audit(1786738417.610:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 100.098114][ T42] audit: type=1326 audit(1786738417.670:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 100.106495][ T6733] loop5: detected capacity change from 0 to 8431 [ 100.115390][ T6733] MTD: Couldn't look up './dev/mtdblock0': -2 [ 100.115880][ T5737] Buffer I/O error on dev loop5, logical block 1053, async page read [ 100.156260][ T5875] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 100.160153][ T42] audit: type=1326 audit(1786738417.730:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 100.168984][ T42] audit: type=1326 audit(1786738417.730:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 100.177272][ T42] audit: type=1326 audit(1786738417.750:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 100.200761][ T6735] jffs2: notice: (6735) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 100.236641][ T42] audit: type=1326 audit(1786738417.810:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 100.276249][ T50] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 100.279344][ T50] ath9k_htc: Failed to initialize the device [ 100.282120][ T5826] usb 5-1: ath9k_htc: USB layer deinitialized [ 100.316866][ T42] audit: type=1326 audit(1786738417.890:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 100.325367][ T5875] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 100.330556][ T42] audit: type=1326 audit(1786738417.890:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 100.339593][ T42] audit: type=1326 audit(1786738417.910:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 100.348297][ T42] audit: type=1326 audit(1786738417.920:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 100.359350][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.366318][ T5875] usb 6-1: Product: syz [ 100.367964][ T5875] usb 6-1: Manufacturer: syz [ 100.370077][ T5875] usb 6-1: SerialNumber: syz [ 100.407396][ T996] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 100.431985][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 100.884893][ T6725] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.887170][ T6725] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.889238][ T6725] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.891440][ T6725] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.911969][ T5826] usb 6-1: USB disconnect, device number 9 [ 101.058190][ T6743] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.259456][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 101.470051][ T6745] Oops: general protection fault, probably for non-canonical address 0xe000080fe2a93ddf: 0000 [#1] SMP KASAN NOPTI [ 101.473977][ T6745] KASAN: maybe wild-memory-access in range [0x0000607f1549eef8-0x0000607f1549eeff] [ 101.477195][ T6745] CPU: 2 UID: 0 PID: 6745 Comm: syz.2.248 Not tainted syzkaller #0 PREEMPT(full) [ 101.480119][ T6745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.483399][ T6745] RIP: 0010:try_module_get+0x23/0xd0 [ 101.485317][ T6745] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 101.491781][ T6745] RSP: 0000:ffffc900047878c0 EFLAGS: 00010202 [ 101.493460][ T6754] random: crng reseeded on system resumption [ 101.494090][ T6745] RAX: dffffc0000000000 RBX: 0000607f1549eef8 RCX: ffffc90029dd8000 [ 101.494108][ T6745] RDX: 00000c0fe2a93ddf RSI: ffffffff8818db80 RDI: 0000607f1549eef8 [ 101.497322][ T6754] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 101.499310][ T6745] RBP: ffff888000b8e000 R08: 0000000000000001 R09: fffffbfff206dc35 [ 101.499328][ T6745] R10: ffffffff9036e1af R11: 0000000000000000 R12: ffff888023fdd880 [ 101.499342][ T6745] R13: ffff88806b11fd00 R14: ffff8880282255b8 R15: ffff888023fdd8c8 [ 101.501822][ T6754] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 101.505145][ T6745] FS: 0000000000000000(0000) GS:ffff888096de8000(0063) knlGS:00000000f541db40 [ 101.505184][ T6745] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 101.507745][ T6754] PM: hibernation: Basic memory bitmaps created [ 101.510946][ T6745] CR2: 0000000080000000 CR3: 000000004ef35000 CR4: 0000000000352ef0 [ 101.526019][ T6745] Call Trace: [ 101.527408][ T6745] [ 101.528627][ T6745] dvb_device_open+0x124/0x3b0 [ 101.530248][ T6745] ? __pfx_dvb_device_open+0x10/0x10 [ 101.531950][ T6745] chrdev_open+0x234/0x6a0 [ 101.533377][ T6745] ? __pfx_apparmor_file_open+0x10/0x10 [ 101.535164][ T6745] ? __pfx_chrdev_open+0x10/0x10 [ 101.536800][ T6745] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 101.538847][ T6745] do_dentry_open+0x6ab/0x14d0 [ 101.540381][ T6745] ? __pfx_chrdev_open+0x10/0x10 [ 101.541985][ T6745] vfs_open+0x82/0x3f0 [ 101.543315][ T6745] path_openat+0x2873/0x4280 [ 101.544799][ T6745] ? __pfx_path_openat+0x10/0x10 [ 101.546572][ T6745] do_file_open+0x20e/0x430 [ 101.548129][ T6745] ? __lock_acquire+0x49f/0x1a40 [ 101.549784][ T6745] ? __pfx_do_file_open+0x10/0x10 [ 101.551430][ T6745] ? _raw_spin_unlock+0x28/0x50 [ 101.553012][ T6745] ? alloc_fd+0x471/0x7a0 [ 101.554405][ T6745] do_sys_openat2+0x10f/0x1e0 [ 101.555976][ T6745] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.557659][ T6745] __ia32_compat_sys_openat+0x12d/0x210 [ 101.559466][ T6745] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 101.561468][ T6745] do_int80_emulation+0x14b/0x720 [ 101.563231][ T6745] asm_int80_emulation+0x1a/0x20 [ 101.564955][ T6745] RIP: 0023:0xf71674eb [ 101.566563][ T6745] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 101.572915][ T6745] RSP: 002b:00000000f541d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 101.575506][ T6745] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f541d100 [ 101.578423][ T6745] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.580907][ T6745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.583483][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.585997][ T6745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.588969][ T6745] [ 101.589969][ T6745] Modules linked in: [ 101.591694][ T6745] ---[ end trace 0000000000000000 ]--- [ 101.597711][ T6755] loop5: detected capacity change from 0 to 26223 [ 101.598244][ T6745] RIP: 0010:try_module_get+0x23/0xd0 [ 101.601521][ T6745] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 101.607770][ T6745] RSP: 0000:ffffc900047878c0 EFLAGS: 00010202 [ 101.609775][ T6745] RAX: dffffc0000000000 RBX: 0000607f1549eef8 RCX: ffffc90029dd8000 [ 101.612388][ T6745] RDX: 00000c0fe2a93ddf RSI: ffffffff8818db80 RDI: 0000607f1549eef8 [ 101.615047][ T6745] RBP: ffff888000b8e000 R08: 0000000000000001 R09: fffffbfff206dc35 [ 101.617988][ T6745] R10: ffffffff9036e1af R11: 0000000000000000 R12: ffff888023fdd880 [ 101.620609][ T6745] R13: ffff88806b11fd00 R14: ffff8880282255b8 R15: ffff888023fdd8c8 [ 101.623134][ T6745] FS: 0000000000000000(0000) GS:ffff888096de8000(0063) knlGS:00000000f541db40 [ 101.625967][ T6745] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 101.628417][ T6745] CR2: 00007f89adb085d0 CR3: 000000004ef35000 CR4: 0000000000352ef0 [ 101.631079][ T6745] Kernel panic - not syncing: Fatal exception [ 101.633572][ T6745] Kernel Offset: disabled [ 101.634923][ T6745] Rebooting in 86400 seconds..